Critical vulnerability archive — page 106

HKUDS1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-61808 · HKUDS LightRAG

LightRAG: Missing Authentication for Critical API Functions in Default Configuration

EPSS 2%public exploit CVSS 9.8

Weaver Network Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2022-4995 · Weaver Network Co., Ltd. E-cology 9.0

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

EPSS 1%public exploit CVSS 9.8

Unknown3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-16258 · Unknown Ajax Search Lite

Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-14205 · Unknown WP Events Manager

WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-16038 · Unknown MStore API

MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways

EPSS 0.4%public exploit CVSS 9.1

Tobit Laboratories AG5 vulnerabilities on this pageMax CVSS 9.5Priority 49KEV 0

CVE-2026-54212 · Tobit Laboratories AG TeamDavid

TeamDavid: Buffer Overflow in JSON-parsing

EPSS 0.7%public exploit CVSS 9.5

CVE-2026-54213 · Tobit Laboratories AG TeamDavid

TeamDavid: Denial of Service via endpoint 'internalRestart'

EPSS 0.7%public exploit CVSS 9.2

CVE-2026-54210 · Tobit Laboratories AG TeamDavid

TeamDavid: Buffer Overflow in file names of file upload functionalities

EPSS 0.7%CVSS 9.5

CVE-2026-54211 · Tobit Laboratories AG TeamDavid

TeamDavid: Buffer Overflow in multiple form data parameters

EPSS 0.6%CVSS 9.5

CVE-2026-54203 · Tobit Laboratories AG TeamDavid

TeamDavid: Memory Leak leaking sensitive information

EPSS 0.6%CVSS 9.2

D-Link Corporation15 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-71944 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeQuectel

EPSS 3%CVSS 9.8

CVE-2026-71945 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formLtefotaUpgradeFibocom

EPSS 3%CVSS 9.8

CVE-2026-71946 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formPingDiagnosticRun

EPSS 3%CVSS 9.8

CVE-2026-71947 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formTracerouteDiagnosticRun

EPSS 3%CVSS 9.8

CVE-2026-71948 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun

EPSS 3%CVSS 9.8

CVE-2026-71949 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formUSSDSetup

EPSS 3%CVSS 9.8

CVE-2026-71950 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formSmsManage

EPSS 3%CVSS 9.8

CVE-2026-71951 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formIMEISetup

EPSS 3%CVSS 9.8

CVE-2026-71952 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formPinManageSetup

EPSS 3%CVSS 9.8

CVE-2026-71953 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formNtp

EPSS 3%CVSS 9.8

CVE-2026-71954 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formL2tpv3ConfigSetup

EPSS 3%CVSS 9.8

CVE-2026-71955 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via /boafrm/formWsc

EPSS 3%CVSS 9.8

CVE-2026-71956 · D-Link Corporation DWR-M961

D-Link DWR-M961 Command Injection via app.cgi

EPSS 3%CVSS 9.8

CVE-2026-71957 · D-Link Corporation DWR-M961

D-Link DWR-M961 Buffer Overflow via app.cgi

EPSS 1%CVSS 9.8

CVE-2026-71958 · D-Link Corporation DWR-M961

D-Link DWR-M961 Buffer Overflow via quicksetup.cgi

EPSS 1%CVSS 9.8

pipeboard-co1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-48039 · pipeboard-co meta-ads-mcp

Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token

EPSS 0.6%public exploit CVSS 9.1

brix1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2026-71851 · brix crypto-js

crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain

EPSS 0.5%public exploit CVSS 9.0

MSI4 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-71983 · MSI Radix AXE6600

MSI Radix AXE6600 v781521 Command Injection via wps.cgi

EPSS 2%CVSS 9.8

CVE-2026-71984 · MSI Radix AXE6600

MSI Radix AXE6600 v781521 Command Injection via urlfilter

EPSS 2%CVSS 9.8

CVE-2026-71985 · MSI Radix AXE6600

MSI Radix AXE6600 v781521 Command Injection via accesscontrol Function

EPSS 2%CVSS 9.8

CVE-2026-71986 · MSI Radix AXE6600

MSI Radix AXE6600 v781521 Command Injection via dmz Function

EPSS 2%CVSS 9.8

Microsoft4 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-50515 · Microsoft Azure Service Bus

Azure Service Bus Remote Code Execution Vulnerability

EPSS 2%CVSS 9.9

CVE-2026-63508 · Microsoft Microsoft Planetary Computer Pro (GeoCatalog)

Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-70332 · Microsoft Microsoft SharePoint Online

Microsoft Office SharePoint Spoofing Vulnerability

EPSS 0.9%CVSS 9.6

CVE-2026-62873 · Microsoft Microsoft 365 Admin Center

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 9.8

thomaspoignant1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-48170 · thomaspoignant scim-patch

scimPatch vulnerable to prototype pollution via unfiltered keys in patch

EPSS 0.4%public exploit CVSS 9.1

seblod.com1 vulnerability on this pageMax CVSS 9.2Priority 43KEV 0

CVE-2026-66914 · seblod.com SEBLOD extension for Joomla

Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1

EPSS 2%CVSS 9.2

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-71558 · Apache Software Foundation Apache Fory

Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization

EPSS 1.0%CVSS 9.8

CVE-2026-71560 · Apache Software Foundation Apache Fory

Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path

EPSS 0.8%CVSS 9.1

gitroomhq1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-19264 · gitroomhq postiz-app

Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

EPSS 1%CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.6Priority 42KEV 0

CVE-2026-37171 · mitre

A lack of tenant separation in SuperTokens Inc.

EPSS 0.3%public exploit CVSS 9.6

wupsales1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-14526 · wupsales AI Copilot – Content Generator

AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalation via Custom Workflow Route

EPSS 0.9%CVSS 9.8

kata-containers2 vulnerabilities on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-47243 · kata-containers kata-containers

Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

EPSS 0.2%public exploit CVSS 9.2

CVE-2026-50540 · kata-containers kata-containers

Kata Containers: Config Path Annotation Arbitrary File Loading

EPSS 0.6%CVSS 9.6

themetechmount2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-14365 · themetechmount TrueBooker – Appointment Booking and Scheduler System

TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'

EPSS 0.6%CVSS 9.8

CVE-2026-14364 · themetechmount TrueBooker – Appointment Booking and Scheduler System

TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'

EPSS 0.5%CVSS 9.8

Dell1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-56793 · Dell OpenManage Server Administrator Managed Node (Patch) for Windows

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability.

EPSS 0.5%CVSS 9.8

Linux1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-68082 · Linux Linux

libceph: fix two unsafe bare decodes in decode_lockers()

EPSS 0.5%CVSS 9.8

WebPros1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-64637 · WebPros Plesk

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative se…

EPSS 0.5%CVSS 9.9

openyak1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-46409 · openyak openyak

OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution

EPSS 0.3%CVSS 9.6

The archive.