AX·NEWS
Sign in

CVE watch

CVEs of week 38, 2026 (14 Sep – 20 Sep)

39 vulnerabilities first quoted by the shared stories that week, most severe first.

RSS feedOn your SOC screen

  1. CVE-2026-5430 10.0 Exploited CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks API Control Plane < 4.5.0.58 · < 4.6.0.22 3 outlets
  2. CVE-2026-76461 9.8 Exploited Cisco warns customers of actively exploited zero-day in email gateways Cisco Secure Email 14.0.0-698 → 16.0.3-044 (23 versions) 3 outlets
  3. CVE-2025-39682 9.8 Exploited CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild Linux 6.0 2 outlets
  4. CVE-2026-58704 8.8 Exploited Google calls part of Pixel's cell phone was hacked during the 0-Day attack and blacked without a click link. Android all versions 4 outlets
  5. CVE-2025-6514 PentestChain: A Cost-Aware, MCP-Orchestrated Framework for Automated Penetration Testing with Free-Tier LLMs 2 outlets
  6. CVE-2026-58138 Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild 2 outlets
  7. CVE-2026-76460 Exploited Cisco Warns of New Zero-Day ISE Auth Bypass (CVSS 10.0) Exploited in Active Attacks 2 outlets
  8. CVE-2026-87886 Exploited Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks 2 outlets
  9. CVE-2025-20281 Exploited Cisco alerts customers to second actively exploited zero-day in as many days 1 outlet
  10. CVE-2025-20337 Exploited Cisco alerts customers to second actively exploited zero-day in as many days 1 outlet
  11. CVE-2026-20683 Update: Apple iOS / iPados 27 to restore 126 security holes, 100 degrees, etc. 1 outlet
  12. CVE-2026-28326 SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCE 1 outlet
  13. CVE-2026-32882 Claude couldn’t hack OpenAI. Then Anthropic shipped Opus 5. 1 outlet
  14. CVE-2026-4201 A Phone Call Can Now Spread a Zero-Click Worm | Threat Wire 1 outlet
  15. CVE-2026-43664 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  16. CVE-2026-43689 Update: Apple iOS / iPados 27 to restore 126 security holes, 100 degrees, etc. 1 outlet
  17. CVE-2026-45788 白帽黑客借 Anthropic Claude 成功入侵 OpenAI ChatGPT 账户，获 6500 美元赏金 1 outlet
  18. CVE-2026-62721 Microsoft delivery September Win10/Win11 Emergency update to fix remote desktop problems 1 outlet
  19. CVE-2026-65377 Update: Apple iOS / iPados 27 to restore 126 security holes, 100 degrees, etc. 1 outlet
  20. CVE-2026-65406 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  21. CVE-2026-65414 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  22. CVE-2026-77179 Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files 1 outlet
  23. CVE-2026-81642 Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone 1 outlet
  24. CVE-2026-84516 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  25. CVE-2026-84520 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  26. CVE-2026-84523 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  27. CVE-2026-84540 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  28. CVE-2026-84541 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  29. CVE-2026-84563 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  30. CVE-2026-84568 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  31. CVE-2026-84581 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  32. CVE-2026-84583 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  33. CVE-2026-84586 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  34. CVE-2026-84607 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  35. CVE-2026-85889 Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation 1 outlet
  36. CVE-2026-85921 Microsoft delivery September Win10/Win11 Emergency update to fix remote desktop problems 1 outlet
  37. CVE-2026-86888 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  38. CVE-2026-86891 Upgrade: Apple MacOS 27 fix 216 holes, 100 degrees, etc. 1 outlet
  39. CVE-2026-89026 Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution 1 outlet