Linux Distros Unpatched Vulnerability : CVE-2026-19614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The API is prone to XML external entity XXE injection. By default, XML external entity support is enabled. This issue affects NanoXML: 2.2.3. CVE-2026-19614 Not...

Linux Distros Unpatched Vulnerability : CVE-2026-87581

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code...

CVE-2026-86765: Missing Authorization

Snipe-IT versions before 8.7.0 fail to enforce checkout authorization when assignment fields are submitted to the asset update endpoint. Authenticated users with edit permission but explicitly denied checkout permission can reassign assets, bypass check-in procedures, and alter custody records by...

PT-2026-89034

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description Authenticated users with edit permissions but without checkout permissions can bypass authorization checks when updating assets. By sending specific parameters to the 'PATCH /api/v1/hardware/id'...

Linux Distros Unpatched Vulnerability : CVE-2026-87466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

Linux Distros Unpatched Vulnerability : CVE-2026-87589

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-69439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network. CVE-2026-69439 Note that Nessus relie...

PT-2026-89045

News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...

CVE-2026-53638

Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, an authorization bypass vulnerability exists in the shop account API. The "PATCH /api/v2/shop/account/orders/tokenValue/payments/paymentId" endpoint, used by an...

CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-71562 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-63074 affecting package edk2 for versions less than 20240524git3e722403cd16-19

CVE-2026-63074 affecting package edk2 for versions less than 20240524git3e722403cd16-19. A patched version of the package is available...

CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70405 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-31912 affecting package libpcap for versions less than 1.10.7-1

CVE-2026-31912 affecting package libpcap for versions less than 1.10.7-1. A patched version of the package is available...

CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-73812 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-70409 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6

CVE-2026-66835 affecting package erlang for versions less than 26.2.5.21-6. A patched version of the package is available...

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for September 2026, which includes 973 vulnerabilities affecting a range of products, including 113 that Microsoft marked as "critical." Microsoft notes that 2 of the vulnerabilities disclosed this month have been exploited in the wild:...

CVE-2026-69353

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:50+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:37+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 09:22:25+00:00|...

CVE-2026-69328

creationtimestamp| type| source ---|---|--- 2026-09-08 22:08:41+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:07:25+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 08:56:27+00:00|...