PlainCVE · This weekVulnerabilities from the past 7 days in AI security or the software supply chain, or exploited / highest severity. Items we have written up link to our page. This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.https://plaincve.date/enCVE-2026-93577 Under certain conditions, an integer overflow in GitLab CE/EE 19.2–19.4 before patches may let authenticated users run code on the server.https://nvd.nist.gov/vuln/detail/CVE-2026-93577https://nvd.nist.gov/vuln/detail/CVE-2026-93577CVSS 9.9 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 24 Sep 2026 00:00:00 GMTCVE-2026-92874 GitLab CE/EE 18.3+ before fixes may let authenticated users with MCP-scoped tokens act beyond the token's intended scope.https://nvd.nist.gov/vuln/detail/CVE-2026-92874https://nvd.nist.gov/vuln/detail/CVE-2026-92874AI trust boundary · CVSS 5.4 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 24 Sep 2026 00:00:00 GMTCVE-2026-92628 A race condition in GitLab CE/EE's MCP search tool (18.6 through pre-19.4.1) could return search results under the wrong user context.https://nvd.nist.gov/vuln/detail/CVE-2026-92628https://nvd.nist.gov/vuln/detail/CVE-2026-92628AI trust boundary · CVSS 3.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 24 Sep 2026 00:00:00 GMTCVE-2026-89078 Under certain conditions, a double free in GitLab CE/EE 19.2–19.4 before patches may let authenticated users run code on the server.https://nvd.nist.gov/vuln/detail/CVE-2026-89078https://nvd.nist.gov/vuln/detail/CVE-2026-89078CVSS 9.9 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 24 Sep 2026 00:00:00 GMTCVE-2026-93352 Laravel-Mediable 7.0.0–7.0.1 misses .pht in its upload blocklist (incomplete CVE-2026-49972 fix), so Apache may run such files as PHP.https://nvd.nist.gov/vuln/detail/CVE-2026-93352https://nvd.nist.gov/vuln/detail/CVE-2026-93352Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96804 MLflow's statsmodel flavor (2.1.0–3.14.0) ignores the pickle-blocking setting, so a crafted MLmodel artifact can run arbitrary code.https://nvd.nist.gov/vuln/detail/CVE-2026-96804https://nvd.nist.gov/vuln/detail/CVE-2026-96804AI trust boundary · CVSS 8.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96775 MLflow's dspy flavor (2.0+) enforces its pickle-blocking setting only for .pkl paths, so a crafted MLmodel artifact can run code.https://nvd.nist.gov/vuln/detail/CVE-2026-96775https://nvd.nist.gov/vuln/detail/CVE-2026-96775AI trust boundary · CVSS 8.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96759 orval before 8.29.0 doesn't escape operationId, so crafted OpenAPI specs can inject JavaScript into generated query hooks.https://nvd.nist.gov/vuln/detail/CVE-2026-96759https://nvd.nist.gov/vuln/detail/CVE-2026-96759Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96758 @orval/core before 8.28.0's form-data serializer doesn't escape property names, so crafted OpenAPI specs can inject code.https://nvd.nist.gov/vuln/detail/CVE-2026-96758https://nvd.nist.gov/vuln/detail/CVE-2026-96758Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96757 orval before 8.29.0 doesn't escape OpenAPI media-type keys, letting crafted specs inject JavaScript into generated fetch or mock code.https://nvd.nist.gov/vuln/detail/CVE-2026-96757https://nvd.nist.gov/vuln/detail/CVE-2026-96757Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96756 orval before 8.30.0's @orval/core doesn't escape date defaults, so crafted OpenAPI specs can inject code into generated output.https://nvd.nist.gov/vuln/detail/CVE-2026-96756https://nvd.nist.gov/vuln/detail/CVE-2026-96756Vulnerable dependency · CVSS 9.2 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96755 orval 8.14.0–8.28.1's @orval/effect generator lets crafted OpenAPI schema defaults inject JavaScript that runs in generated code.https://nvd.nist.gov/vuln/detail/CVE-2026-96755https://nvd.nist.gov/vuln/detail/CVE-2026-96755Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96754 orval before 8.29.0's @orval/hono generator doesn't escape OpenAPI paths, so a crafted spec can inject code into generated output.https://nvd.nist.gov/vuln/detail/CVE-2026-96754https://nvd.nist.gov/vuln/detail/CVE-2026-96754Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-18875 IBM FTM for Red Hat OpenShift's AI agent server lets unauthenticated users insert runbook content into its vector DB to steer the agent.https://nvd.nist.gov/vuln/detail/CVE-2026-18875https://nvd.nist.gov/vuln/detail/CVE-2026-18875AI trust boundary · CVSS 7.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96276 If a developer runs flatpak build-init with a malicious SDK's extension, files may be written outside the working directory.https://nvd.nist.gov/vuln/detail/CVE-2026-96276https://nvd.nist.gov/vuln/detail/CVE-2026-96276Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-96560 LightLLM through 1.2.0, when run with --pd_trans_mode nccl, exposes an unauthenticated RPyC channel allowing remote code execution.https://nvd.nist.gov/vuln/detail/CVE-2026-96560https://nvd.nist.gov/vuln/detail/CVE-2026-96560AI product bug · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-59167 SunEditor before 2.47.11 fails to strip event-handler attributes from crafted custom/namespaced elements, risking XSS in apps using it.https://nvd.nist.gov/vuln/detail/CVE-2026-59167https://nvd.nist.gov/vuln/detail/CVE-2026-59167Vulnerable dependency · CVSS 10.0 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-54892 Plug decodes nested query/body parameters in quadratic time, letting crafted requests cause denial of service in apps using Plug.https://nvd.nist.gov/vuln/detail/CVE-2026-54892https://nvd.nist.gov/vuln/detail/CVE-2026-54892Vulnerable dependency · CVSS 8.7 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-86246 Apache Tomcat Native from 2.0.0 enables insecure TLS options by default, such as client renegotiation, weakening connection security.https://nvd.nist.gov/vuln/detail/CVE-2026-86246https://nvd.nist.gov/vuln/detail/CVE-2026-86246Vulnerable dependency · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-87022 Apache Tomcat 9.0, 10.1 and 11.0 (up to 9.0.121/10.1.59/11.0.25) allow WebSocket message smuggling when per-message-deflate is used.https://nvd.nist.gov/vuln/detail/CVE-2026-87022https://nvd.nist.gov/vuln/detail/CVE-2026-87022Vulnerable dependency · CVSS 7.5 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-86350 A regression in Apache Tomcat 11.0.22+ and 10.1.55+ HTTP/2 handling can mix up request headers (request smuggling).https://nvd.nist.gov/vuln/detail/CVE-2026-86350https://nvd.nist.gov/vuln/detail/CVE-2026-86350Vulnerable dependency · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-86248 In some Apache Tomcat 9.0, 10.1 and 11.0 versions, CLIENT_CERT authentication may not fail as expected when soft fail is disabled.https://nvd.nist.gov/vuln/detail/CVE-2026-86248https://nvd.nist.gov/vuln/detail/CVE-2026-86248Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-76183 Apache Tomcat 9.0.0.M1–9.0.121, 10.1.0-M1–10.1.59 and 11.0.0-M1–11.0.25 let WebSocket endpoint security constraints be bypassed.https://nvd.nist.gov/vuln/detail/CVE-2026-76183https://nvd.nist.gov/vuln/detail/CVE-2026-76183Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Wed, 23 Sep 2026 00:00:00 GMTCVE-2026-19202 mcp-toolbox-sdk-python's toolbox-core reuses one cached Google ID token across audiences; affects apps using 2+ audiences in one process.https://nvd.nist.gov/vuln/detail/CVE-2026-19202https://nvd.nist.gov/vuln/detail/CVE-2026-19202AI trust boundary · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-88624 openCode v1.18.26's Worktree.remove lacks path validation, letting attackers trigger arbitrary recursive directory deletion.https://nvd.nist.gov/vuln/detail/CVE-2026-88624https://nvd.nist.gov/vuln/detail/CVE-2026-88624AI product bug · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-87121 An out-of-bounds write in the lwIP TCP/IP stack's MQTT component may let an attacker fully execute code on affected devices.https://nvd.nist.gov/vuln/detail/CVE-2026-87121https://nvd.nist.gov/vuln/detail/CVE-2026-87121Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-28324 SolarWinds Observability Self-Hosted allows unauthenticated remote code execution, but only in non-default, non-secure configurations.https://nvd.nist.gov/vuln/detail/CVE-2026-28324https://nvd.nist.gov/vuln/detail/CVE-2026-28324CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-77244 +19 mcp-atlassian: 20 CVEs fixed in the same releasehttps://nvd.nist.gov/vuln/detail/CVE-2026-77244https://nvd.nist.gov/vuln/detail/CVE-2026-77244AI trust boundary · CVSS 10.0 · Write-up in review · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-95660 Moonshot AI Kimi Code up to 0.31.0 has an OS command injection flaw in its MCP configuration loader, reportedly remotely triggerable.https://nvd.nist.gov/vuln/detail/CVE-2026-95660https://nvd.nist.gov/vuln/detail/CVE-2026-95660AI trust boundary · CVSS 2.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-85734 lightrag-hku has no rate limiting on its /login endpoint, allowing password brute-force attempts.https://nvd.nist.gov/vuln/detail/CVE-2026-85734https://nvd.nist.gov/vuln/detail/CVE-2026-85734AI product bug · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-63374 AnyIO before 4.14.2 may check internationalized hostnames in connect_tcp()/TLSStream.wrap() using IDNA 2003 instead of IDNA 2008.https://nvd.nist.gov/vuln/detail/CVE-2026-63374https://nvd.nist.gov/vuln/detail/CVE-2026-63374Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-94127 [KEV] BIG-IP APM configured as an OAuth Authorization Server with an access policy may allow remote code execution via malicious traffic.https://plaincve.date/en/vulns/cve-2026-94127-f5-big-ip-apm-oauth-heap-overflow/https://plaincve.date/en/vulns/cve-2026-94127-f5-big-ip-apm-oauth-heap-overflow/CVSS 9.3 · Written up · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-93088 SGLang's disaggregated-diffusion DiffusionServer exposes an unauthenticated ZeroMQ socket, enabling unauthenticated code execution.https://nvd.nist.gov/vuln/detail/CVE-2026-93088https://nvd.nist.gov/vuln/detail/CVE-2026-93088AI product bug · CVSS 9.8 · Write-up in review · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-79313 web.py 0.76 doesn't check session age on load, so expired sessions not yet cleaned up may still be accepted.https://nvd.nist.gov/vuln/detail/CVE-2026-79313https://nvd.nist.gov/vuln/detail/CVE-2026-79313Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-65178 NVIDIA NeMo's dataset loading can accept unsafe parameters from a crafted model_config.yaml, possibly leading to code execution.https://nvd.nist.gov/vuln/detail/CVE-2026-65178https://nvd.nist.gov/vuln/detail/CVE-2026-65178AI trust boundary · CVSS 7.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-93616 [KEV] A directory traversal and file upload flaw lets unauthenticated attackers upload and run scripts on Check Point Management Server.https://nvd.nist.gov/vuln/detail/CVE-2026-93616https://nvd.nist.gov/vuln/detail/CVE-2026-93616CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-89422 Erlang/OTP ssl TLS 1.3 clients may finish a handshake without validating the server, letting a responding peer impersonate it.https://nvd.nist.gov/vuln/detail/CVE-2026-89422https://nvd.nist.gov/vuln/detail/CVE-2026-89422Vulnerable dependency · CVSS 9.3 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-93952 [KEV] On-prem VeloCloud Orchestrator may let a remote attacker access privileged internal functions and compromise the orchestrator host.https://nvd.nist.gov/vuln/detail/CVE-2026-93952https://nvd.nist.gov/vuln/detail/CVE-2026-93952CVSS 9.5 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-85102 [KEV] A VPN certificate validation flaw in Check Point Quantum Security Gateway may let unauthenticated remote attackers run code on it.https://nvd.nist.gov/vuln/detail/CVE-2026-85102https://nvd.nist.gov/vuln/detail/CVE-2026-85102CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Tue, 22 Sep 2026 00:00:00 GMTCVE-2026-78847 gray-matter (all versions, verified 4.0.3) uses eval() to parse JavaScript front matter, allowing arbitrary code execution.https://nvd.nist.gov/vuln/detail/CVE-2026-78847https://nvd.nist.gov/vuln/detail/CVE-2026-78847Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-79916 MaxKB before 2.10.5-lts lets authenticated workspace members inject control characters into the server's AWS credentials file.https://nvd.nist.gov/vuln/detail/CVE-2026-79916https://nvd.nist.gov/vuln/detail/CVE-2026-79916AI product bug · CVSS 9.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-77521 MaxKB before 2.10.5-lts exposes a shell execute tool without human approval to assistants that have tools, MCP tools, skills or sub-apps.https://nvd.nist.gov/vuln/detail/CVE-2026-77521https://nvd.nist.gov/vuln/detail/CVE-2026-77521AI trust boundary · CVSS 10.0 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-77519 MaxKB 2.10.2-lts and earlier don't check API key expiry on /chat/api/mcp, so expired non-permanent keys may still authenticate.https://nvd.nist.gov/vuln/detail/CVE-2026-77519https://nvd.nist.gov/vuln/detail/CVE-2026-77519AI trust boundary · CVSS 5.4 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-77516 MaxKB 2.0.0–2.9.2 lets lowest-role workspace members run tools they were denied by binding tool IDs in agents or workflows.https://nvd.nist.gov/vuln/detail/CVE-2026-77516https://nvd.nist.gov/vuln/detail/CVE-2026-77516AI trust boundary · CVSS 5.4 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-61647 @roomi-fields/notebooklm-mcp's vault.batch tool has a path traversal allowing files to be written outside the intended vault directory.https://nvd.nist.gov/vuln/detail/CVE-2026-61647https://nvd.nist.gov/vuln/detail/CVE-2026-61647AI trust boundary · CVSS 7.1 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-93012 On Windows, Perl's Email::Sender::Transport::Sendmail before 2.602 may run arbitrary commands via envelope addresses reaching a shell.https://nvd.nist.gov/vuln/detail/CVE-2026-93012https://nvd.nist.gov/vuln/detail/CVE-2026-93012Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-94301 MINA's fix for CVE-2026-47065 (acceptMatchers filter bypass) was only committed to 2.2.X, so 2.0.X/2.1.X releases may lack it.https://nvd.nist.gov/vuln/detail/CVE-2026-94301https://nvd.nist.gov/vuln/detail/CVE-2026-94301Vulnerable dependency · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-55071 MCP-for-Stata before 1.19.0 puts unvalidated input from its ado_package_install tool into Stata commands, enabling command injection.https://nvd.nist.gov/vuln/detail/CVE-2026-55071https://nvd.nist.gov/vuln/detail/CVE-2026-55071AI trust boundary · CVSS 8.4 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-7273 [KEV] Zyxel GS1900-48HPv2 firmware ≤2.90(ABTQ.1)C0 has a CGI stack overflow that may let unauthenticated LAN attackers run OS commands.https://nvd.nist.gov/vuln/detail/CVE-2026-7273https://nvd.nist.gov/vuln/detail/CVE-2026-7273CVSS 8.8 · Not classified yet · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Mon, 21 Sep 2026 00:00:00 GMTCVE-2026-33625 LMDeploy 0.12.1–0.12.2 can run arbitrary Python code when loading a malicious HuggingFace model, due to code injection in config.py.https://nvd.nist.gov/vuln/detail/CVE-2026-33625https://nvd.nist.gov/vuln/detail/CVE-2026-33625AI trust boundary · CVSS 8.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Fri, 18 Sep 2026 00:00:00 GMTCVE-2025-66455 LMDeploy deserializes pickle data in handle_zmq_recv (disaggregation engine connection), allowing remote code execution.https://nvd.nist.gov/vuln/detail/CVE-2025-66455https://nvd.nist.gov/vuln/detail/CVE-2025-66455AI product bug · CVSS 9.8 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Fri, 18 Sep 2026 00:00:00 GMTCVE-2025-39682 [KEV] Linux kernel TLS (kTLS) receive code mishandles zero-length records on the rx_list; affects systems using kernel TLS.https://nvd.nist.gov/vuln/detail/CVE-2025-39682https://nvd.nist.gov/vuln/detail/CVE-2025-39682CVSS 9.8 · Not classified yet · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Fri, 18 Sep 2026 00:00:00 GMTCVE-2026-53266 [KEV] An out-of-bounds write in the Linux kernel; the affected component and impact details are unknown from the data provided.https://nvd.nist.gov/vuln/detail/CVE-2026-53266https://nvd.nist.gov/vuln/detail/CVE-2026-53266CVSS 8.8 · Not classified yet · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Fri, 18 Sep 2026 00:00:00 GMTCVE-2025-39964 [KEV] A race condition in the Linux kernel; the affected component and impact details are unknown from the data provided.https://nvd.nist.gov/vuln/detail/CVE-2025-39964https://nvd.nist.gov/vuln/detail/CVE-2025-39964CVSS 5.5 · Not classified yet · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Fri, 18 Sep 2026 00:00:00 GMTCVE-2026-87886 [KEV] Acronis Backup has incorrect default permissions; affected versions and impact details are not given.https://nvd.nist.gov/vuln/detail/CVE-2026-87886https://nvd.nist.gov/vuln/detail/CVE-2026-87886CVSS 7.8 · Not classified yet · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 17 Sep 2026 00:00:00 GMTCVE-2026-92940 vm2 3.11.3–3.11.6 exposes the host's real https.globalAgent to sandboxed code when a NodeVM allows require('https').https://nvd.nist.gov/vuln/detail/CVE-2026-92940https://nvd.nist.gov/vuln/detail/CVE-2026-92940Vulnerable dependency · CVSS 10.0 · Candidate · This list is collected daily and classified by AI in our research pipeline; it is not human-reviewed. Rely on the original advisories for facts.Thu, 17 Sep 2026 00:00:00 GMT