Critical vulnerability archive — page 128

RVC-Boss1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-63766 · RVC-Boss GPT-SoVITS

GPT-SoVITS 20250606v2pro OS Command Injection via webui.py

EPSS 2%public exploit CVSS 9.8

freescout-help-desk1 vulnerability on this pageMax CVSS 9.4Priority 54KEV 0

CVE-2026-53595 · freescout-help-desk freescout

FreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL

EPSS 2%public exploit CVSS 9.4

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 52KEV 0

CVE-2026-13147 · Unknown Kirki

Kirki < 6.0.12 - Unauthenticated Server-Side Request Forgery via kirki_get_apis

EPSS 1%public exploit CVSS 9.1

mitre7 vulnerabilities on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-51027 · mitre

An issue in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via the ft2.php component.

EPSS 0.6%public exploit CVSS 9.9

CVE-2024-51311 · mitre

The Tenda TX9 V22.03.02.05 firmware has a stack overflow vulnerability in the sub_4418CC function of the file /goform/SetNetControlList.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-51312 · mitre

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EEE0 function of the file /goform/SetStaticRouteCfg.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-51313 · mitre

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_42EA38 function of the file /goform/SetVirtualServerCfg.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-51314 · mitre

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_424CE0 function of the file /goform/setMacFilterCfg.

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-51315 · mitre

The Tenda TX9 V22.03.02.20 firmware has a stack overflow vulnerability in the sub_425964 function of the file /goform/SetOnlineDevName

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-52656 · mitre

An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based v.1.4C and before allows an attacker to execut…

EPSS 0.7%CVSS 9.8

Piwigo1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-35048 · Piwigo Piwigo

Piwigo RCE via PHP Code Injection into Config File in Installer

EPSS 0.6%public exploit CVSS 9.8

Jovancoding2 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-54051 · Jovancoding Network-AI

Network-AI has an an OS Command Injection issue

EPSS 0.5%public exploit CVSS 9.9

CVE-2026-64622 · Jovancoding Network-AI

Network-AI 5.12.2 through 5.13.3 Missing Authorization via ApprovalInbox

EPSS 0.5%public exploit CVSS 9.3

wazuh1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-28220 · wazuh wazuh

Wazuh cluster DAPI arbitrary callable deserialization and RBAC context injection allow a cluster peer to execute privileged functions on the master node

EPSS 0.7%public exploit CVSS 9.1

heyform1 vulnerability on this pageMax CVSS 9.0Priority 46KEV 0

CVE-2026-35198 · heyform heyform

HeyForm vulnerable to stored XSS via form field titles

EPSS 0.5%public exploit CVSS 9.0

meshtastic1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2026-44359 · meshtastic firmware

Meshtastic GitHub repo vulnerable to Arbitrary Code Execution via pull_request_target Fork Checkout in CI Workflow

EPSS 2%CVSS 10.0

FreeRDP2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-64621 · FreeRDP FreeRDP

FreeRDP before 3.28.0 Double-Free via selectedmonitors

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-64620 · FreeRDP FreeRDP

FreeRDP before 3.28.0 Heap Buffer Overflow via crypto_rsa_common

EPSS 0.9%CVSS 9.8

NLNETLABS1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-64193 · NLNETLABS Net::DNS

Net::DNS versions through 1.55 for Perl allow remote execution injection via EDNS EXTENDED ERROR

EPSS 1%CVSS 9.8

Apache Software Foundation5 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-53421 · Apache Software Foundation Apache Syncope

Apache Syncope: Remote Code Execution via Scripted Connector

EPSS 1%CVSS 9.8

CVE-2026-57308 · Apache Software Foundation Apache Syncope

Apache Syncope: SQL injection vulnerability in Audit Events search

EPSS 0.8%CVSS 9.8

CVE-2026-62183 · Apache Software Foundation Apache Syncope

Apache Syncope: User self-service privilege escalation

EPSS 0.9%CVSS 9.8

CVE-2026-63071 · Apache Software Foundation Apache Syncope

Apache Syncope: RCE via Groovy Sandbox bypass

EPSS 0.8%CVSS 9.8

CVE-2026-53405 · Apache Software Foundation Apache Syncope

Apache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTask

EPSS 0.7%CVSS 9.8

kvcache-ai1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-63767 · kvcache-ai ktransformers

ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ

EPSS 1%CVSS 9.8

neutrinolabs2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-41252 · neutrinolabs xrdp

xrdp: lib_palette_update Heap Buffer Overflow & RCE

EPSS 1%CVSS 9.8

CVE-2026-41521 · neutrinolabs xrdp

xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass

EPSS 0.7%CVSS 9.1

lettre1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-46428 · lettre lettre

lettre has TLS hostname verification disabled when using Boring TLS backend

EPSS 0.3%public exploit CVSS 9.1

BeProduct1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-46412 · BeProduct beproduct-org-nestjs-auth

Malicious code in @beproduct/nestjs-auth (0.1.2 through 0.1.19) — Mini Shai-Hulud worm

EPSS 0.8%CVSS 10.0

Red Hat2 vulnerabilities on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-12701 · Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8

Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport

EPSS 1%CVSS 9.0

CVE-2026-16242 · Red Hat multicluster engine for Kubernetes 2.1

Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates

EPSS 0.9%CVSS 9.4

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-64142 · Linux Linux

ksmbd: close durable scavenger races against m_fp_list lookups

EPSS 0.7%CVSS 9.8

CVE-2026-64150 · Linux Linux

netfilter: nft_inner: release local_lock before re-enabling softirqs

EPSS 0.6%CVSS 9.8

CVE-2026-64160 · Linux Linux

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

EPSS 0.4%CVSS 9.8

CVE-2026-64162 · Linux Linux

idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init()

EPSS 0.4%CVSS 9.8

DRSTEVE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-16235 · DRSTEVE Crypt::Password

Crypt::Password versions through 0.28 for Perl generate insecure random values for salts

EPSS 0.6%CVSS 9.8

WWBN1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-64625 · WWBN AVideo

AVideo before 29.0 OS Command Injection via execAsync

EPSS 0.6%CVSS 9.8

balbooa.com1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-61425 · balbooa.com Gridbox extension for Joomla

Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0

EPSS 0.6%CVSS 9.4

dj-extensions.com2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-61424 · dj-extensions.com DJ-Classifieds extension for Joomla

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2

EPSS 0.4%CVSS 10.0

CVE-2026-61900 · dj-extensions.com jDownloads extension for Joomla

Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownloads < 4.1.6

EPSS 0.4%CVSS 10.0

dotCMS1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-16337 · dotCMS dotCMS

Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platfor…

EPSS 0.6%CVSS 9.4

JCD1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-57309 · JCD Windu CMS

Blind SQL Injection in Windu CMS

EPSS 0.5%CVSS 9.3

chamilo1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-39878 · chamilo chamilo-lms

Chamilo stored XSS via user registration leads to admin account takeover

EPSS 0.4%CVSS 9.3

SailPoint Technologies1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-12341 · SailPoint Technologies IdentityIQ

SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability

EPSS 0.4%CVSS 9.8

themexpert.com2 vulnerabilities on this pageMax CVSS 9.4Priority 36KEV 0

CVE-2026-60034 · themexpert.com JMedia extension for Joomla

Joomla Extension - themexpert.com - Authenticated stored XSS in JMedia Extension < 1.6.0

EPSS 0.4%CVSS 9.4

CVE-2026-60032 · themexpert.com JMedia extension for Joomla

Joomla Extension - themexpert.com - Authenticated arbitrary file upload in JMedia < 1.6.0

EPSS 0.4%CVSS 9.4

joomlack.fr1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-62414 · joomlack.fr Page Builder CK extension for Joomla

Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2

EPSS 0.4%CVSS 9.1

surrealdb1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-63756 · surrealdb surrealdb

SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition

EPSS 0.4%CVSS 9.2

VSee1 vulnerability on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2026-13380 · VSee Clinic

VSee Clinic and API Exposes Cleartext SFTP Credentials in Unauthenticated HTTP Responses

EPSS 0.4%CVSS 9.0

bestpractical1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-44231 · bestpractical rt

RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

EPSS 0.2%CVSS 9.1

The archive.