Critical vulnerability archive — page 101

seriousm4x2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-49819 · seriousm4x UpSnap

UpSnap - Unauthenticated Initial-Superuser Takeover Chains to Root RCE via wake_cmd

EPSS 1%public exploit CVSS 9.8

CVE-2026-49481 · seriousm4x UpSnap

UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd

EPSS 1%CVSS 9.6

Canonical6 vulnerabilities on this pageMax CVSS 9.9Priority 52KEV 0

CVE-2026-63294 · Canonical LXD

Root RCE via image backup.yaml symlink

EPSS 0.9%public exploit CVSS 9.9

CVE-2026-63293 · Canonical LXD

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

EPSS 0.6%public exploit CVSS 9.9

CVE-2026-66898 · Canonical LXD

Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE

EPSS 0.6%public exploit CVSS 9.9

CVE-2026-63296 · Canonical LXD

Project restriction bypass via instance migration config override

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-63297 · Canonical LXD

Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge

EPSS 0.3%public exploit CVSS 9.9

CVE-2026-62420 · Canonical LXD

Cross-project cluster migration bypasses project restrictions via cluster notification flag

EPSS 0.5%CVSS 9.9

FlowiseAI6 vulnerabilities on this pageMax CVSS 9.9Priority 52KEV 0

CVE-2026-73487 · FlowiseAI Flowise

Flowise before 3.1.3 Prompt Injection RCE via CSV Agent

EPSS 1.0%public exploit CVSS 9.8

CVE-2026-73483 · FlowiseAI Flowise

Flowise before 3.1.3 Sandbox Escape via Puppeteer

EPSS 0.6%public exploit CVSS 9.4

CVE-2026-73486 · FlowiseAI Flowise

Flowise before 3.1.3 Code Injection via CSV Agent customReadCSV

EPSS 0.7%public exploit CVSS 9.0

CVE-2026-73602 · FlowiseAI Flowise

Flowise before 3.1.3 Sandbox Escape to RCE

EPSS 0.8%CVSS 9.9

CVE-2026-73601 · FlowiseAI Flowise

Flowise before 3.1.3 Remote Code Execution via Custom MCP

EPSS 1%CVSS 9.0

CVE-2026-73485 · FlowiseAI Flowise

Flowise before 3.1.3 Remote Code Execution via Airtable Agent

EPSS 0.6%CVSS 9.0

Budibase1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2026-73407 · Budibase budibase

Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak (bypass of CVE-2026-48152))

EPSS 0.5%public exploit CVSS 9.0

getkin1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-73501 · getkin kin-openapi

kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default

EPSS 0.4%public exploit CVSS 9.1

wolfsoftwaresystemsltd1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-73519 · wolfsoftwaresystemsltd WolfStack

WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret

EPSS 1%CVSS 9.8

QuarkA1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-27544 · QuarkA QA Analytics

WordPress QA Analytics plugin <= 5.2.0.0 - Remote Code Execution (RCE) vulnerability

EPSS 0.9%CVSS 10.0

siyuan-note1 vulnerability on this pageMax CVSS 9.2Priority 42KEV 0

CVE-2026-73608 · siyuan-note siyuan

SiYuan v3.7.4-alpha.2 Authorization Bypass via getAttributeViewSearchTarget

EPSS 0.3%public exploit CVSS 9.2

Hakan Ozevin1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-61962 · Hakan Ozevin WP BASE Booking

WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability

EPSS 0.7%CVSS 10.0

IBM7 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-17083 · IBM i

IBM i is Affected By Multiple Vulnerabilities in the Debug Server

EPSS 0.8%CVSS 9.8

CVE-2024-27253 · IBM DOORS Next

IBM Engineering Requirements Management DOORS Next is impacted by vulnerability in Reviews delete request

EPSS 0.6%CVSS 10.0

CVE-2026-17111 · IBM i

IBM i is Affected By Multiple Vulnerabilities in SQL

EPSS 0.5%CVSS 9.8

CVE-2026-10534 · IBM Db2

IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser

EPSS 0.4%CVSS 9.8

CVE-2026-10543 · IBM Db2

IBM® Db2® is vulnerable to privilege escalation with a specially crafted query

EPSS 0.4%CVSS 9.8

CVE-2026-17616 · IBM Security Verify Access

Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.4%CVSS 9.8

CVE-2026-13433 · IBM i Access Client Solutions

IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities

EPSS 0.2%CVSS 9.6

Red Hat2 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-71471 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11

Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image

EPSS 1%CVSS 9.0

CVE-2026-72508 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11

Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (//*)

EPSS 0.8%CVSS 9.9

SMEWebify1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-49827 · SMEWebify WebErpMesv2

WebErpMesv2 has Unauthenticated RCE via Unrestricted File Upload in HR Expense scan_file (CWE-434)

EPSS 0.9%CVSS 9.8

ericcornelissen1 vulnerability on this pageMax CVSS 9.2Priority 40KEV 0

CVE-2026-73414 · ericcornelissen shescape

Shescape: Shell injection via unescaped parentheses on Windows with CMD

EPSS 0.9%CVSS 9.2

MITHALDU1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-16770 · MITHALDU PDF::WebKit

PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document

EPSS 0.7%CVSS 9.8

miniOrange3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-28008 · miniOrange OAuth Single Sign On – SSO (OAuth Client)

WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.0.0 - Broken Authentication vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-28149 · miniOrange Headless Single Sign On

WordPress Headless Single Sign On plugin <= 1.6 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-28148 · miniOrange Headless Single Sign On

WordPress Headless Single Sign On plugin <= 1.6 - Bypass Vulnerability vulnerability

EPSS 0.3%CVSS 9.8

MongoDB1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-19001 · MongoDB BI Connector ODBC Driver

MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names

EPSS 0.5%CVSS 9.8

Priority5 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-59500 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority - CWE-287: Improper Authentication

EPSS 0.5%CVSS 10.0

CVE-2026-59503 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS 0.4%CVSS 9.1

CVE-2026-59504 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-602: Client-Side Enforcement of Server-Side Security

EPSS 0.4%CVSS 9.1

CVE-2026-59506 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-306: Missing Authentication for Critical Function

EPSS 0.4%CVSS 9.3

CVE-2026-59507 · Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)

Priority – CWE-798: Use of Hard-coded Credentials CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-284: Improper Access Control

EPSS 0.3%CVSS 9.3

SCADA-LTS1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-19656 · SCADA-LTS ScadaLTS

ScadaLTS Authenticated Remote Code Execution

EPSS 0.5%CVSS 9.9

Unknown2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-15413 · Unknown Link Factory

Link Factory - Backdoor

EPSS 0.5%CVSS 10.0

CVE-2026-14182 · Unknown Customer Email Verification for WooCommerce

Customer Email Verification for WooCommerce < 3.2.6 - Unauthenticated Account Takeover via Type-Juggling Authentication Bypass

EPSS 0.5%CVSS 9.8

CERT/CC1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-18749 · CERT/CC VINCE

CVE-2026-18749

EPSS 0.5%CVSS 9.8

OpenStack1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-71193 · OpenStack Designate

In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped…

EPSS 0.5%CVSS 9.6

owen23451 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-73332 · owen2345 CamaleonCMS

CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field

EPSS 0.4%CVSS 9.2

Shamalli1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-28142 · Shamalli Web Directory Free

WordPress Web Directory Free plugin <= 1.7.13 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

WPDirectoryKit1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-28001 · WPDirectoryKit WP Directory Kit

WordPress WP Directory Kit plugin <= 1.5.4 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

rtCamp1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-28185 · rtCamp Log in with Google

WordPress Log in with Google plugin <= 1.4.2 - Broken Authentication vulnerability

EPSS 0.3%CVSS 9.8

The archive.