Daily digest
Monday 28 September 2026
312 new CVEs this day, in line with the recent average. Of those, 43 critical and 109 high. 134 arrived with exploitation evidence or public exploit code already attached. Apache Software Foundation was the most-affected vendor with 18.
New this day, ranked by depth score
The 12 that matter most of the 312 published.
CVE-2026-86950High· 8.8CISA KEV0dayPoCAn out-of-bounds write issue was addressed with improved bounds checking
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code exe…
MAL-2026-17240Critical⚠ ExploitedMalicious code in aseitylab (PyPI)
Malicious code in aseitylab (PyPI)
MAL-2026-17213Critical⚠ ExploitedMalicious code in azure-langchain-example (PyPI)
Malicious code in azure-langchain-example (PyPI)
CVE-2026-101001Critical· 10.0PoCA vulnerability was identified in Netcore NBR200V2 1.3.241127.071246
A vulnerability was identified in Netcore NBR200V2 1.3.241127.071246. This impacts the function eval of the file /www/cgi-bin/network_tools of the component Web Management Interface. Such manipulation of the argument QUERY_STRING leads t…
CVE-2026-85526Critical· 9.9PoCPath traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a …
Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a …
CVE-2026-101077Critical· 10.0PoCA flaw has been found in Netcore NR289-GE 1.4.5102
A flaw has been found in Netcore NR289-GE 1.4.5102. This impacts the function process_request of the component boa_temp Handler. This manipulation causes missing authentication. The attack is possible to be carried out remotely. The expl…
CVE-2026-101076Critical· 10.0PoCA vulnerability was detected in Netcore NR289-GE 1.4.5102
A vulnerability was detected in Netcore NR289-GE 1.4.5102. This affects the function system of the file /set_ntp_server_ip.cgi of the component CGI Handler. The manipulation of the argument ntp_ip results in os command injection. The att…
CVE-2026-101075Critical· 10.0PoCA security vulnerability has been detected in Netcore NR289-GE 1.4.5102
A security vulnerability has been detected in Netcore NR289-GE 1.4.5102. The impacted element is the function system of the file /location_time.cgi of the component Location Time Handler. The manipulation of the argument mac leads to os …
CVE-2026-101072Critical· 10.0PoCA vulnerability was identified in Netcore NR289-GE 1.4.5102
A vulnerability was identified in Netcore NR289-GE 1.4.5102. This issue affects the function system of the file /ap_ip.cgi of the component CGI Handler. Such manipulation of the argument ip leads to os command injection. The attack can b…
CVE-2026-101039Critical· 10.0PoCA vulnerability was identified in FAST FAC1900R 20190827_2.0.2
A vulnerability was identified in FAST FAC1900R 20190827_2.0.2. Affected by this issue is the function copy_msg_element of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be execu…
CVE-2026-101038Critical· 9.9PoCA vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2
A vulnerability was determined in FAST FAC1200R 5.0_20201119_1.0.2. Affected by this vulnerability is the function MmtAtePrase of the component MmtAtePrase Parser. This manipulation causes stack-based buffer overflow. Remote exploitation…
CVE-2026-101037Critical· 9.9PoCA vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2
A vulnerability was found in FAST FAC1200R 5.0_20201119_1.0.2. Affected is the function parse_advertisement_frame of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched r…
Most-changed records
Existing CVEs whose severity, score, KEV or exploitation status moved.
- CVE-2019-9901Envoy 1.9.0 and before does not normalize HTTP URL pathsseverity, cvss37
- CVE-2014-6407Arbitrary Code Execution in Dockercvss41
- CVE-2025-71348picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils._config_module.load_config function within reduce methodsexploit_available57
- CVE-2026-88771Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 1…kev, zero_day, cvss95
- CVE-2026-88772Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-…kev, zero_day, severity, cvss85
- CVE-2026-88775Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 …severity, cvss66
- CVE-2026-88776Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: befor…severity, cvss66
- CVE-2026-88777Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: befo…severity, cvss66
Most-affected vendors
By CVEs published in the period.