Published threat advisories for September 8, 2026

OPNsense platforms contain a path traversal vulnerability in the NTP configuration module that allows an authenticated attacker to overwrite arbitrary system files as root. Given OPNsense's common deployment as an internet-facing firewall, this vulnerability could lead to system compromise if the NTP configuration is r

NVD modified: NVD date unavailable

A stored cross-site scripting vulnerability exists in the Auth0 AD/LDAP Connector due to improper HTML encoding. An authenticated user or a local user on the connector's host could insert script content into directory attributes or log files. This script may execute in an administrator's browser when they view specific

NVD modified: NVD date unavailable

Insecure default configurations and credentials in the development version of Eclipse aeriOS's Identity Manager could allow an attacker to gain administrative access to the system or its database. This could lead to unauthorized access, modification, or creation of sensitive identity data, including user credentials an

NVD modified: NVD date unavailable

A vulnerability exists in the ScreenConnect client that may allow unauthorized file transfers and execution during an active remote session. ScreenConnect servers are not impacted. This could lead to compromise of the client system if reachable or relevant.

NVD modified: NVD date unavailable

A vulnerability in the Eclipse Ditto Node.js client's WebSocket transport disables certificate validation, allowing an attacker who can intercept the connection to impersonate the server, read, modify, or inject messages. This impacts client communication security and could expose credentials. Confirming the use and re

NVD modified: NVD date unavailable

A SQL injection vulnerability in ColdFusion could allow an attacker with high privileges to execute arbitrary code, potentially impacting system operations. This flaw does not require user interaction and changes the system's scope.

NVD modified: NVD date unavailable

A missing permission check in the device's permissions manager could allow sensitive state data to be monitored locally. This vulnerability may lead to local information disclosure without user interaction or special privileges, impacting the confidentiality of device information.

NVD modified: NVD date unavailable

An "Eval Injection" vulnerability in ColdFusion allows a low-privileged attacker to execute arbitrary code remotely without user interaction. If reachable, this could lead to system compromise and impact data confidentiality, integrity, and availability. Organizations using ColdFusion should confirm its presence and ex

NVD modified: NVD date unavailable

A missing permission check in MicroXR Blobstore could allow unauthorized access to other applications' files, potentially leading to local privilege escalation without additional execution privileges, as user interaction is not required. This raises concerns about unauthorized file access and data integrity on affected

NVD modified: NVD date unavailable

Adobe Experience Manager has an incorrect authorization vulnerability that could allow a low-privileged attacker to execute arbitrary code, potentially gaining elevated access or control over a user's session without interaction. This external threat is relevant because the platform is often internet-facing.

NVD modified: NVD date unavailable

Adobe Campaign Classic has a critical OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary code remotely. This could impact system integrity and data security. Confirmation of use and potential exposure is needed.

NVD modified: NVD date unavailable

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject malicious scripts into form fields. If reachable, these scripts can execute in a victim's browser, potentially granting the attacker elevated access or control over the victim's account or session. This is

NVD modified: NVD date unavailable

Adobe Commerce is affected by a stored Cross-Site Scripting vulnerability allowing attackers to inject malicious scripts into form fields. This could lead to the execution of malicious JavaScript in a victim's browser, potentially granting unauthorized access or control over their account or session. Confirmation of af

NVD modified: NVD date unavailable

A critical vulnerability in Skype for Business allows unauthorized network code execution by manipulating file names or paths. This could lead to compromised systems, impacting confidentiality, integrity, and availability. Organizations should confirm if this technology is in use and assess potential exposure.

NVD modified: NVD date unavailable

A critical memory safety flaw allows remote code execution without user interaction. If reachable, this heap buffer overflow could enable attackers to compromise systems by sending malformed data over the network, necessitating an understanding of affected technologies and their exposure.

NVD modified: NVD date unavailable

A logic error in Android's Bluetooth pairing can allow attackers to escalate privileges remotely without user interaction, bypassing normal pairing procedures. While this vulnerability has critical severity, its practical reach is limited by Bluetooth's short-range nature. Consider if sensitive data is on devices and a

NVD modified: NVD date unavailable

A critical vulnerability exists in Microsoft Entra ID, a cloud-based identity and access management service, due to missing authorization checks. If reachable, an authenticated attacker with network access could escalate privileges. This is significant because Entra ID is fundamental to managing user access and securit

NVD modified: NVD date unavailable

A vulnerability in Visual Studio Code allows an unauthorized attacker to bypass security features over a network. This could impact confidentiality, integrity, and availability if a user interacts with malicious content or a compromised source. Confirming relevance and exposure is important for understanding developer

NVD modified: NVD date unavailable

A critical heap-based buffer overflow vulnerability exists in Microsoft Office Word that could permit an unauthorized attacker to execute code over a network. If reachable, this could potentially lead to broad system compromise. Understanding the relevance and exposure of this threat to our environment is key.

NVD modified: NVD date unavailable

A heap-based buffer overflow in Microsoft Office Outlook could permit an unauthorized attacker to execute code over a network. This vulnerability, if reachable, may affect system confidentiality, integrity, and availability. The widespread use of Outlook makes its potential relevance to the environment a concern.

NVD modified: NVD date unavailable

A critical use-after-free vulnerability in Windows Services for NFS allows network-based code execution by an unauthorized attacker. This could impact system integrity and availability if the service is exposed. Uncertainty remains regarding its actual deployment and reachability within the environment.

NVD modified: NVD date unavailable

A critical vulnerability in the Microsoft Graphics Component allows an unauthorized attacker to execute code over a network. This could lead to a complete system compromise if the component is reachable. Leadership should confirm its relevance to the organization.

NVD modified: NVD date unavailable

A critical vulnerability exists in Windows iSCSI, a network storage technology, allowing remote attackers to bypass security features due to weak authentication. If reachable, this could lead to unauthorized access and modification of sensitive storage data. Organizations should confirm if they use Windows iSCSI and as

NVD modified: NVD date unavailable

A use-after-free vulnerability in Windows Failover Cluster allows an unauthorized attacker to execute code over a network, potentially impacting system availability and integrity. Confirmation of this technology's use and network exposure within the environment is crucial.

NVD modified: NVD date unavailable

A use-after-free vulnerability exists in Windows Secure Socket Tunneling Protocol, allowing an unauthorized attacker to execute code over a network. This could impact system integrity and confidentiality. The concern is to determine if the environment is affected, as it is exploitable over a network and allows unauthor

NVD modified: NVD date unavailable

A use-after-free flaw in Windows Internet Connection Sharing (ICS) enables an unauthorized attacker to execute code remotely over a network by sending specially crafted network traffic. The specific reachability and impact are currently under analysis, and it is uncertain if this technology is in use within the environ

NVD modified: NVD date unavailable

A critical vulnerability exists in the Windows Netlogon service, enabling unauthorized remote code execution over a network. This flaw could allow attackers to compromise affected systems by sending specially crafted network traffic. While Netlogon is typically protected and not exposed externally, the potential for sy

NVD modified: NVD date unavailable

A use-after-free vulnerability in Windows DHCP Server allows an unauthorized remote attacker to execute code over a network, impacting system integrity and service availability. This critical flaw requires assessment to confirm its relevance and potential exposure within our environment. The main concern is understandi

NVD modified: NVD date unavailable

An out-of-bounds write in the Windows Imaging Component could allow an unauthorized attacker to execute code over a network. This vulnerability might affect systems processing image files, potentially leading to unauthorized code execution. The relevance and exposure of this component within our environment need to be

NVD modified: NVD date unavailable

A stack-based buffer overflow in Windows Hyper-V permits an unauthorized attacker to execute code over a network. This vulnerability, if reachable, could impact the integrity and availability of affected systems. Readers should care because Hyper-V is core to modern infrastructure, and network-based code execution can

NVD modified: NVD date unavailable

An improper authentication vulnerability in Spring Cloud Azure could allow an unauthorized attacker to elevate privileges over a network. This matters because the technology is commonly used in cloud-native applications, potentially exposing network-accessible systems. The concern is confirming relevance and exposure.

NVD modified: NVD date unavailable

A heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network. This could impact the availability and integrity of affected systems, which are core network services responsible for IP address allocation. It is uncertain if exploitation is likely as DHCP servers are t

NVD modified: NVD date unavailable

A heap-based buffer overflow in Windows Shell could allow an unauthorized attacker to execute code over a network. This critical vulnerability affects a core operating system component and may pose a risk to system integrity and confidentiality if reachable.

NVD modified: NVD date unavailable

A critical integer underflow vulnerability exists in Microsoft Standard XPS, potentially allowing an unauthorized attacker to execute code over a network. While typically a client-side component, its network-reachable nature means this flaw could enable remote code execution if exposed. Understanding and confirming the

NVD modified: NVD date unavailable

An out-of-bounds write vulnerability exists in the RPC Runtime, enabling unauthorized network-based code execution. If reachable, this could allow an attacker to compromise affected systems remotely. This issue is relevant for understanding potential impacts on core services and network-exposed components.

NVD modified: NVD date unavailable

A heap-based buffer overflow in the Windows HTTP Print Provider may permit an unauthorized attacker to execute code remotely. This could compromise system integrity and confidentiality if the vulnerable component is exposed. Readers should verify if this print service technology is in use and potentially reachable.

NVD modified: NVD date unavailable

A critical heap-based buffer overflow vulnerability exists in Windows RNDIS, a network protocol. An unauthenticated attacker could exploit this remotely to execute code, potentially leading to system compromise. Leaders should understand the relevance and potential exposure of this protocol in their environment.

NVD modified: NVD date unavailable

A critical use-after-free vulnerability in Windows DNS allows an unauthenticated attacker to execute code remotely over a network, potentially impacting systems reliant on DNS for name resolution.

NVD modified: NVD date unavailable

An out-of-bounds read in Windows Direct Show, a multimedia framework, may allow an unauthorized attacker to execute code over a network. The practical impact of this vulnerability is considered very unlikely in typical deployments due to Direct Show's primary use in local media processing. The key concern is to confirm

NVD modified: NVD date unavailable

A heap-based buffer overflow in the Windows Kernel allows an unauthorized attacker to execute code over a network, potentially impacting system integrity and availability. The relevance and exposure of this vulnerability within our environment need to be confirmed.

NVD modified: NVD date unavailable

Microsoft Exchange Server contains a privilege escalation vulnerability due to missing authorization, allowing an authenticated attacker to gain higher network privileges. This could lead to unauthorized access and disruption of services.

NVD modified: NVD date unavailable

A critical use-after-free vulnerability in Windows Services for NFS allows unauthorized network access to execute code. This could impact system integrity and availability if the service is exposed. Confirming its use and network reachability is key to understanding potential risk.

NVD modified: NVD date unavailable

A critical vulnerability in Windows Routing and Remote Access Service allows unauthenticated network attackers to execute arbitrary code on a victim machine, potentially leading to unauthorized access and system compromise. Because this service is often internet-facing for remote access, its exposure makes it a target.

NVD modified: NVD date unavailable

An integer overflow in Microsoft Windows PDF processing enables network-based code execution by an unauthorized attacker. The technology is Microsoft Windows PDF, and the vulnerability allows for remote code execution. It is uncertain if this vulnerability is reachable or relevant in your specific environment.

NVD modified: NVD date unavailable

A use-after-free vulnerability in Windows Message Queuing allows an unauthorized network attacker to execute code. This impacts systems using the messaging service and requires confirmation of relevant instances and exposure across a network.

NVD modified: NVD date unavailable

A critical use-after-free vulnerability in Windows Remote Desktop Services may permit an unauthenticated network attacker to execute arbitrary code. This flaw could potentially lead to unauthorized system compromise, impacting integrity and availability. Understanding the exposure of this often internet-facing technolo

NVD modified: NVD date unavailable

A critical heap-based buffer overflow in Windows Compressed Folders allows an unauthorized attacker to execute code over a network. This could lead to the compromise of system data and services. The relevance and network exposure of this feature within the environment need to be confirmed.

NVD modified: NVD date unavailable

An out-of-bounds read in the Windows Event Logging Service enables unauthorized network-based code execution. This affects a core operating system component, posing a significant risk if reachable. Organizations should verify the exposure of this service to understand potential impact.

NVD modified: NVD date unavailable

A heap-based buffer overflow in Windows Microsoft DirectMusic may allow an unauthorized attacker to execute code over a network. This vulnerability affects the operating system's multimedia capabilities and, if reachable, could lead to unauthorized code execution.

NVD modified: NVD date unavailable

A critical heap-based buffer overflow vulnerability in Windows NTFS allows an unauthorized attacker to execute code over a network. If reachable, this could compromise system integrity and confidentiality. Organizations should assess if their Windows systems are exposed in a way that makes this vulnerability relevant.

NVD modified: NVD date unavailable

A heap-based buffer overflow in the Telnet Client allows an unauthorized attacker to execute code over a network. This could impact system confidentiality, integrity, and availability if the client is exploited remotely.

NVD modified: NVD date unavailable

An integer overflow in Windows Media Foundation may allow an attacker to execute code remotely over a network. While the vulnerability could impact system integrity and confidentiality, its relevance is likely limited as the technology is typically used for local media processing rather than being directly exposed to t

NVD modified: NVD date unavailable

Microsoft Exchange Server has a cross-site scripting vulnerability that allows an attacker to perform spoofing over a network. This could allow an unauthorized attacker to impersonate legitimate communications by injecting malicious web page elements, potentially impacting user interactions and sender identity.

NVD modified: NVD date unavailable

An integer underflow vulnerability exists in the Microsoft UxTheme Library, which handles Windows visual styles. If reachable, an unauthorized attacker could potentially execute code over a network. The relevance and potential impact depend on whether this component is exposed to network-based exploitation in your envi

NVD modified: NVD date unavailable

A critical vulnerability in the Windows USB Mass Storage Class Driver could allow an attacker to execute code over a network. This heap-based buffer overflow poses a significant risk if reachable, enabling remote code execution and potential compromise of system integrity and confidentiality. Confirmation of relevance

NVD modified: NVD date unavailable

A vulnerability in SQL Server allows an unauthorized attacker to elevate privileges over a network through improper handling of special elements. This could potentially impact data integrity and confidentiality. It is uncertain if affected systems are reachable or relevant in your environment.

NVD modified: NVD date unavailable

DeepSeek Harness has a critical authentication bypass vulnerability in its local HTTP control-plane API. An attacker can exploit this by spoofing a Host header to gain full agent control, execute privileged commands, and retrieve stored conversations. This impacts the integrity and confidentiality of data managed by th

NVD modified: NVD date unavailable

A vulnerability in MongoDB Server's configuration validation could allow unauthenticated network users to bypass authorization, leading to full impact on data confidentiality, integrity, and availability.

NVD modified: NVD date unavailable

A SQL injection vulnerability exists in the mfish-nocode-pro database connectivity feature, allowing attackers to access sensitive data via crafted SQL statements. This issue is reachable through network-accessible API endpoints, posing a risk of unauthorized database information disclosure. Identifying product usage a

NVD modified: NVD date unavailable

A SQL injection vulnerability in the Movie_Recommend application's sorting parameter allows attackers to access sensitive database information. This external threat, accessible via the network without authentication, could lead to unauthorized data exposure if the application is in use.

NVD modified: NVD date unavailable

UC Browser for Android has a critical vulnerability allowing universal cross-site scripting. An attacker could craft a malicious URL that, when visited by a user, executes arbitrary JavaScript in the context of other websites. This could lead to the compromise of user sessions or data on those sites, making it importan

NVD modified: NVD date unavailable

A vulnerability in Apache Airflow's FAB provider allows unauthenticated access to the Airflow UI by enabling attackers to forge Azure AD identity tokens. This occurs because the system does not sufficiently validate these tokens, permitting an attacker to authenticate as any user, including administrators, by creating

NVD modified: NVD date unavailable

An improper access control vulnerability in Fortinet FortiSandbox may allow an attacker to access sensitive information via crafted HTTP requests. This could impact the confidentiality of system data. Confirming the use of affected FortiSandbox products is important to assess potential exposure.

NVD modified: NVD date unavailable

An improper authorization vulnerability exists in Bifrost's `vtoken-minting` and `slpx` pallets, allowing an unauthorized account to mint tokens for an arbitrary channel. This could lead to inflated recorded mint volumes for a channel, causing unfair distribution of protocol commission payments. Readers should care bec

NVD modified: NVD date unavailable

Snipe-IT contains a CSS injection vulnerability in its Custom CSS field due to incomplete sanitization. This allows superusers to plant malicious CSS payloads, potentially exfiltrating CSRF tokens from other superusers and enabling account takeover.

NVD modified: NVD date unavailable

A vulnerability exists in WWBN AVideo's API that allows unauthenticated remote attackers to perform unlimited password guessing and take over user accounts. The `get_api_preauthorize` endpoint lacks rate limiting and reveals user ID information, enabling brute-force attacks. This could lead to unauthorized access and c

NVD modified: NVD date unavailable

An issue in the mpush gateway server permits attackers to execute arbitrary code by sending a crafted broadcast message. This could impact server availability and integrity if the feature is enabled, posing a critical risk due to potential remote code execution. It is important to confirm the relevance and exposure of

NVD modified: NVD date unavailable

An authentication bypass vulnerability exists in the Single-Sign On component of Digital-Infrastructure. This allows unauthenticated attackers to access the system as any user, including administrators, without a password. Due to the critical severity and network-exploitable nature of SSO systems, this issue could lead

NVD modified: NVD date unavailable

An unauthenticated vulnerability in the SellerAuthorizeAspect component allows unauthorized access to seller management interfaces. This could permit attackers to view and modify product information, orders, and categories without proper authentication. Confirm relevance and exposure to seller interfaces.

NVD modified: NVD date unavailable

A vulnerability in Netis NX10 firmware allows unauthenticated attackers to retrieve administrator credentials by accessing a web interface function. This exposure enables unauthorized users to gain full administrative control of the device. Confirming deployment and exposure of these devices is crucial for risk assessm

NVD modified: NVD date unavailable

A critical vulnerability in Ivanti Neurons for ITSM allows unauthenticated attackers to execute arbitrary code remotely on the server. This occurs due to deserialization of untrusted data, potentially impacting service integrity and availability when exposed.

NVD modified: NVD date unavailable

A critical deserialization vulnerability in Ivanti Neurons for ITSM allows unauthenticated remote attackers to execute arbitrary code on the server. This could compromise the integrity and availability of the affected system. Organizations using this platform should confirm its relevance and exposure.

NVD modified: NVD date unavailable

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM allows a remote authenticated attacker to execute arbitrary code on the server, potentially leading to system compromise.

NVD modified: NVD date unavailable

A Missing Authorization vulnerability in Ivanti Neurons for ITSM allows an authenticated attacker to execute arbitrary code on the server. This could impact system integrity and data security if the technology is in use and reachable.

NVD modified: NVD date unavailable

A critical Missing Authorization vulnerability in Ivanti Neurons for ITSM allows an authenticated remote attacker to execute arbitrary code on the server. This could impact server-side operations and potentially lead to unauthorized access or modification of system data.

NVD modified: NVD date unavailable

A critical vulnerability in Ivanti Neurons for ITSM allows authenticated attackers to execute arbitrary code on the server. This could compromise the confidentiality, integrity, and availability of the IT service management platform. The primary concern is to confirm if affected systems are reachable and relevant to yo

NVD modified: NVD date unavailable

A refresh token replay vulnerability in XenForo allows attackers to reuse tokens to gain persistent unauthorized access due to a failure to mark tokens as consumed after access token expiration. This could lead to repeated generation of new tokens, granting unauthorized access for the token's lifetime. This is relevant

NVD modified: NVD date unavailable

A vulnerability in XenForo's OAuth2 implementation allows for authorization code reuse, enabling attackers to obtain unauthorized token pairs. This could lead to duplicated user access by exploiting a failure to invalidate used authorization codes. Confirmation of XenForo usage and its OAuth2 functionality is needed to

NVD modified: NVD date unavailable

A vulnerability in XenForo's OAuth2 token endpoint allows unauthenticated attackers to obtain valid token pairs by submitting empty values for specific parameters, bypassing security validation. This could lead to unauthorized access. The issue is likely to affect forum software instances accessible via the internet.

NVD modified: NVD date unavailable

A critical vulnerability exists in the Command Center API, allowing authentication bypass and impacting privilege management. If reachable, this could permit unauthorized access and control over system resources without requiring any credentials. Confirming the relevance and exposure of this technology within your envi

NVD modified: NVD date unavailable

A critical flaw in hawtio-operator allows authenticated users with edit access in any namespace to impersonate in-cluster services by minting forged certificates. This could lead to unauthorized access to components that trust the Service CA for client authentication. Uncertainty exists regarding specific exploitation

NVD modified: NVD date unavailable

A command argument injection vulnerability exists in Cosminexus Component Container, potentially allowing attackers to execute arbitrary commands. This could impact system integrity and availability if the technology is reachable. Confirmation of its presence and exposure within the environment is necessary.

NVD modified: NVD date unavailable

An OS command injection vulnerability in Cosminexus Component Container may allow an attacker to execute arbitrary operating system commands. This could lead to unauthorized actions and system compromise if the affected technology is reachable. This is a critical issue affecting core application server technology.

NVD modified: NVD date unavailable

A directory traversal vulnerability exists in SIMOVE Fleetmanager and SIPLANT software, allowing unauthenticated remote attackers to read arbitrary operating system files. This could expose sensitive data like credentials and private keys.

NVD modified: NVD date unavailable

A vulnerability in Reyrolle devices allows an unauthenticated attacker to predict security-related values, potentially enabling impersonation and unauthorized access. This could occur if the affected device is remotely accessible. Confirming network exposure and device criticality is advised.

NVD modified: NVD date unavailable

A vulnerability in Reyrolle 7SR5 technology allows unauthenticated remote attackers to bypass authentication by predicting session identifiers. This could permit unauthorized access to the device. You should care because this could affect sensitive industrial control systems.

NVD modified: NVD date unavailable

A critical vulnerability in Reyrolle 7SR5 web interfaces allows unauthorized access by exposing session ID calculation. This could enable an attacker to bypass authentication and gain unauthorized access. Confirming if this technology is in use and its network exposure is crucial due to the specialized nature of the af

NVD modified: NVD date unavailable

A deserialization vulnerability in Cosminexus Component Container could allow an attacker to execute unauthorized code by sending specially crafted data over the network. This impacts the integrity and availability of application servers. Readers should care because this could lead to system compromise if the affected

NVD modified: NVD date unavailable

A vulnerability in the SAP CDS multi-tenant extensibility library allows unauthenticated attackers to obtain sensitive credentials. This could enable them to replace or delete tenant data, impacting application availability and integrity, with potential partial impact on data confidentiality.

NVD modified: NVD date unavailable

A vulnerability in SAP GUI for Java allows a low-privileged attacker to execute arbitrary commands on a user's machine by manipulating a connected backend system. This bypasses trust policy enforcement and could severely impact confidentiality, integrity, and availability. Understanding the relevance of SAP GUI for Jav

NVD modified: NVD date unavailable

SAP NetWeaver Message Server can be exploited by an unauthenticated attacker with network access to register an unauthorized component due to insufficient validation of internal component authenticity. This could allow the attacker to perform unauthorized actions, impacting the confidentiality, integrity, and availabil

NVD modified: NVD date unavailable

A memory safety vulnerability in the Extended Passport Protocol processing library can be exploited by an unauthenticated network attacker through a crafted request with a malformed EPP header, potentially leading to abnormal program termination and high impact on application confidentiality, integrity, and availabilit

NVD modified: NVD date unavailable