| 363353 | NetScaler ADC and NetScaler Gateway DoS (CTX697174) | high |
| 363352 | WordPress 7.0.0 < 7.1.3 | high |
| 363027 | Atlassian Confluence < 9.2.26 / 10.2.x < 10.2.19 (CONFSERVER-104488) | critical |
| 363023 | Atlassian Jira < 9.12.40 / 10.3.x < 10.3.26 / 11.3.x < 11.3.12 (JRASERVER-79546) | critical |
| 362649 | ServiceNow AI Platform Multiple Vulnerabilities (September 2026 CVE Advisory) | critical |
| 362647 | ManageEngine Applications Manager < Build 182100 Multiple Vulnerabilities | high |
| 362487 | Joomla 5.0.x < 5.4.9 / 6.0.x < 6.1.4 Improper ACL Checks For Workflow Stage Changes | medium |
| 362486 | Joomla 1.5.x < 5.4.9 / 6.0.x < 6.1.4 Multiple Vulnerabilities (joomla-6-1-4-5-4-9-security-bugfix-release) | high |
| 362485 | Joomla 1.5.x < 5.4.9 / 6.0.x < 6.1.4 Multiple Vulnerabilities (joomla-6-1-4-5-4-9-security-bugfix-release) | high |
| 351859 | Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 DoS (ESA-2026-181) | medium |
| 351487 | Kibana 8.x < 8.19.22 / 9.4.x < 9.4.6 Incorrect Authorization (ESA-2026-103) | medium |
| 351486 | Kibana 8.x < 8.19.22 / 9.0.x < 9.4.7 / 9.5.x < 9.5.3 Missing Authorization (ESA-2026-139) | medium |
| 351485 | Kibana 9.4.x < 9.4.7 Privilege Escalation (ESA-2026-85) | high |
| 351476 | Atlassian Confluence 7.4.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104433) | critical |
| 351129 | GitLab 15.11 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-4523) | low |
| 351128 | GitLab 17.9 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-10518) | medium |
| 351127 | GitLab 19.0 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-8937) | medium |
| 350881 | Atlassian Confluence 8.9.x < 9.2.22 / 9.5.x < 10.2.14 (CONFSERVER-104406) | high |
| 350880 | Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104443) | critical |
| 350879 | Atlassian Confluence 8.9.x < 9.2.24 / 9.3.x < 10.2.17 (CONFSERVER-104434) | critical |
| 350844 | NetScaler ADC and NetScaler Gateway 13.1 < 13.1-64.23 / 14.1 < 14.1-73.37 Multiple Vulnerabilities | critical |
| 350168 | SolarWinds Observability Self-Hosted < 2026.2.3 Multiple Vulnerabilities | high |
| 350093 | ManageEngine ADSelfService Plus < Build 7001 RCE (CVE-2026-74849) | critical |
| 350092 | WordPress 4.7.x < 4.7.37 / 4.8.x < 4.8.32 / 4.9.x < 4.9.33 / 5.0.x < 5.0.29 / 5.1.x < 5.1.26 / 5.2.x < 5.2.28 / 5.3.x < 5.3.25 / 5.4.x < 5.4.23 / 5.5.x < 5.5.22 / 5.6.x < 5.6.21 / 5.7.x < 5.7.19 / 5.8.x < 5.8.17 / 5.9.x < 5.9.18 / 6.0.x < 6.0.16 / 6.1.x < 6.1.14 / 6.2.x < 6.2.13 / 6.3.x < 6.3.12 / 6.4.x < 6.4.12 / 6.5.x < 6.5.12 / 6.6.x < 6.6.9 / 6.7.x < 6.7.9 / 6.8.x < 6.8.10 / 6.9.x < 6.9.9 / 7.0.x < 7.0.6 / 7.1.x < 7.1.2 Page Template Path Traversal | critical |
| 350091 | Mattermost Server 10.11.x < 10.11.23 / 11.7.x < 11.7.8 / 11.8.x < 11.8.5 / 11.9.x < 11.9.1 Incorrect Authorization (MMSA-2026-00702) | medium |
| 350090 | Mattermost Server 11.7.x < 11.7.11 / 11.8.x < 11.8.6 / 11.9.x < 11.9.2 / 11.10.x < 11.10.2 Multiple Vulnerabilities (MMSA-2026-00771, MMSA-2026-00775, MMSA-2026-00776) | medium |
| 349788 | PHP 8.4.x < 8.4.26 Multiple Vulnerabilities | medium |
| 349787 | PHP 8.2.x < 8.2.34 Multiple Vulnerabilities | medium |
| 349675 | PHP 8.3.x < 8.3.35 Multiple Vulnerabilities | medium |
| 349674 | PHP 8.5.x < 8.5.11 Multiple Vulnerabilities | medium |
| 349556 | GitLab 18.3 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-92874) | medium |
| 349555 | GitLab 19.1 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-92529) | medium |
| 349554 | GitLab 19.2 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-93577) | critical |
| 349553 | GitLab 18.6 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-92628) | low |
| 349552 | GitLab 19.1 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-92530) | medium |
| 349551 | GitLab 18.7 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-92470) | high |
| 349550 | GitLab 19.2 < 19.2.7 / 19.3 < 19.3.3 / 19.4 < 19.4.1 (CVE-2026-89078) | critical |
| 348782 | WordPress 7.1.0 < 7.1.2 / 7.0.0 < 7.0.6 / 6.9.0 < 6.9.9 / 6.8.0 < 6.8.10 / 6.7.0 < 6.7.9 / 6.6.0 < 6.6.9 / 6.5.0 < 6.5.12 / 6.4.0 < 6.4.12 / 6.3.0 < 6.3.12 / 6.2.0 < 6.2.13 / 6.1.0 < 6.1.14 / 6.0.0 < 6.0.16 / 5.9.0 < 5.9.18 / 5.8.0 < 5.8.17 / 5.7.0 < 5.7.19 / 5.6.0 < 5.6.21 / 5.5.0 < 5.5.22 / 5.4.0 < 5.4.23 / 5.3.0 < 5.3.25 / 5.2.0 < 5.2.28 / 5.1.0 < 5.1.26 / 5.0.0 < 5.0.29 / 4.9.0 < 4.9.33 / 4.8.0 < 4.8.32 / 4.7.0 < 4.7.37 | critical |
| 348779 | Adobe Connect <= 4.4 Multiple Vulnerabilities (APSB26-150) | high |
| 348391 | Atlassian Confluence 8.9.0 < 9.2.24 / 9.3.1 < 10.2.17 (CONFSERVER-104362) | critical |
| 348149 | NextGen Mirth Connect < 4.7.2 Multiple Vulnerabilities (ICSMA-26-253-01) | high |
| 347960 | IBM Cognos Analytics 12.0.4 < 12.0.4 FP3 / 12.1.x < 12.1.3 FP2 Multiple Vulnerabilities (7287209) | high |
| 347959 | IBM Cognos Analytics 12.1.x < 12.1.3 FP2 Multiple Vulnerabilities (7287209) | high |
| 346996 | WordPress 7.1.0 < 7.1.1 / 7.0.0 < 7.0.5 / 6.9.0 < 6.9.8 / 6.8.0 < 6.8.9 / 6.7.0 < 6.7.8 / 6.6.0 < 6.6.8 / 6.5.0 < 6.5.11 / 6.4.0 < 6.4.11 / 6.3.0 < 6.3.11 / 6.2.0 < 6.2.12 / 6.1.0 < 6.1.13 / 6.0.0 < 6.0.15 / 5.9.0 < 5.9.17 / 5.8.0 < 5.8.16 / 5.7.0 < 5.7.18 / 5.6.0 < 5.6.20 / 5.5.0 < 5.5.21 / 5.4.0 < 5.4.22 / 5.3.0 < 5.3.24 / 5.2.0 < 5.2.27 / 5.1.0 < 5.1.25 / 5.0.0 < 5.0.28 / 4.9.0 < 4.9.32 / 4.8.0 < 4.8.31 / 4.7.0 < 4.7.36 | high |
| 346899 | Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 Path Traversal (CVE-2026-15913) | high |
| 346470 | Drupal 10.6.x < 10.6.17 / 11.3.x < 11.3.17 / 11.4.x < 11.4.7 Drupal Vulnerability (SA-CORE-2026-013) | high |
| 346277 | Jenkins plugins Multiple Vulnerabilities (2026-09-16) | high |
| 346276 | GitLab 18.2.7 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-3855) | medium |
| 346275 | GitLab 19.0 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-79708) | high |
| 346274 | GitLab 17.1 < 19.1.8 / 19.2 < 19.2.6 / 19.3 < 19.3.2 (CVE-2026-86341) | medium |
