CVEs published in September 2026 (page 7)

1. CVE-2026-34265
   SAP NetWeaver and ABAP Platform DIAG parsing memory corruption vulnerability SAP SAP NetWeaver and ABAP Platform · Sep 29, 2026
   CRITICAL 9.8
2. CVE-2026-62815
   Windows 11 use-after-free in Microsoft QUIC allows remote code execution Microsoft Windows 11 version 23H2 · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
3. CVE-2026-62878
   Windows Server DNS stack buffer overflow remote code execution Microsoft Windows Server 2012 · Sep 29, 2026

   • PoC PUBLIC
   • PATCH AVAILABLE
   CRITICAL 9.8
4. CVE-2026-62893
   Windows Server use-after-free in Windows Deployment Services allows remote code execution Microsoft Windows Server 2012 · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
5. CVE-2026-65768
   Microsoft Teams for Android path traversal pre-auth remote code execution Microsoft Microsoft Teams for Android · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
6. CVE-2026-65791
   Windows iSCSI Target heap buffer overflow remote code execution Microsoft Windows 10 Version 1607 · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
7. CVE-2026-26035
   FortiWeb improper authentication allows unauthenticated administrative login Fortinet FortiWeb · Sep 29, 2026
   CRITICAL 9.8
8. CVE-2026-19001
   MongoDB BI Connector ODBC Driver buffer overflow in metadata functions MongoDB BI Connector ODBC Driver · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
9. CVE-2026-75003
   Roundcube Webmail SVG url() bypass lets crafted images leak data Roundcube Webmail · Sep 29, 2026

   • PATCH AVAILABLE
   CRITICAL 9.8
10. CVE-2026-74936
    Firefox use-after-free in WebAssembly remote code execution Mozilla Firefox · Sep 29, 2026

    • PoC PUBLIC
    CRITICAL 9.8
11. CVE-2026-74943
    Firefox use-after-free in ImageLib allows remote code execution Mozilla Firefox · Sep 29, 2026

    • PoC PUBLIC
    CRITICAL 9.8
12. CVE-2026-74940
    Firefox use-after-free in Graphics: Text allows remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
13. CVE-2026-74944
    Firefox use-after-free in DOM remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
14. CVE-2026-74964
    Firefox integer overflow leads to remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
15. CVE-2026-74979
    Firefox mitigation-bypass in Add-ons Manager allows pre-auth full compromise Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
16. CVE-2026-74987
    Firefox memory-corruption remote attack Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
17. CVE-2026-74990
    Firefox remote memory-corruption bug leads to remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
18. CVE-2026-74988
    Firefox pre-auth remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
19. CVE-2026-74989
    Firefox memory-corruption remote code execution Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8
20. CVE-2026-74985
    Firefox Enterprise Policies privilege escalation vulnerability Mozilla Firefox · Sep 29, 2026
    CRITICAL 9.8