22 vulnerabilities across 15 products scored HIGH or above on September 14, 2026.

  • 🔴 CRITICAL: 2
  • 🟠 HIGH: 20

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-48273 (adobe/coldfusion) — F1: exploitable → functional, AAS: 12.1 → 15.6 (CRITICAL → CRITICAL). Originally in 2026-09-08 bulletin.
  • [UPGRADED] CVE-2026-75650 (adobe/commerce) — F1: exploitable → itw, AAS: 14.1 → 17.1 (CRITICAL → EMERGENCY). Originally in 2026-09-07 bulletin.

🔴 [CRITICAL] cisco/cisco_secure_email

2 CVEs | CVSS 3.1: 9.8 | AAS 13.4

  • cpe:2.3:a:cisco:cisco_secure_email:*:*:*:*:*:*:*:*

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager are affected by two critical vulnerabilities (CVE-2026-76443, CVE-2026-76440) with a CVSS score of 9.8, including multiple improper neutralization issues discovered during an internal security review. These flaws are considered exploitable and pose serious risk to organizations relying on Cisco’s email security infrastructure for mail filtering and threat protection.

Security teams running Cisco Secure Email Gateway or Cisco Secure Email and Web Manager should apply the software hardening releases immediately by reviewing the vendor advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm for affected versions and patching guidance.

Vendor Advisory

🟠 [HIGH] julien040/anyquery

2 CVEs | CVSS 3.1: 9.1 | AAS 11.9

  • cpe:2.3:a:julien040:anyquery:*:*:*:*:*:*:*:*

Anyquery, an SQL query engine built on top of SQLite, is affected by two high-severity vulnerabilities (CVE-2026-50006, CVE-2026-54628) with a CVSS score of 9.1, including multiple issues that allow unauthenticated remote attackers to exploit the MySQL-compatible server port to perform arbitrary file creation or overwrite on the host filesystem via unrestricted ATTACH DATABASE commands. Functional exploit code is available, making active exploitation straightforward for any exposed instance.

Teams running Anyquery server versions prior to 0.4.5, particularly those with the MySQL-compatible port accessible over a network, should upgrade to version 0.4.5 or later immediately. The fix is available at https://github.com/julien040/anyquery/commit/27f84fc168310455eaf81ec4ba87eed20298670c.

Vendor Advisory

🟠 [HIGH] cisco/cisco_secure_email_and_web_manager

1 CVE | CVSS 3.1: 9.8 | AAS 11.4

  • cpe:2.3:a:cisco:cisco_secure_email_and_web_manager:*:*:*:*:*:*:*:*

Cisco Secure Email and Web Manager is affected by a critical improper access control vulnerability (CVE-2026-76441) with a CVSS score of 9.8, discovered during an internal security review by Cisco’s engineering team. The flaw is classified as exploitable and could allow unauthorized access, posing significant risk to organizations using this product for centralized email and web security management.

Administrators running Cisco Secure Email and Web Manager should apply the available software hardening release without delay. Refer to the vendor advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-esa-dfCrfXkm for affected versions and remediation guidance.

Vendor Advisory

🟠 [HIGH] mervinpraison/praisonai

5 CVEs | CVSS 3.1: 9.8 | AAS 10.8

  • cpe:2.3:a:mervinpraison:praisonai:*:*:*:*:*:*:*:*

PraisonAI, a multi-agent teams framework, is affected by five high-severity vulnerabilities (CVE-2026-57127, CVE-2026-57124, CVE-2026-57131, CVE-2026-57125, CVE-2026-57145) with a maximum CVSS score of 9.8, including multiple authentication bypass issues where API key and JWT middleware silently forward requests when secrets are not configured, allowing unauthenticated access to recipe execution and connected tools even when operators have explicitly enabled authentication.

Teams running PraisonAI versions prior to 4.6.58, especially those serving recipes with API key or JWT authentication enabled, should upgrade immediately. The fix is available at https://github.com/MervinPraison/PraisonAI/commit/2f9677abb2ea68eab864ee8b6a828fd0141612e1.

Vendor Advisory

🟠 [HIGH] pimcore/pimcore

2 CVEs | CVSS 3.1: 8.8 | AAS 10.8

  • cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*

Pimcore, an open source Data and Experience Management Platform, is affected by two high-severity vulnerabilities (CVE-2026-55072, CVE-2026-55416) with a maximum CVSS score of 8.8, including multiple issues where authenticated users with objects permission can exploit insufficient input validation on ClassDefinition UIDs to inject malicious content into database queries. Proof-of-concept exploit code is publicly available, increasing the likelihood of active exploitation.

Organizations running Pimcore versions prior to 2026.1.5 should upgrade immediately. The fix is available at https://github.com/pimcore/pimcore/commit/33a0e1887e1e31b4283b016ac5440c35ea5697b4.

Vendor Advisory

🟠 [HIGH] froxlor/froxlor

1 CVE | CVSS 4.0: 9.4 | AAS 10.7

  • cpe:2.3:a:froxlor:froxlor:*:*:*:*:*:*:*:* (< 2.2.5)

Froxlor, a popular server management panel, is affected by a high-severity vulnerability (CVE-2026-90937) with a CVSS score of 9.4, where authenticated customers can inject arbitrary nginx or Apache configuration directives by embedding newline characters in subdomain redirect URLs. These malicious URLs are written verbatim into virtual host configuration files during cron rebuilds, enabling web server corruption, denial of service, or HTTP response hijacking across all domains hosted on the same server.

Hosting providers and administrators running Froxlor versions prior to 2.2.5 should upgrade immediately. Details and the fix are available at https://github.com/froxlor/froxlor/security/advisories/GHSA-c3p2-mj7v-5mrc.

Vendor Advisory

🟠 [HIGH] envoyproxy/gateway

1 CVE | CVSS 3.1: 9.1 | AAS 10.5

  • cpe:2.3:a:envoyproxy:gateway:*:*:*:*:*:*:*:*

Envoy Gateway, an open source application gateway for managing Envoy Proxy in standalone and Kubernetes environments, is affected by a high-severity path validation bypass vulnerability (CVE-2026-53713) with a CVSS score of 9.1. The Lua security validator fails to collapse redundant path separators before evaluating critical paths, allowing attackers to bypass Strict validation on EnvoyExtensionPolicy Lua submissions using double-slash paths that Linux resolves identically to their single-slash equivalents.

Teams running Envoy Gateway versions prior to 1.7.4 or 1.8.1 should upgrade immediately. The fix is available at https://github.com/envoyproxy/gateway/commit/5a78db82b7cf4fc5bebbeda2c50952892038a464.

Vendor Advisory

🟠 [HIGH] misp/misp

1 CVE | CVSS 4.0: 9.3 | AAS 9.9

  • cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*

MISP, the open source threat intelligence sharing platform, is affected by a high-severity authentication bypass vulnerability (CVE-2026-90961) with a CVSS score of 9.3. The LdapAuth and LinOTPAuth authentication plugins fail to validate that email and password fields are non-empty strings before passing them to downstream authentication logic, allowing attackers to bypass login controls by submitting empty or null credentials.

Organizations running MISP instances configured with LDAP or LinOTP authentication should apply the fix immediately. The patch is available at https://github.com/MISP/MISP/commit/0ee058548.

Vendor Advisory

🟠 [HIGH] langbot-app/langbot

1 CVE | CVSS 4.0: 8.8 | AAS 9.7

  • cpe:2.3:a:langbot-app:langbot:*:*:*:*:*:*:*:*

LangBot’s plugin runtime (pip package langbot_plugin) through version 0.4.17 is affected by a high-severity vulnerability (CVE-2026-90938) with a CVSS score of 8.8, where a debug WebSocket server binds to all interfaces on port 5401 with an empty default authentication key that is never configured by the upstream repository or Docker image. Any remote attacker who can reach the port can register arbitrary debug plugins without credentials, potentially achieving full control over the LangBot instance.

Teams running LangBot, particularly via Docker where port 5401 is published to the host by default, should immediately restrict network access to the debug WebSocket port and upgrade to a patched version. Details and remediation guidance are available at https://github.com/langbot-app/LangBot/security/advisories/GHSA-m7qm-2mjr-2h4q.

Vendor Advisory

🟠 [HIGH] krayin/laravel-crm

1 CVE | CVSS 4.0: 8.8 | AAS 9.7

  • cpe:2.3:a:krayin:laravel-crm:*:*:*:*:*:*:*:*

Krayin CRM through version 2.2.6 is affected by a high-severity vulnerability (CVE-2026-90944) with a CVSS score of 8.8, where the inbound email parsing endpoint is exposed without authentication, allowing unauthenticated attackers to inject arbitrary crafted emails with forged sender information into the CRM inbox, including replies to existing conversation threads. This could be leveraged for social engineering, data manipulation, or business process abuse.

Organizations running Krayin CRM should restrict access to the /admin/mail/inbound-parse endpoint immediately and monitor for a patched release at https://github.com/krayin/laravel-crm.

Vendor Advisory

🟠 [HIGH] modeltc/lightllm

1 CVE | CVSS 4.0: 9.3 | AAS 9.7

  • cpe:2.3:a:modeltc:lightllm:*:*:*:*:*:*:*:*

LightLLM through version 1.2.0 is affected by a critical remote code execution vulnerability (CVE-2026-90919) with a CVSS score of 9.3, where the Config Server’s unauthenticated /visual_register WebSocket endpoint passes incoming client frames directly to pickle.loads() without any sanitization. An attacker who can reach the Config Server port can send a crafted serialized payload to execute arbitrary code with the privileges of the Config Server process.

Teams deploying LightLLM should immediately restrict network access to the Config Server port and monitor for a patched release. The vulnerable code is documented at https://github.com/ModelTC/LightLLM/blob/v1.2.0/lightllm/server/config_server/api_http.py#L79-L86.

Vendor Advisory

🟠 [HIGH] ibm/langflow_oss

1 CVE | CVSS 3.1: 9.6 | AAS 9.7

  • cpe:2.3:a:ibm:langflow_oss:*:*:*:*:*:*:*:* (>= 1.0.0)

IBM Langflow OSS versions 1.0.0 through 1.10.0 is affected by a critical vulnerability (CVE-2026-12944) with a CVSS score of 9.6, allowing attackers to execute arbitrary Python code with root privileges on the Langflow server by submitting components containing socket or urllib imports. Successful exploitation enables AWS credential theft via SSRF, arbitrary file exfiltration from the container filesystem, and lateral movement to internal services such as PostgreSQL and Redis within the Docker network.

Organizations running IBM Langflow OSS should apply the vendor-provided fix immediately. Remediation details and affected version information are available at https://www.ibm.com/support/pages/node/7278919.

Vendor Advisory

🟠 [HIGH] zfile-dev/zfile

1 CVE | CVSS 4.0: 8.7 | AAS 9.6

  • cpe:2.3:a:zfile-dev:zfile:*:*:*:*:*:*:*:*

ZFile through version 5.0.5 is affected by a high-severity path traversal vulnerability (CVE-2026-91144) with a CVSS score of 8.7, where the download endpoint fails to validate requested file paths against a share link’s allowed entries. Attackers with access to any share link can supply arbitrary file paths to download any file under the shared base directory, bypassing intended access restrictions.

Organizations using ZFile for file sharing should restrict access to shared links and monitor for a patched release at https://github.com/zfile-dev/zfile.

Vendor Advisory

🟠 [HIGH] maximhq/bifrost

1 CVE | CVSS 3.1: 9.8 | AAS 9.6

  • cpe:2.3:a:maximhq:bifrost:*:*:*:*:*:*:*:*

Bifrost, an MCP gateway by MaximHQ, is affected by a critical vulnerability (CVE-2026-90898) with a CVSS score of 9.8, where the default configuration disables authentication, allowing any unauthenticated caller to register arbitrary stdio MCP clients via a single POST to /api/mcp/client. The registered command is executed immediately as the Bifrost process user without requiring an MCP handshake, effectively granting remote code execution to any attacker who can reach the management API.

Teams running Bifrost should immediately enable authentication by setting governance.auth_config.is_enabled to true and restrict network access to the management API. Upgrade details and the fix are available at https://github.com/maximhq/bifrost.

Vendor Advisory

🟠 [HIGH] crawlab-team/crawlab

1 CVE | CVSS 4.0: 9.3 | AAS 9.2

  • cpe:2.3:a:crawlab-team:crawlab:*:*:*:*:*:*:*:*

Crawlab through version 0.6.3 is affected by a critical vulnerability (CVE-2026-90945) with a CVSS score of 9.3, where a hard-coded HMAC-SHA256 secret is used for JWT token signing and cannot be overridden via configuration or environment variables. Unauthenticated attackers who know the embedded secret can forge valid administrator tokens to access administrative APIs and execute arbitrary code on worker nodes.

Teams running Crawlab should immediately restrict network access to the management interface and monitor for a patched release at https://github.com/crawlab-team/crawlab.

Vendor Advisory