Critical vulnerability archive — page 110

GL.iNet2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-18686 · GL.iNet GL-MT3000

GL.iNet GL-MT3000 nas-web RPC Wrapper glc nas-web.add_user command injection

EPSS 5%public exploit CVSS 9.8

CVE-2026-18685 · GL.iNet GL-MT3000

GL.iNet GL-MT3000 modem.so glc set_upgrade command injection

EPSS 4%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-29296 · mitre

H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magi…

EPSS 2%public exploit CVSS 9.8

CVE-2026-67979 · mitre

Incorrect access control in the Executive Services dynamic application start path component of NASA cFS v7.0.1 allows attackers to execut…

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-63823 · mitre

My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the authentication module, which allows remote attackers to bypa…

EPSS 0.8%CVSS 9.8

CVE-2026-52466 · mitre

Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.

EPSS 0.5%CVSS 9.8

Puwell Technology Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-61515 · Puwell Technology Inc. IP Camera

Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

EPSS 2%public exploit CVSS 9.8

CVE-2026-61514 · Puwell Technology Inc. IP Camera

Puwell IP Camera 2.x - 4.x Unauthenticated Access via TCP Port 23456

EPSS 0.8%public exploit CVSS 9.8

FlowiseAI12 vulnerabilities on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2026-69251 · FlowiseAI Flowise

Flowise RCE via TypeORM DataSource

EPSS 3%public exploit CVSS 9.0

CVE-2026-69264 · FlowiseAI Flowise

Flowise: RCE via CSVAgent csvFile data URI base64 segment is interpolated into Python source without validation

EPSS 1%public exploit CVSS 9.8

CVE-2026-70470 · FlowiseAI Flowise

Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE

EPSS 1.0%public exploit CVSS 9.8

CVE-2026-69256 · FlowiseAI Flowise

Flowise: Remote Code Execution Vulnerability in CSVAgent

EPSS 1%public exploit CVSS 9.4

CVE-2026-70477 · FlowiseAI Flowise

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-69259 · FlowiseAI Flowise

Flowise RCE via SQLite Record Manager Node

EPSS 0.8%public exploit CVSS 9.4

CVE-2026-69263 · FlowiseAI Flowise

Flowise: CVE-2025-8943 Patch Bypass: npm_config_yes bypasses MCP environment variable blocklist (Unauthenticated RCE)

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-70478 · FlowiseAI Flowise

Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service

EPSS 0.6%public exploit CVSS 10.0

CVE-2026-69254 · FlowiseAI Flowise

Flowise: RCE via NodeVM Sandbox Escape in executeJavaScriptCode() nodeVMOptions Override

EPSS 0.7%public exploit CVSS 9.4

CVE-2026-69258 · FlowiseAI Flowise

Flowise: Unauthenticated Property Injection into Flow Execution Context via Ungated `overrideConfig` Spread in Prediction API

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-69255 · FlowiseAI Flowise

Flowise: CSV Agent Remote Code Execution via Pyodide Code Injection — Root Shell Verified

EPSS 0.6%public exploit CVSS 9.2

CVE-2026-69253 · FlowiseAI Flowise

Flowise Sandbox Escape to RCE

EPSS 0.7%CVSS 9.0

Cinnamon1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-69098 · Cinnamon kotaemon

kotaemon 0.12.0 Unauthenticated Remote Code Execution via Insecure Deserialization

EPSS 0.9%public exploit CVSS 9.8

OpenSIPS3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-45538 · OpenSIPS opensips

OpenSIPS: Stack Buffer Overflow in sip_to_json() Header Name Copy

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-45100 · OpenSIPS opensips

OpenSIPS: Buffer Overflow in Base64 Encode Transformation

EPSS 0.8%public exploit CVSS 9.1

CVE-2026-45537 · OpenSIPS opensips

OpenSIPS: Global Buffer Overflow in construct_uri

EPSS 0.6%public exploit CVSS 9.1

Microck1 vulnerability on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2026-69110 · Microck opencode-studio

OpenCode Studio < 2.4.4 Unauthenticated File Read via /api/tmp and /api/music

EPSS 0.8%public exploit CVSS 9.3

maximeAmini1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-69703 · maximeAmini Atals-Livre

Atlas-Livre Unauthenticated Access via Admin Controllers Missing Exit

EPSS 0.6%public exploit CVSS 9.8

Eclipse Foundation2 vulnerabilities on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-10050 · Eclipse Foundation Eclipse Jetty - EE8

Digest authentication lossy encoding

EPSS 0.6%public exploit CVSS 9.1

CVE-2026-60007 · Eclipse Foundation Eclipse Milo

In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable errors for invalid RSA PKCS#1 v1.5 paddin…

EPSS 0.6%CVSS 9.1

Keysight1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-49435 · Keysight Hawkeye

Keysight IxChariot-related products stack-based buffer overflow

EPSS 1%CVSS 9.8

Linux1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-64564 · Linux Linux

sctp: don't free the ASCONF's own transport in DEL-IP processing

EPSS 1%CVSS 9.8

MaxSite3 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-70553 · MaxSite MaxSite CMS

MaxSite CMS Unauthenticated RCE via Install Endpoint

EPSS 1%CVSS 9.8

CVE-2026-70554 · MaxSite MaxSite CMS

MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie

EPSS 1%CVSS 9.8

CVE-2026-70552 · MaxSite MaxSite CMS

MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php

EPSS 0.8%CVSS 9.8

Hewlett Packard Enterprise (HPE)2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-63455 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator

Authentication bypass via spoofed HTTP headers Orchestrator REST API

EPSS 0.8%CVSS 9.8

CVE-2026-63456 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator

Authentication bypass via spoofed HTTP headers Orchestrator REST API

EPSS 0.8%CVSS 9.8

NVIDIA1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-24254 · NVIDIA Dynamo

NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write.

EPSS 0.9%CVSS 9.8

Unknown2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-16618 · Unknown Improve SEO

ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

EPSS 0.8%CVSS 9.8

CVE-2026-15958 · Unknown Easy Integration for Dropbox

Easy Dropbox Integration < 2.2.0 - Unauthenticated Arbitrary Connected Dropbox File Access and Upload via nopriv AJAX

EPSS 0.3%CVSS 9.3

CJCOLLIER1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-66902 · CJCOLLIER Google::Auth

Google::Auth versions before 0.06 for Perl run a command named in an external_account credentials JSON via an ungated system call

EPSS 0.7%CVSS 9.8

Veeam3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-64633 · Veeam ONE

A vulnerability allowing remote unauthenticated code execution on the agent host.

EPSS 0.6%CVSS 10.0

CVE-2026-58072 · Veeam Service Provider Console

A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the management server, which can lead to remotecode ex…

EPSS 0.5%CVSS 9.0

CVE-2026-58073 · Veeam Service Provider Console

A vulnerability in Veeam Service Provider Console allowing an unauthenticated attacker to impersonate a managed agent andobtain that agen…

EPSS 0.3%CVSS 9.5

Bilin Software and Informatics Consultancy Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-14175 · Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources

Unrestricted File Upload in Bilin Software's HUMANIST Digital Human Resources

EPSS 0.5%CVSS 9.8

CVE-2026-14804 · Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources

Hardcoded Cryptographic Key in Bilin Software's HUMANIST Digital Human Resources

EPSS 0.4%CVSS 9.1

CVE-2026-15721 · Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources

Query Console SQL Injection Leading to Sensitive Data Disclosure in Bilin Software's HUMANIST Digital Human Resources

EPSS 0.3%CVSS 9.8

Google1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-0163 · Google Android

In multiple functions of vpu_ioctl.c, there is a possible use after free due to a use after free.

EPSS 0.4%CVSS 9.8

GeoVision Inc.2 vulnerabilities on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-18753 · GeoVision Inc. GV-AS1620 (AS-Manager)

Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-ASManager)

EPSS 0.4%CVSS 9.1

CVE-2026-18754 · GeoVision Inc. GV-AS1620 (GV-Cloud)

Hardcoded Cryptographic Key on GV-AS1620 Controller Firmware (GV-Cloud)

EPSS 0.4%CVSS 9.1

openmeter1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-18801 · openmeter openmeter

Stored Clickhouse SQL Injection Through Customer Usage Attribution

EPSS 0.4%CVSS 9.3

Qualcomm, Inc.1 vulnerability on this pageMax CVSS 9.6Priority 31KEV 0

CVE-2026-25289 · Qualcomm, Inc. Snapdragon

Stack-based Buffer Overflow in WLAN Firmware

EPSS 0.2%CVSS 9.6

The archive.