Critical vulnerability archive — page 13

rachelos1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-111687 · rachelos we-mp-rss

WeRSS (we-mp-rss) through 1.5.3 RCE via template Parameter in /rss Endpoint

EPSS 1%public exploit CVSS 9.8

coleam001 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-111322 · coleam00 Archon

Archon 0.2.13 through 0.11.1 Missing Authentication via /api/* Control API

EPSS 0.9%public exploit CVSS 9.8

juggleim1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-111329 · juggleim JuggleIM

JuggleIM im-server through 1.8.16 Default Admin Credentials in Admin Console

EPSS 0.7%public exploit CVSS 9.8

Jooan1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111281 · Jooan JA-A12

Jooan JA-A12 Unauthenticated Root RCE via SetDiagMode Hard-Coded Credentials

EPSS 0.6%public exploit CVSS 9.8

l4296092011 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111643 · l429609201 misaka_danmu_server

Misaka Danmu Server through 2.8.9 Authentication Bypass via Config-History Rollback

EPSS 0.6%public exploit CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-95182 · mitre

An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening c…

EPSS 0.5%public exploit CVSS 10.0

CVE-2026-26846 · mitre

Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute arbitrary code via the…

EPSS 0.7%CVSS 9.8

suyuan321 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111690 · suyuan32 simple-admin-core

Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass

EPSS 0.6%public exploit CVSS 9.8

Thecosy1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-111673 · Thecosy IceCMS

IceCMS through 4.1.5 Missing Authentication via /User Administrative Endpoints

EPSS 0.5%public exploit CVSS 9.8

Theme-one1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-94169 · Theme-one The Grid

WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability

EPSS 4%CVSS 10.0

OpenHealthForAll1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-111312 · OpenHealthForAll OpenHealth

OpenHealth through 0.2.0 Missing Authentication via /api/health-data/[id] Route

EPSS 0.6%public exploit CVSS 9.2

xiaochong03021 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-111675 · xiaochong0302 course-tencent-cloud

Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover

EPSS 0.5%public exploit CVSS 9.1

Countly1 vulnerability on this pageMax CVSS 9.0Priority 45KEV 0

CVE-2026-44977 · Countly countly-server

countly-server: Stored XSS in feedback upload enables app-admin to compromise global admin session context

EPSS 0.4%public exploit CVSS 9.0

jfarthing841 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-89079 · jfarthing84 Theme My Login

Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter

EPSS 2%CVSS 9.8

magicblack1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-111356 · magicblack MacCMS

MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force

EPSS 0.4%public exploit CVSS 9.1

sgl-project1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2026-111391 · sgl-project sglang

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

EPSS 0.5%public exploit CVSS 9.2

chaskiq1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2026-111663 · chaskiq chaskiq

Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation

EPSS 0.4%public exploit CVSS 9.2

MariaDB3 vulnerabilities on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-92262 · MariaDB server

MariaDB: Numerous issues caused by historical #mysql50# tablename encoding bypass.

EPSS 1%CVSS 9.9

CVE-2026-85748 · MariaDB server

MariaDB: Use-after-free with a large number of SYS_REFCURSOR's

EPSS 1%CVSS 9.9

CVE-2026-85746 · MariaDB server

MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections

EPSS 1.0%CVSS 9.9

FreeRDP1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-111375 · FreeRDP FreeRDP

FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window Title

EPSS 0.3%public exploit CVSS 9.1

BMC Helix1 vulnerability on this pageMax CVSS 9.5Priority 40KEV 0

CVE-2026-111283 · BMC Helix BMC Helix Network Management

BMC Helix Network Management 26.3.00 before 26.3.01 Authentication Bypass via SAML Configuration

EPSS 0.8%CVSS 9.5

kitae-park1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-109219 · kitae-park Mang Board

Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter

EPSS 0.7%CVSS 9.8

elextensions1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-103768 · elextensions ELEX WordPress HelpDesk & Customer Ticketing System

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.7 - Unauthenticated Arbitrary File Upload via IMAP Email Attachment

EPSS 0.6%CVSS 9.8

joedolson1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-104798 · joedolson My Calendar – Accessible Event Manager

My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute

EPSS 0.5%CVSS 9.8

sunshinephotocart1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-104730 · sunshinephotocart Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers

Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter

EPSS 0.5%CVSS 9.8

Apache Software Foundation4 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-64610 · Apache Software Foundation Apache Kylin

Apache Kylin: Redis unsafe Java deserialization

EPSS 0.4%CVSS 9.8

CVE-2026-64959 · Apache Software Foundation Apache Kylin

Apache Kylin: Missing authentication on certain cache API endpoints

EPSS 0.4%CVSS 9.8

CVE-2026-94134 · Apache Software Foundation Apache Airflow SSH provider

Apache Airflow SSH provider, Apache Airflow SFTP provider: SSH hook disables host-key verification by default

EPSS 0.6%CVSS 9.1

CVE-2026-63619 · Apache Software Foundation Apache Kylin

Apache Kylin: Missing authorization and path-confinement on system meta dump

EPSS 0.3%CVSS 9.1

fastapiadmin1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-111641 · fastapiadmin FastapiAdmin

FastapiAdmin through 3.0 Authentication Bypass via Auto-Login Endpoints

EPSS 0.4%CVSS 9.8

properfraction1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-109515 · properfraction MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.

MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter

EPSS 0.4%CVSS 9.8

Webreaper1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-111626 · Webreaper Damselfly

Webreaper Damselfly through 4.5.3 Missing Authentication on REST API Controllers

EPSS 0.4%CVSS 9.8

Guangzhou Juan IoT Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-107617 · Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App

Guangzhou Juan IoT Technology EseeCloud Use of Hard-coded Credentials

EPSS 0.4%CVSS 9.8

RIOT-OS3 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-49868 · RIOT-OS RIOT

RIOT: DHCPv6 client _parse_reply() missing sub-option length check leads to size_t underflow and unbounded OOB heap read

EPSS 0.4%CVSS 9.8

CVE-2026-102692 · RIOT-OS RIOT

RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access

EPSS 0.4%CVSS 9.1

CVE-2026-102693 · RIOT-OS RIOT

RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID

EPSS 0.2%CVSS 9.6

Google1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-110916 · Google Chrome

Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.4%CVSS 9.6

OpenBMB1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-111636 · OpenBMB StaffDeck

OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret

EPSS 0.4%CVSS 9.2

Wheels1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-111444 · Wheels Wheels

Wheels through 4.1.2 allows SQL injection on MySQL/MariaDB with backslash escaping enabled (NO_BACKSLASH_ESCAPES absent) when an applicat…

EPSS 0.3%CVSS 9.8

wimoor-erp1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-111691 · wimoor-erp wimoor

WIMOOR through commit ec86736 Authentication Bypass via Forged X-USERINFO Header

EPSS 0.4%CVSS 9.1

Arcadia Technology, LLC1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-18516 · Arcadia Technology, LLC Crafty Controller

Improper Encoding or Escaping of Output in Crafty Controller

EPSS 0.3%CVSS 9.6

Finsys1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-57169 · Finsys dockhand

Dockhand: Unauthenticated container exec via WebSocket upgrade

EPSS 0.3%CVSS 9.6

J4Care2 vulnerabilities on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-97851 · J4Care dcm4chee-arc-light

J4Care dcm4che Missing Authorization

EPSS 0.3%CVSS 9.1

CVE-2026-105279 · J4Care dcm4chee-arc-light

J4Care dcm4che Missing Authentication for Critical Function

EPSS 0.3%CVSS 9.3

FreeRTOS3 vulnerabilities on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-102551 · FreeRTOS FreeRTOS-Plus-TCP

Improper verification of the source of a communication channel in FreeRTOS-Plus-TCP Router Advertisement handling

EPSS 0.3%CVSS 9.2

CVE-2026-109587 · FreeRTOS FreeRTOS-Kernel

Incorrect authorization in the Arm Cortex-R82 MPU port in FreeRTOS-Kernel

EPSS 0.1%CVSS 9.3

CVE-2026-109588 · FreeRTOS FreeRTOS-Kernel

Numeric truncation in the MPU buffer authorization check in FreeRTOS-Kernel

EPSS 0.2%CVSS 9.3

halfdata1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-94388 · halfdata Green Popups

WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

TSG1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-111472 · TSG Profleet

SQL injection in TSG Profleet

EPSS 0.2%CVSS 9.3

The archive.