Critical vulnerability archive — page 120

dbgate3 vulnerabilities on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2026-47668 · dbgate dbgate

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner

EPSS 4%public exploit CVSS 10.0

CVE-2026-47670 · dbgate dbgate

DbGate Vulnerable to Authenticated Remote Code Execution via loadReader functionName code injection

EPSS 2%public exploit CVSS 9.4

CVE-2026-47669 · dbgate dbgate

DbGate: Zip Slip in archive/unzip allows arbitrary file write leading to RCE

EPSS 0.5%public exploit CVSS 9.3

h2oai1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-65700 · h2oai h2ogpt

h2oGPT 0.2.1 Path Traversal via OpenAI-compatible Files API

EPSS 2%public exploit CVSS 9.8

siyuan-note2 vulnerabilities on this pageMax CVSS 9.6Priority 50KEV 0

CVE-2026-65605 · siyuan-note siyuan

SiYuan before v3.7.2 Stored XSS to RCE via Attribute View

EPSS 0.8%public exploit CVSS 9.6

CVE-2026-65606 · siyuan-note siyuan

SiYuan before v3.7.2 Cross-Site Scripting to RCE

EPSS 0.8%public exploit CVSS 9.6

kata-containers1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-44210 · kata-containers kata-containers

Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

EPSS 0.6%public exploit CVSS 9.9

svc-develop-team1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2026-65701 · svc-develop-team so-vits-svc

SoftVC VITS Singing Voice Conversion Path Traversal via /wav2wav Flask Route

EPSS 0.7%public exploit CVSS 9.3

calcom4 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2024-58354 · calcom cal.diy

cal.com Repository Takeover via pull_request_target Workflow

EPSS 0.5%public exploit CVSS 9.9

CVE-2024-58353 · calcom cal.diy

Cal.com through 4.7.15 Cross-Site Scripting via booking questions

EPSS 0.4%public exploit CVSS 9.3

CVE-2024-58355 · calcom cal.diy

Cal.com through 4.7.15 Cross-Site Scripting via booking questions

EPSS 0.4%public exploit CVSS 9.3

CVE-2025-71389 · calcom cal.diy

Cal.com before 5.9.9 Remote Code Execution via RSC

EPSS 1%CVSS 10.0

Casdoor1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-15630 · Casdoor Casdoor

CVE-2026-15630

EPSS 0.5%public exploit CVSS 9.9

Zohocorp1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-6516 · Zohocorp ManageEngine ADAudit Plus

Remote Code Execution

EPSS 5%CVSS 10.0

Quenary1 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2026-47752 · Quenary tugtainer

Tugtainer has Server-Side Template Injection in notification templates that leads to Remote Code Execution

EPSS 0.4%public exploit CVSS 9.9

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-15981 · cyberlord92 SAML Single Sign On – SSO Login

SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

EPSS 1%CVSS 9.8

decolua1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-63732 · decolua 9router

9router before 0.4.60 Remote Code Execution via default password

EPSS 1%CVSS 9.9

Bold Reports (By SyncFusion)3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-65687 · Bold Reports (By SyncFusion) Standalone Report Designer

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via SVG Processing

EPSS 0.9%CVSS 9.8

CVE-2026-65688 · Bold Reports (By SyncFusion) Standalone Report Designer

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Font Processing

EPSS 0.9%CVSS 9.8

CVE-2026-65689 · Bold Reports (By SyncFusion) Standalone Report Designer

Bold Reports Standalone Report Designer < 14.1.12 Arbitrary File Read via Database Download

EPSS 0.9%CVSS 9.8

joomshaper.com2 vulnerabilities on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2026-65761 · joomshaper.com Easy Store extension for Joomla

Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1

EPSS 1%CVSS 9.3

CVE-2026-65760 · joomshaper.com Easy Store extension for Joomla

Joomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.1

EPSS 0.4%CVSS 9.2

WPLake1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-59543 · WPLake Advanced Views

WordPress Advanced Views plugin <= 3.8.11 - Remote Code Execution (RCE) vulnerability

EPSS 0.8%CVSS 9.9

Appriss Insights1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-63359 · Appriss Insights Victim Information Notification Exchange (VINE)

Appriss Insights VINE SQLI

EPSS 0.7%CVSS 9.8

JetBrains5 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-65906 · JetBrains TeamCity

In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

EPSS 0.7%CVSS 10.0

CVE-2026-64813 · JetBrains IntelliJ IDEA

In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session

EPSS 0.5%CVSS 10.0

CVE-2026-64812 · JetBrains IntelliJ IDEA

In JetBrains IntelliJ IDEA before 2026.2 unauthorized input injection was possible in a Remote Development session

EPSS 0.5%CVSS 10.0

CVE-2026-64815 · JetBrains IntelliJ IDEA

In JetBrains IntelliJ IDEA before 2026.2 arbitrary code injection was possible via UI Designer form files

EPSS 0.5%CVSS 9.8

CVE-2026-65907 · JetBrains TeamCity

In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possible

EPSS 0.7%CVSS 9.1

Roland Barker1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-59555 · Roland Barker Participants Database

WordPress Participants Database plugin <= 2.7.8.3 - Arbitrary File Deletion vulnerability

EPSS 0.6%CVSS 10.0

Progress3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-10697 · Progress MOVEit Transfer

MFA Bypass in MOVEit Transfer

EPSS 0.6%CVSS 9.8

CVE-2026-15966 · Progress MOVEit Transfer

Improper CORS handling in MOVEit Transfer

EPSS 0.4%CVSS 9.8

CVE-2026-15967 · Progress MOVEit Transfer

MOVEit Transfer refresh-token processing does not enforce updated account restrictions

EPSS 0.4%CVSS 9.8

Pronetiqs1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-42933 · Pronetiqs Panduit Intravue

Unintended Proxy or Intermediary in Panduit IntraVUE by Pronetiqs

EPSS 0.5%CVSS 10.0

Thrive Themes Coupon1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-59544 · Thrive Themes Coupon Thrive Quiz Builder

WordPress Thrive Quiz Builder plugin <= 10.9.3.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

Cozy Vision Technologies Pvt. Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-59540 · Cozy Vision Technologies Pvt. Ltd. SMS Alert Order Notifications

WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Privilege Escalation vulnerability

EPSS 0.5%CVSS 9.8

juev1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-47724 · juev nebula-mesh

nebula-mesh: API endpoints lack ownership checks, enabling cross-operator privilege escalation

EPSS 0.5%CVSS 9.9

MZ Automation1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-49035 · MZ Automation libIEC61850

Stack-based Buffer Overflow in MZ Automation libIEC61850

EPSS 0.6%CVSS 9.2

themetechmount2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-61951 · themetechmount TrueBooker

WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-61950 · themetechmount TrueBooker

WordPress TrueBooker plugin <= 1.2.3 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Logto4 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-15611 · Logto Logto

Unverified email-based SSO account linking

EPSS 0.5%CVSS 9.1

CVE-2026-15616 · Logto Logto

Local MFA not enforced during SSO sign-in

EPSS 0.5%CVSS 9.1

CVE-2026-15617 · Logto Logto

Principal/domain lookup without case normalization

EPSS 0.4%CVSS 9.1

CVE-2026-15612 · Logto Logto

LOIDC nonce validation bypass

EPSS 0.2%CVSS 9.1

MapSVG1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-65455 · MapSVG MapSVG

WordPress MapSVG plugin <= 8.14.0 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

Webの相談所1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-65461 · Webの相談所 Really Simple CSV Importer

WordPress Really Simple CSV Importer plugin <= 1.3 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

Bookly1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-61949 · Bookly Bookly

WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

RomanCode1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-59526 · RomanCode MapSVG

WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Shahjada1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-61948 · Shahjada WPDM – Premium Packages

WordPress WPDM – Premium Packages plugin <= 6.2.0 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Avada Studio1 vulnerability on this pageMax CVSS 9.6Priority 31KEV 0

CVE-2026-65471 · Avada Studio Avada Core

WordPress Avada Core plugin <= 5.15.6 - Cross Site Request Forgery (CSRF) vulnerability

EPSS 0.2%CVSS 9.6

The archive.