Security Box Score — September 20, 2026

105 CVEs published, led by SourceCodester (10).

105 CVEs published September 20, 2026: 12 critical, 17 high, 43 medium, 33 low; 0 in the KEV catalog at press time; 3 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 80 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	10543	45485	—	—
KEV catalog size	1716

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

2863 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	1507	5597	526	2513	712	1	15	6	0.1	7.8	.0017	+245 ▲
microsoft	1000	2899	204	1984	695	16	289	30	1.0	7.8	.0044	+533 ▲
google	516	2682	331	1048	1182	121	80	9	0.3	7.5	.0025	+445 ▲
red hat	156	782	44	324	374	40	2	0	0.0	6.6	.0028	-31 ▼
apple	246	563	67	165	317	14	88	8	1.4	6.5	.0020	+208 ▲
freebsd	0	48	2	36	7	3	0	0	0.0	7.8	.0016	-23 ▼
canonical	0	42	13	11	13	5	0	0	0.0	7.8	.0021	-14 ▼
suse	13	41	7	21	12	1	0	0	0.0	7.5	.0036	+8 ▲

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	97	181	53	72	55	1	59	16	8.8	7.7	.0039	+51 ▲
ubiquiti	0	59	36	22	1	0	3	3	5.1	9.1	.0049	0
palo alto networks	9	46	1	4	26	15	13	2	4.3	4.7	.0022	-3 ▼
fortinet	10	40	10	10	17	3	29	7	17.5	7.0	.0038	+3 ▲
netgear	2	34	0	0	27	7	0	0	0.0	4.3	.0025	-7 ▼
f5	8	25	6	14	4	1	4	1	4.0	8.7	.0045	+8 ▲
ivanti	10	24	6	16	2	0	25	5	20.8	8.8	.0147	+7 ▲
sonicwall	5	19	7	8	4	0	19	4	21.1	8.3	.0050	-5 ▼

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	93	605	140	253	195	15	33	2	0.3	7.5	.0049	-17 ▼
mozilla	113	300	81	118	67	0	9	0	0.0	8.8	.0026	+54 ▲
drupal	26	94	11	9	66	8	4	1	1.1	5.7	.0024	+26 ▲
gitlab	17	93	5	23	55	10	5	3	3.2	5.3	.0032	+2 ▲
github	3	20	1	10	9	0	0	0	0.0	7.3	.0044	-2 ▼
docker	3	12	1	8	3	0	0	0	0.0	8.4	.0016	+1 ▲
wordpress	0	5	1	3	1	0	2	2	40.0	8.8	.3120	-2 ▼
go	4	4	0	2	1	1	0	0	0.0	5.9	.0029	+4 ▲

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	634	2905	581	1660	563	101	28	4	0.1	7.8	.0034	-255 ▼
ibm	297	916	183	415	305	13	6	1	0.1	7.5	.0030	-77 ▼
adobe	171	777	57	344	366	10	20	4	0.5	7.5	.0023	+111 ▲
progress	3	64	15	39	10	0	6	1	1.6	8.1	.0035	-16 ▼
solarwinds	1	24	17	4	3	0	10	4	16.7	9.1	.0058	+1 ▲
veeam	0	19	6	10	3	0	1	0	0.0	8.6	.0032	-10 ▼
zohocorp	7	17	3	8	6	0	0	0	0.0	7.7	.0106	+3 ▲
atlassian	3	9	1	8	0	0	13	0	0.0	7.6	.0032	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
d-link	25	70	20	26	12	12	3	8.5	.0154	+9 ▲
siemens	15	52	6	33	10	3	0	7.3	.0018	-4 ▼
synology	19	46	5	10	25	6	0	5.6	.0027	+18 ▲
rockwell automation	18	43	5	32	6	0	0	8.6	.0029	+17 ▲
advantech	17	20	2	17	1	0	0	8.6	.0068	+17 ▲
schneider electric	9	18	2	11	5	0	0	8.5	.0040	+9 ▲
hikvision	3	9	0	5	4	0	0	7.1	.0036	+3 ▲
abb	1	8	1	4	3	0	0	7.2	.0018	+1 ▲

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
dell	177	348	26	166	133	23	2	1	0.3	7.2	.0021	+121 ▲
sourcecodester	58	227	0	0	134	93	0	0	0.0	5.5	.0028	+23 ▲
spring	0	170	13	60	82	15	0	0	0.0	6.5	.0024	0
nvidia	32	166	20	117	29	0	0	0	0.0	7.8	.0029	+8 ▲
mongodb	64	162	6	94	58	4	1	0	0.0	7.1	.0026	+32 ▲
itsourcecode	36	152	0	0	37	115	0	0	0.0	2.1	.0026	+17 ▲
wwbn	106	146	23	49	74	0	0	0	0.0	6.9	.0024	+104 ▲
hewlett packard enterprise (hpe)	129	138	15	71	46	6	1	1	0.7	7.2	.0029	+126 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-60004	.8678	99.7	9.8
CVE-2026-85706	.1456	96.5	10.0
CVE-2026-83549	.0851	94.8	7.8
CVE-2026-82329	.0767	94.3	9.8
CVE-2026-86218	.0749	94.2	10.0
CVE-2026-79756	.0515	92.0	8.7
CVE-2026-83548	.0467	91.3	10.0
CVE-2026-76698	.0411	90.3	6.5
CVE-2026-47864	.0408	90.2	9.8
CVE-2026-17176	.0359	88.9	7.7

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-85706	10.0	.1456	KEV
CVE-2026-86218	10.0	.0749	KEV
CVE-2026-83548	10.0	.0467	KEV
CVE-2026-75650	10.0	.0215	KEV
CVE-2026-86152	10.0	.0186
CVE-2026-76195	10.0	.0159
CVE-2026-76197	10.0	.0159
CVE-2026-82222	10.0	.0155
CVE-2026-82004	10.0	.0144
CVE-2026-82456	10.0	.0139

Most disclosures (vendor)
Vendor	CVEs
linux	1885
microsoft	1008
google	847
oracle	635
ibm	313
apple	250
adobe	212
red hat	196
dell	193
apache	130

Most KEV additions (YTD)
Vendor	KEV
microsoft	30
cisco	16
google	9
apple	8
fortinet	7
linux	6
ivanti	5
adobe	4
berriai	4
jfrog	4

Most-affected ecosystems
Ecosystem	Advisories
Maven	93
Packagist	41
npm	20
PyPI	13
crates.io	3
RubyGems	2
Go	1
NuGet	1

Fastest to KEV
CVE	Vendor	Days
CVE-2026-58704	Google	0
CVE-2026-75650	Adobe	0
CVE-2026-83548	SonicWall	0
CVE-2026-83549	SonicWall	0
CVE-2026-85046	Google	0
CVE-2026-87491	Google	0
CVE-2026-84869	ConnectWise	2
CVE-2026-86218	N-able	2
CVE-2026-81578	PaperCut	3
CVE-2026-82078	PaperCut	3

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1768
CVE-2021-27102	n/a	2021-11-17	1768
CVE-2021-27101	n/a	2021-11-17	1768
CVE-2021-27103	n/a	2021-11-17	1768
CVE-2021-21017	Adobe	2021-11-17	1768
CVE-2021-28550	Adobe	2021-11-17	1768
CVE-2021-42013	Apache Software Foundation	2021-11-17	1768
CVE-2021-41773	Apache Software Foundation	2021-11-17	1768
CVE-2021-30858	Apple	2021-11-17	1768
CVE-2021-30860	Apple	2021-11-17	1768

Transactions

EXPLOIT PUBLISHED — grokability snipe-it: 5 CVEs (CVE-2026-86754, CVE-2026-86759, CVE-2026-86764, CVE-2026-86769, CVE-2026-86774). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2026-87963 (Unknown Yo). Public exploit reference added.

DUE DATE PASSED — CVE-2026-58704 (Google Android). CISA remediation deadline was September 19, 2026; still in catalog.

DUE DATE PASSED — CVE-2026-76460 (Cisco Identity Services Engine Software). CISA remediation deadline was September 19, 2026; still in catalog.

DUE DATE PASSED — CVE-2026-87886 (Acronis Backup plugin for cPanel & WHM). CISA remediation deadline was September 19, 2026; still in catalog.

PATCH SHIPPED — CVE-2026-12564 (Red Hat Ansible Automation Platform 2.7). Fixed in Red Hat Ansible Automation Platform 2.7 1788918363.

PATCH SHIPPED — CVE-2026-32551 (DiviNext Woo Essential). Fixed in Woo Essential 4.3.1.

PATCH SHIPPED — CVE-2026-42784 (Red Hat Hardened Images). Fixed in Red Hat Hardened Images 0.3.2-4.hum1.

PATCH SHIPPED — CVE-2026-71576 (Red Hat Multicluster Global Hub 1.4.9). Fixed in Multicluster Global Hub 1.4.9 1788355599.

PATCH SHIPPED — CVE-2026-81796 (WEN Solutions WP Travel). Fixed in WP Travel 12.0.4.

Yesterday's Results

How to read these box scores · glossary

105 CVEs published. 25 box scores, 80 table rows — nothing truncated.

CVE-2026-93958HIGH

D-Link R95 DHMAPI ssi system os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   H   H   H    8.5   .0217   81.5     —

AFFECTED
  Product  Versions          Fixed
  R95      BE9500_1.00.16 –  —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93965MEDIUM

aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   L   L   L    5.1   .0157   74.3     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93966MEDIUM

aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   L   L   L    5.1   .0157   74.3     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93967MEDIUM

aiyiyi121 SxDevOps Command services.py generate_host_task command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   P   L   L   L    5.1   .0073   52.6     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93962MEDIUM

n/a Kamailio — Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0053   43.7     —

AFFECTED
  Product   Versions  Fixed
  Kamailio  5.8.0 –   6.0.8

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-119, CWE-122 · CNA: VulDB · CVSS v4.0 · 9 references · NVD status: Received

CVE-2026-86553HIGH

ZTE SmartLife — A password reset vulnerability in ZTE SmartLife APP

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0045   38.1     —

AFFECTED
  Product    Versions                                   Fixed
  SmartLife  ZTE_SL_V2.8.2_ABROAD and prior versions –  —

TIMELINE
  Sep 8   Reserved by CNA
  Sep 20  Published (CNA: zte)

CWE-269 · CNA: zte · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-93961MEDIUM

Dromara UJCMS UserController UserController.java usernameExist improper authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    6.9   .0042   35.9     —

AFFECTED
  Product  Versions  Fixed
  UJCMS    12.3.0 –  —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-266, CWE-285 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-94083CRITICAL

OISF Suricata — Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for th…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  L    9.4   .0040   34.2     —

AFFECTED
  Product   Versions  Fixed
  Suricata  8.0.0 –   —

TIMELINE
  Sep 20  Reserved by CNA
  Sep 20  Published (CNA: mitre)

CWE-843 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Received

CVE-2026-94084CRITICAL

OISF Suricata — Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules th…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  L    9.4   .0040   34.2     —

AFFECTED
  Product   Versions     Fixed
  Suricata  unspecified  —

TIMELINE
  Sep 20  Reserved by CNA
  Sep 20  Published (CNA: mitre)

CWE-416 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Received

CVE-2026-93975LOW

code-projects Assessment Management User Editing edit-user.php cross site scripting

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   P   N   L   N    1.9   .0037   30.6     —

AFFECTED
  Product                Versions  Fixed
  Assessment Management  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-79, CWE-94 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93960LOW

n/a Pixelfed — Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   N   L   N    2.1   .0037   30.4     —

AFFECTED
  Product   Versions  Fixed
  Pixelfed  0.12.0 –  0.12.10

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-287, CWE-306 · CNA: VulDB · CVSS v4.0 · 9 references · NVD status: Received

CVE-2026-93959MEDIUM

SourceCodester Online Reviewer Management System btn_functions.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0036   29.3     —

AFFECTED
  Product                            Versions  Fixed
  Online Reviewer Management System  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93974MEDIUM

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0033   26.2     —

AFFECTED
  Product                            Versions  Fixed
  Online Reviewer Management System  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93971MEDIUM

aiyiyi121 SxDevOps settings.py information disclosure

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    6.9   .0031   24.6     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-200, CWE-284 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93957LOW

olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   N   N    2.1   .0030   22.8     —

AFFECTED
  Product  Versions  Fixed
  PHP-FTS  1.1.0 –   1.1.4

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-697 · CNA: VulDB · CVSS v4.0 · 9 references · NVD status: Received

CVE-2026-93969MEDIUM

aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    6.9   .0029   21.9     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-259, CWE-798 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93970MEDIUM

aiyiyi121 SxDevOps Settings settings.py hard-coded credentials

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    6.9   .0029   21.9     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-259, CWE-798 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-93964MEDIUM

NginxProxyManager nginx-proxy-manager Validate Route certificate.js internalCertificate.validate missing authentication

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0027   19.9     —

AFFECTED
  Product              Versions  Fixed
  nginx-proxy-manager  2.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-287, CWE-306 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93972MEDIUM

SourceCodester Online Reviewer Management System btn_functions.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   18.8     —

AFFECTED
  Product                            Versions  Fixed
  Online Reviewer Management System  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-86552MEDIUM

ZTE SmartLife — A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  N  L  L    5.4   .0026   18.7     —

AFFECTED
  Product    Versions                                   Fixed
  SmartLife  ZTE_SL_V2.8.2_ABROAD and prior versions –  —

TIMELINE
  Sep 8   Reserved by CNA
  Sep 20  Published (CNA: zte)

CWE-269 · CNA: zte · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-93973MEDIUM

SourceCodester Online Reviewer Management System btn_functions.php remove sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0026   18.5     —

AFFECTED
  Product                            Versions  Fixed
  Online Reviewer Management System  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-93968MEDIUM

aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   N   L   L    5.1   .0026   17.7     —

AFFECTED
  Product   Versions  Fixed
  SxDevOps  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-266, CWE-269 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Received

CVE-2026-86555MEDIUM

ZTE SmartLife — Hardcoded Key Vulnerability in ZTE SmartLife APP

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   N  U  H  N  N    6.2   .0020   10.7     —

AFFECTED
  Product    Versions                                     Fixed
  SmartLife  ZTE_SL_V2.8.2_ABROAD and earlier versions –  —

TIMELINE
  Sep 8   Reserved by CNA
  Sep 20  Published (CNA: zte)

CWE-798 · CNA: zte · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-93963LOW

itsourcecode Leave Management System controller.php sql injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0020   10.2     —

AFFECTED
  Product                  Versions  Fixed
  Leave Management System  1.0 –     —

TIMELINE
  Sep 19  Reserved by CNA
  Sep 20  Published (CNA: VulDB)

CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-86554MEDIUM

ZTE SmartLife — Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  L  N  N    4.3   .0020    9.7     —

AFFECTED
  Product    Versions                                   Fixed
  SmartLife  ZTE_SL_V2.8.2_ABROAD and prior versions –  —

TIMELINE
  Sep 8   Reserved by CNA
  Sep 20  Published (CNA: zte)

CWE-269 · CNA: zte · CVSS v3.1 · 1 reference · NVD status: Received

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-86551	3.3	6.8	ZTE	NX741J	CWE-668	Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z…
CVE-2026-87067	8.5	6.7	Unknown	Forminator Forms	CWE-94	Forminator Forms < 1.57.2.1 - Authenticated RCE via XML-RPC PHP Object Injection
CVE-2026-14844	6.8	4.8	Unknown	Master Slider	CWE-79	Master Slider <= 3.11.2 - Contributor+ Stored XSS via ms_slider Shortcode Att…
CVE-2026-84223	6.8	4.8	Unknown	Kirki	CWE-79	Kirki 6.0.0 - 6.3.0 - Author+ Stored XSS via Unsanitized SVG Upload
CVE-2026-85017	7.5	4.6	Unknown	Unlimited Elements For Elementor	CWE-502	Unlimited Elements For Elementor < 2.0.20 - Subscriber+ PHP Object Injection
CVE-2026-81650	7.2	3.7	Unknown	Photo Gallery, Sliders, Proofing and Themes	CWE-434	NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import
CVE-2026-92423	2.7	3.7	Unknown	Meow Gallery	CWE-200	Meow Gallery < 5.5.5 - Author+ Draft and Private Post Disclosure via fetch_posts
CVE-2026-87839	7.5	3.4	Unknown	Tripzzy	CWE-284	Tripzzy < 1.5.1 - Unauthenticated Arbitrary Comment Deletion
CVE-2026-87840	5.3	3.4	Unknown	Tripzzy	CWE-284	Tripzzy < 1.5.1 - Unauthenticated Booking Data Tampering
CVE-2026-82842	8.1	3.2	Unknown	SAML Single Sign On	CWE-269	SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Accoun…
CVE-2026-92540	7.2	3.2	Unknown	Import and export users and customers	CWE-269	Import and export users and customers < 2.5.2 - Custom Role Privilege Escalat…
CVE-2026-92541	7.2	3.2	Unknown	Import and export users and customers	CWE-269	Import and export users and customers < 2.5.2 - Custom Role Privilege Escalat…
CVE-2026-87068	6.6	3.2	Unknown	Forminator Forms	CWE-269	Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lea…
CVE-2026-81653	4.2	3.2	Unknown	Photo Gallery, Sliders, Proofing and Themes	CWE-639	NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via …
CVE-2026-16542	4.1	3.2	Unknown	Import and export users and customers	CWE-918	Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar
CVE-2026-92965	3.7	3.2	Unknown	TikTok	CWE-862	TikTok 1.2.0 - 1.4.1 - Unauthenticated OAuth Code Redemption
CVE-2026-81651	3.1	3.2	Unknown	Photo Gallery, Sliders, Proofing and Themes	CWE-639	NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification v…
CVE-2026-81654	3.1	3.2	Unknown	Photo Gallery, Sliders, Proofing and Themes	CWE-639	NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update
CVE-2026-81652	2.7	3.2	Unknown	Photo Gallery, Sliders, Proofing and Themes	CWE-639	NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR
CVE-2026-92422	6.5	1.0	Unknown	Meow Gallery	CWE-345	Meow Gallery < 5.5.5 - Unauthenticated Arbitrary Shortcode Execution via load…
CVE-2026-92410	4.3	0.8	Unknown	Sign-up Sheets	CWE-352	Sign-up Sheets < 2.4.0 - Arbitrary Sign-up Deletion via CSRF
CVE-2026-94097	10.0	—	Netcore	NBR200V2	CWE-77	Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection
CVE-2026-90817	9.8	—	Vanderbilt University	REDCap	CWE-73	An unauthenticated Remote Code Execution vulnerability was found in the surve…
CVE-2026-88856	9.4	—	OrdaSoft.com	OrdaSoft Joomla Gallery free extension for Joomla	CWE-94	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execu…
CVE-2026-88857	9.4	—	OrdaSoft.com	OrdaSoft Joomla Gallery free extension for Joomla	CWE-434	Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execu…
CVE-2026-94095	9.4	—	Netcore	NBR200V2	CWE-77	Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection
CVE-2026-94096	9.4	—	Netcore	NBR200V2	CWE-77	Netcore NBR200V2 LAN IP Configuration network_tools command injection
CVE-2026-88854	9.3	—	OrdaSoft.com	OrdaSoft Joomla Gallery free extension for Joomla	CWE-89	Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft J…
CVE-2026-94003	9.3	—	Comfast	CF-N1-S	CWE-119	Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based …
CVE-2026-94089	9.3	—	D-Link	DIR-868L	CWE-119	D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based ov…
CVE-2026-94107	9.2	—	nivocart	nivocart	CWE-338	NivoCart through 2.4.0 Predictable Administrator Password Reset Token
CVE-2026-94104	8.7	—	nivocart	nivocart	CWE-434	NivoCart through 2.4.0 Arbitrary File Upload RCE via filemanager
CVE-2026-94106	8.7	—	james-heinrich	getid3	CWE-78	getID3 before 1.9.26 OS Command Injection via Unescaped Filenames
CVE-2026-94109	8.7	—	openequella	openEQUELLA	CWE-1336	openEQUELLA before 2026.1.0 Remote Code Execution via FreeMarker Template Inj…
CVE-2026-88855	8.6	—	OrdaSoft.com	OrdaSoft Joomla Gallery free extension for Joomla	CWE-89	Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in …
CVE-2026-94108	8.3	—	james-heinrich	getid3	CWE-611	getID3 through 1.9.26 XML External Entity Injection via XML2array
CVE-2026-94112	7.6	—	mayswind	ezBookkeeping	CWE-294	mayswind ezBookkeeping before 2.0.0 TOTP Replay Attack
CVE-2026-94036	7.4	—	D-Link	DIR-X1860	CWE-266	D-Link DIR-X1860/DIR-X1860Z routerd ubus access control
CVE-2026-94113	7.1	—	Frappe	ERPNext	CWE-862	Frappe ERPNext before 15.121.0 and 16.34.0 Missing Authorization in Timesheet…
CVE-2026-92254	6.9	—	Watchdog	Anti-Virus	CWE-20	WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated …
CVE-2026-94105	6.9	—	nivocart	nivocart	CWE-754	NivoCart through 2.4.0 Destructive Configuration Write via the Password Reset…
CVE-2026-94111	6.9	—	Tencent	BrowserSkill	CWE-346	Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket…
CVE-2026-92252	5.9	—	WatchDog	Anti-Virus	CWE-276	Incorrect Default Permissions in WatchDog Anti-Virus Installation Directory
CVE-2026-93978	5.5	—	code-projects	Internship Management System	CWE-74	code-projects Internship Management System login.php sql injection
CVE-2026-93979	5.5	—	code-projects	Internship Management System	CWE-74	code-projects Internship Management System login.php sql injection
CVE-2026-93980	5.5	—	code-projects	Internship Management System	CWE-74	code-projects Internship Management System Admin Login Form login.php sql inj…
CVE-2026-93997	5.5	—	SourceCodester	Drug Recommendation System	CWE-74	SourceCodester Drug Recommendation System edit_symptom.php sql injection
CVE-2026-94004	5.5	—	n/a	DedeCMS	CWE-74	DedeCMS mytag_js.php code injection
CVE-2026-94015	5.5	—	SourceCodester	Drug Recommendation System	CWE-74	SourceCodester Drug Recommendation System edit_user.php sql injection
CVE-2026-94038	5.5	—	NonceGeek	dim-sum-app	CWE-918	NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side r…
CVE-2026-94039	5.5	—	vas3k	TaxHacker	CWE-918	vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-sid…
CVE-2026-94040	5.5	—	vas3k	TaxHacker	CWE-918	vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery
CVE-2026-94043	5.5	—	n/a	Free5GC	CWE-362	Free5GC Gmm handler.go race condition
CVE-2026-94044	5.5	—	03-lovepreetSingh	MCP	CWE-22	03-lovepreetSingh MCP route.ts create_file path traversal
CVE-2026-94050	5.3	—	D-Link	DIR-X1860Z	CWE-200	D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information di…
CVE-2026-94090	5.3	—	JusticeRage	Manalyze	CWE-189	JusticeRage Manalyze PE Parser pe.cpp _parse_debug integer underflow
CVE-2026-92253	5.2	—	WatchDog	Anti-Virus	CWE-59	Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine…
CVE-2026-94028	2.1	—	mealie-recipes	Mealie	CWE-918	mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.p…
CVE-2026-94031	2.1	—	0-Gaurav-0	nexus-mcp	CWE-74	0-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec comm…
CVE-2026-94032	2.1	—	itsourcecode	Leave Management System	CWE-74	itsourcecode Leave Management System index.php sql injection
CVE-2026-94035	2.1	—	SourceCodester	Drug Recommendation System	CWE-79	SourceCodester Drug Recommendation System index.php cross site scripting
CVE-2026-94037	2.1	—	00Kisumi00	mcp-file-analyzer	CWE-22	00Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNod…
CVE-2026-94041	2.1	—	AdithyaYelloju	Restaurant-Management-System	CWE-74	AdithyaYelloju Restaurant-Management-System add_menu.php sql injection
CVE-2026-94042	2.1	—	AdithyaYelloju	Restaurant Management System	CWE-74	AdithyaYelloju Restaurant Management System add_table.php mysqli_query sql in…
CVE-2026-94046	2.1	—	0215AndrewFeng	ACE-MCP	CWE-22	0215AndrewFeng ACE-MCP MCP Tool getFileSnippet.ts get_file_snippet path trave…
CVE-2026-94047	2.1	—	samanhappy	MCPHub	CWE-266	samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate …
CVE-2026-94049	2.1	—	06ketan	slideshot	CWE-22	06ketan slideshot renderer.ts render_slides path traversal
CVE-2026-94051	2.1	—	0717376	cowork_bench	CWE-918	0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side requ…
CVE-2026-94093	2.1	—	DLR-RM	stable-baselines3	CWE-20	DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization
CVE-2026-94094	2.1	—	n/a	OpenClaw	CWE-404	OpenClaw Canvas Host Route server.ts createCanvasHostHandler denial of service
CVE-2026-93977	2.0	—	code-projects	Assessment Management	CWE-79	code-projects Assessment Management add-single-mark.php cross site scripting
CVE-2026-94033	2.0	—	SourceCodester	Drug Recommendation System	CWE-79	SourceCodester Drug Recommendation System User Management add_user cross site…
CVE-2026-94034	2.0	—	SourceCodester	Drug Recommendation System	CWE-79	SourceCodester Drug Recommendation System Password Change change_password cro…
CVE-2026-94045	2.0	—	newbee-ltd	newbee-mall	CWE-79	newbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross site s…
CVE-2026-94048	2.0	—	CodeAstro	QR Code Attendance Management System	CWE-266	CodeAstro QR Code Attendance Management System UserController.php save privil…
CVE-2026-94091	2.0	—	piskvorky	gensim	CWE-20	piskvorky gensim Model Loader utils.py load deserialization
CVE-2026-94092	2.0	—	dmlc	dgl	CWE-20	dmlc dgl utils.py _read_torch_data deserialization
CVE-2026-93976	1.9	—	code-projects	Assessment Management	CWE-79	code-projects Assessment Management add-user.php cross site scripting
CVE-2026-94016	1.9	—	SourceCodester	Drug Recommendation System	CWE-79	SourceCodester Drug Recommendation System add_symptom cross site scripting
CVE-2026-94030	1.3	—	n/a	SerenityOS	CWE-189	SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-09-20 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.