Latest CVE Feed

Vulnerabilities published in the last 30 days. Filter by severity, exploit status, or attack vector.

Score
Vulnerability
Published
7.8 HIGH
CVE-2026-87886 — Acronis Backup Plugin Insecure File Permissions Local Privilege Escalation

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for …

| Misconfiguration
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
7.5 HIGH
CVE-2026-85917 — Azure AI Foundry Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
10.0 CRITICAL
CVE-2026-85889 — Azure AI Foundry Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
10.0 CRITICAL
CVE-2026-70200 — Azure Logic Apps Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
9.6 CRITICAL
CVE-2026-87701 — Azure Cosmos DB Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
7.4 HIGH
CVE-2026-78501 — Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
10.0 CRITICAL
CVE-2026-83944 — Azure Logic Apps Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
9.9 CRITICAL
CVE-2026-85885 — Microsoft 365 Copilot Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
8.6 HIGH
CVE-2026-68791 — Azure Machine Learning Information Disclosure Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
10.0 CRITICAL
CVE-2026-69399 — Azure Arc Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
9.0 CRITICAL
CVE-2026-77903 — Microsoft Dataverse Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
10.0 CRITICAL
CVE-2026-69865 — Microsoft Container Registry Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
9.3 CRITICAL
CVE-2026-70009 — Azure Arc Elevation of Privilege Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
6.1 MEDIUM
CVE-2026-55946 — Microsoft Copilot Information Disclosure Vulnerability

None

Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
8.5 HIGH
CVE-2026-93426 — SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names

SigNoz versions 0.87.0 before 0.142.0 fail to escape user-supplied telemetry field-key names in the v5 query_range API, allowing authenticated users to inject SQL. Attackers with Viewer role or highe…

Remote | Injection
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
4.3 MEDIUM
CVE-2026-93307 — O-RAN-SC SMO OAM VES Collector memory allocation

A vulnerability has been found in O-RAN-SC SMO OAM 2025-06-10. Affected is an unknown function of the component VES Collector. Such manipulation of the argument additionalFields.padding leads to unco…

Remote | Memory Corruption
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
7.4 HIGH
CVE-2026-86688 — Session id is not renewed on authentication in ash_authentication, allowing session fixat…

Session Fixation vulnerability in team-alembic ash_authentication allows an attacker who can plant a session identifier in a victim's browser to hold an authenticated session once that victim signs i…

ash_authentication | Remote | Authentication
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
9.1 CRITICAL
CVE-2026-76949 — Remember-me sign-in guard reads a session key that is never written in ash_authentication…

Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who can plant a remember-me cookie in a victim's browser to replace that victim's authenticated s…

ash_authentication | Remote | Authentication
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
0.0 NA
CVE-2026-73639 — Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row…

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8. With a tRNS chunk, read_direct8() adds …

| Memory Corruption
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
0.0 NA
CVE-2026-73638 — Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchec…

Imager versions from 0.45_02 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiff_load_ifd. tiff_load_ifd() validates an IFD entry's data by checking that `entry->of…

| Memory Corruption
Sep 17, 2026 Sep 17, 2026
Sep 17, 2026
Sep 17, 2026
Showing 20 of 14421 Results