30 vulnerabilities across 13 products scored HIGH or above on September 10, 2026.

  • 🟠 HIGH: 30

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-48273 (adobe/coldfusion_2025) — F1: exploitable → functional, AAS: 12.1 → 15.1 (CRITICAL → CRITICAL). Originally in 2026-09-08 bulletin.
  • [UPGRADED] CVE-2026-75650 (adobe/commerce) — F1: exploitable → itw, AAS: 14.1 → 17.1 (CRITICAL → EMERGENCY). Originally in 2026-09-07 bulletin.
  • [UPGRADED] CVE-2026-85046 (google/chrome) — F1: exploitable → functional, AAS: 10.6 → 12.6 (HIGH → CRITICAL). Originally in 2026-09-03 bulletin.

🟠 [HIGH] diegosouzapw/omniroute

1 CVE | CVSS 4.0: 9.5 | AAS 11.3

  • cpe:2.3:a:diegosouzapw:omniroute:*:*:*:*:*:*:*:* (< 3.8.50)

OmniRoute, an open-source AI gateway by diegosouzapw that provides a unified endpoint for multiple model providers, is affected by one critical vulnerability (CVE-2026-88062, CVSS 9.5 HIGH). The flaw allows remote attackers to achieve arbitrary command execution through the POST /api/acp/agents endpoint, which passes attacker-controlled binary and versionCommand values directly to execFileSync without adequate validation, bypassing a weak self-consistency check. Versions 3.8.49 and earlier are affected.

Organizations running OmniRoute as an AI model gateway should treat this as a high-priority issue, as the vulnerability is considered exploitable and could allow full compromise of the underlying server. Security teams should review the vendor advisory at the linked GitHub pull request, apply the available fix immediately, and audit logs for any suspicious requests to the /api/acp/agents endpoint.

Vendor Advisory

🟠 [HIGH] ibm/langflow_oss

4 CVEs | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* (>= 1.0.0)
  • cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* (>= 1.0.0, < 1.11.6)

IBM Langflow OSS versions 1.0.0 through 1.11.5 is affected by four vulnerabilities, including at least one critical remote code execution flaw rated CVSS 9.8 HIGH (CVE-2026-79724). The most severe issue allows a remote attacker to execute arbitrary OS commands through improper neutralization of special elements, potentially leading to full system compromise without requiring authentication.

Organizations using IBM Langflow OSS for AI workflow orchestration should prioritize remediation immediately, as the vulnerabilities are considered exploitable. Security teams should consult the IBM support advisory at the link provided, upgrade to a patched version beyond 1.11.5, and review systems for any signs of unauthorized command execution or compromise.

Vendor Advisory

🟠 [HIGH] rclone/rclone

2 CVEs | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:rclone:rclone:*:*:*:*:*:*:*:*

Rclone, a widely used command-line tool for syncing files across cloud storage providers, is affected by two vulnerabilities including at least one critical authentication bypass rated CVSS 9.8 HIGH (CVE-2026-88018). The most severe flaw impacts rclone’s S3-compatible serve mode when configured with –auth-proxy but without –auth-key, allowing a remote attacker to register an arbitrary access key with an empty secret and bypass signature verification entirely, gaining unauthorized access to stored data. Versions prior to 1.75.1 are affected.

Teams using rclone serve s3 with authentication proxy configurations should upgrade to version 1.75.1 immediately, as these vulnerabilities are considered exploitable. Review any exposed rclone S3 endpoints for signs of unauthorized access and consult the release notes at the vendor advisory link for full details on both fixes.

Vendor Advisory

🟠 [HIGH] oisf/suricata

1 CVE | CVSS 3.1: 9.1 | AAS 10.5

  • cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:* (< 7.0.16)
  • cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:* (>= 8.0.0, < 8.0.5)

Suricata, a widely deployed open-source network intrusion detection and prevention system developed by OISF, is affected by one high-severity vulnerability (CVE-2026-45764, CVSS 9.1 HIGH). The flaw involves a type confusion triggered by protocol changes during HTTP/2 traffic processing, allowing an attacker to crash the Suricata engine with crafted traffic and cause denial of service, effectively blinding network security monitoring.

Organizations relying on Suricata for network security monitoring or inline intrusion prevention should upgrade to version 7.0.16 or 8.0.5 immediately, as the vulnerability is considered exploitable. As a temporary workaround, administrators can disable HTTP/2 parsing if it is not operationally required. Full details are available in the vendor advisory at the Suricata forum.

Vendor Advisory

🟠 [HIGH] wwbn/avideo

5 CVEs | CVSS 4.0: 9.3 | AAS 10.5

  • cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*

WWBN AVideo, an open-source video platform, is affected by five vulnerabilities including at least one high-severity stored cross-site scripting flaw rated CVSS 9.3 HIGH (CVE-2026-88867). The most severe issue allows attackers to inject malicious scripts through unsanitized category name and icon class parameters, which are stored and later rendered without encoding across multiple template views, potentially enabling session hijacking and account takeover of other users including administrators.

Organizations hosting AVideo instances should review all five advisories and update beyond commit c3edcc274c immediately, as the vulnerabilities are considered exploitable. Consult the vendor security advisory on GitHub for patch details, and audit existing category entries for any injected content as an interim measure.

Vendor Advisory

🟠 [HIGH] renovatebot/renovate

4 CVEs | CVSS 4.0: 9.2 | AAS 10.1

  • cpe:2.3:a:renovatebot:renovate:*:*:*:*:*:*:*:* (< 44.11.3)

Renovate, a widely used open-source dependency update automation tool by RenovateBot, is affected by four vulnerabilities including at least one high-severity credential leakage flaw rated CVSS 9.2 HIGH (CVE-2026-88887). The most critical issue allows a malicious or compromised container registry to steal Renovate’s registry credentials by supplying a crafted HTTP Link pagination header pointing to an attacker-controlled host, as Renovate follows these redirects and attaches credentials without verifying the destination matches the original registry origin.

Organizations using Renovate for automated dependency management, particularly those connecting to third-party or self-hosted container registries, should update immediately and review all four advisories, as the vulnerabilities are considered exploitable. Consult the vendor security advisory on GitHub for patched versions, rotate any registry credentials that may have been exposed, and audit Renovate logs for unexpected outbound requests to unfamiliar hosts.

Vendor Advisory

🟠 [HIGH] traefik/traefik

2 CVEs | CVSS 4.0: 9.3 | AAS 10.0

  • cpe:2.3:a:traefik:traefik:*:*:*:*:*:*:*:* (>= 3.7.0, < 3.7.12)

Traefik, a widely deployed open-source HTTP reverse proxy and load balancer, is affected by two vulnerabilities including at least one high-severity authentication bypass rated CVSS 9.3 HIGH (CVE-2026-88007). The most critical flaw impacts HTTP/3 entrypoints in versions 2.11.0 through 2.11.57 and up to 3.7.13, where a missing transport context causes backend connections using NTLM or Negotiate authentication to be shared across unrelated clients, allowing an attacker to hijack an authenticated session and access another user’s responses.

Organizations using Traefik with HTTP/3 enabled and connection-bound authentication backends such as NTLM or Kerberos should patch immediately, as the vulnerabilities are considered exploitable. Upgrade to versions beyond 2.11.57 or 3.7.13, and as a temporary mitigation consider disabling HTTP/3 on affected entrypoints. Consult the vendor commit and advisory for full details on both fixes.

Vendor Advisory

🟠 [HIGH] tesseract-ocr/tesseract

6 CVEs | CVSS 4.0: 8.6 | AAS 10.0

  • cpe:2.3:a:tesseract-ocr:tesseract:*:*:*:*:*:*:*:*

Tesseract, the widely used open-source OCR engine by tesseract-ocr, is affected by six vulnerabilities including multiple memory corruption flaws with the most severe rated CVSS 8.6 HIGH (CVE-2026-88048). The issues stem from insufficient validation of deserialized model parameters in the LSTM neural network layers, where crafted .traineddata files can trigger heap buffer overflows and out-of-bounds reads during forward pass operations, potentially enabling code execution or information disclosure when processing untrusted OCR models.

Organizations using Tesseract version 5.5.3 or earlier should update immediately, particularly those processing user-supplied or third-party traineddata files, as the vulnerabilities are considered exploitable. Review the vendor commit for the applied fix, ensure that only trusted language model files are loaded in production environments, and audit any workflows that accept externally sourced OCR training data.

Vendor Advisory

🟠 [HIGH] pimcore/pimcore

1 CVE | CVSS 3.1: 8.8 | AAS 9.6

  • cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:* (< 1.0.3)

Pimcore, an open-source digital experience platform, is affected by one high-severity SQL injection vulnerability (CVE-2026-55416, CVSS 8.8 HIGH) in its Custom Reports bundle. An authenticated attacker with reports_config permission can inject arbitrary SQL through report configuration fields such as sql, from, where, and groupby, which are directly concatenated into queries without parameterization, potentially enabling full database compromise including data exfiltration and modification.

Organizations running Pimcore with the Custom Reports bundle should patch immediately, as the vulnerability is considered exploitable. Review which users hold the reports_config permission and restrict it to trusted administrators as an interim measure. Consult the vendor advisory on GitHub for the patched version and full remediation details.

Vendor Advisory

🟠 [HIGH] addonsorg/drag_and_drop_file_upload_for_elementor_forms

1 CVE | CVSS 3.1: 9.8 | AAS 9.6

  • cpe:2.3:a:addonsorg:drag_and_drop_file_upload_for_elementor_forms:*:*:*:*:*:*:*:*

The Drag and Drop File Upload for Elementor Forms plugin for WordPress by AddonsOrg is affected by one critical arbitrary file upload vulnerability (CVE-2026-18351, CVSS 9.8 HIGH). The flaw exists in all versions up to and including 1.6.0, where insufficient file type validation in the is_file_type_valid() function allows an attacker to bypass the MIME allowlist using a crafted extension that is later normalized to a PHP extension by sanitize_file_name(), enabling unauthenticated remote code execution on the web server.

Any WordPress site using this plugin with Elementor Forms should treat this as an emergency priority, as the vulnerability is considered exploitable and requires no authentication. Update beyond version 1.6.0 immediately, audit upload directories for any suspicious PHP files, and consider temporarily disabling the plugin until a patch is confirmed. Consult the vendor advisory for full details.

Vendor Advisory

🟠 [HIGH] hashicorp/consul

1 CVE | CVSS 3.1: 8.3 | AAS 9.5

  • cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:* (>= 1.22.0, < 1.22.12)
  • cpe:2.3:a:hashicorp:consul:*:*:*:*:*:*:*:* (>= 2.0.0, < 2.0.4)

HashiCorp Consul and Consul Enterprise are affected by one high-severity authorization bypass vulnerability (CVE-2026-87090, CVSS 8.3 HIGH) in the catalog node-write path. An authenticated attacker with node-write permission on any single node can exploit this flaw to delete another node’s catalog registration and take over its identity, provided they can obtain the target node’s ID, potentially disrupting service discovery and enabling lateral movement within the service mesh.

Organizations running Consul should upgrade to version 2.0.4, and Consul Enterprise users should upgrade to 1.21.18, 1.22.12, or 2.0.4 immediately, as the vulnerability is considered exploitable. Review ACL token grants for overly broad node-write permissions and consult the HashiCorp security advisory for full remediation guidance.

Vendor Advisory

🟠 [HIGH] mongodb/java_driver

1 CVE | CVSS 4.0: 8.2 | AAS 9.4

  • cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:*:*:*

The MongoDB Java Driver is affected by one high-severity use-after-free vulnerability (CVE-2026-88032, CVSS 8.2 HIGH) in its reactive client-side encryption component. When an encrypted operation using on-demand KMS credential retrieval is cancelled, native resources can be freed while still in use, allowing an attacker who can trigger operation cancellation to crash the hosting application process and cause denial of service.

Organizations using the MongoDB Java Driver with reactive client-side field-level encryption and on-demand KMS credential configurations should prioritize updating immediately, as the vulnerability is considered exploitable. Consult the vendor advisory on the MongoDB Jira tracker for the patched driver version and assess whether any application workflows allow external parties to cancel in-flight encrypted operations.

Vendor Advisory

🟠 [HIGH] craftcms/cms

1 CVE | CVSS 4.0: 8.7 | AAS 9.3

  • cpe:2.3:a:craftcms:cms:*:*:*:*:*:*:*:*

Craft CMS is affected by one high-severity vulnerability (CVE-2026-79987, CVSS 8.7 HIGH) that allows a remote, authenticated non-admin Control Panel user with only the accessCp permission to execute arbitrary operating system commands as the PHP web worker process. This represents a significant privilege escalation risk, as even minimally privileged CMS users can achieve full server-level code execution.

Organizations running Craft CMS should review the vendor’s GitHub repository for a patched release and update as soon as one is available. In the interim, audit all user accounts with Control Panel access, restrict the accessCp permission to only trusted users, and monitor for any unusual process execution originating from the PHP web worker.

Vendor Advisory