Critical vulnerability archive — page 130

IBM14 vulnerabilities on this pageMax CVSS 9.9Priority 99KEV 1

CVE-2026-9198 · IBM Langflow OSS

Unauthenticated Remote Code Execution via Auto-Login Bypass and Code Validation

KEV · due 7 Aug EPSS 29%public exploit SSVC act CVSS 9.8

CVE-2026-9103 · IBM Langflow OSS

Unauthenticated Superuser Token Issuance via Auto-Login Endpoint

EPSS 3%CVSS 9.8

CVE-2026-8476 · IBM Langflow OSS

Disk Cache Deserialization Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.9

CVE-2026-8481 · IBM Langflow OSS

Remote Code Execution via Code Validation Endpoint

EPSS 0.9%CVSS 9.9

CVE-2026-8505 · IBM Langflow OSS

Authentication Bypass in Webhook Endpoints Allowed Unauthorized Flow Execution

EPSS 0.9%CVSS 9.8

CVE-2026-9135 · IBM Langflow OSS

Policies Component Dynamic CodeInput Fields Bypass Custom Component Validation

EPSS 0.8%CVSS 9.9

CVE-2026-13448 · IBM Langflow OSS

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

EPSS 0.7%CVSS 9.8

CVE-2026-13473 · IBM Storage Protect Client

IBM Storage Protect Client is vulnerable to Heap-Based Buffer Overflow

EPSS 0.7%CVSS 9.8

CVE-2026-8635 · IBM Langflow OSS

Arbitrary Code Execution in Python Interpreter Component

EPSS 0.6%CVSS 9.9

CVE-2026-8859 · IBM Langflow OSS

Path Traversal in APIRequest Component via Content-Disposition Header

EPSS 0.6%CVSS 9.9

CVE-2026-9202 · IBM Langflow OSS

Unauthenticated User Registration Could Lead to Remote Code Execution

EPSS 0.5%CVSS 9.8

CVE-2026-14501 · IBM Db2 Genius Hub

Use of Potentially Dangerous Functionthat in IBM Db2 Genius Hub

EPSS 0.5%CVSS 9.8

CVE-2026-15091 · IBM Engineering AI Hub

Multiple Vulnerabilities in IBM Engineering AI hub.

EPSS 0.6%CVSS 9.3

CVE-2026-13446 · IBM Langflow OSS

Langflow is affected by remote code execution, denial of service, path traversal, and exposed credentials due to multiple unauthenticated and insufficiently authorized API endpoints

EPSS 0.4%CVSS 9.8

Sangoma1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-9586 · Sangoma Switchvox SMB Edition

Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB

KEV · due 5 Sep EPSS 19%public exploit SSVC act CVSS 9.8

WordPress1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-63030 · WordPress WordPress

WordPress < 7.0.2 - REST API batch-route confusion and SQL injection issue leading to Remote Code Execution

KEV · due 24 Jul EPSS 11%public exploit SSVC act CVSS 9.8

jupyter-server1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-44182 · jupyter-server enterprise_gateway

Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering

EPSS 0.6%public exploit CVSS 10.0

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-36669 · mitre

An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Office 3.11.13.11 allows remote attackers to uplo…

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-52199 · mitre

An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the sbin/adbd component

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-52348 · mitre

cool-admin-java 8.0.0 has a SQL injection vulnerability in the order() method of CrudOption.java.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-42168 · mitre

django-pyas2 through 1.2.3 is vulnerable to OS command injection via the cmd_receive and cmd_send fields on the Partner model.

EPSS 2%CVSS 9.1

CVE-2026-51080 · mitre

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.

EPSS 0.5%CVSS 9.8

CVE-2025-51677 · mitre

An issue was discovered in openRISC OR1200 commit 83ac6b.

EPSS 0.6%CVSS 9.1

MohibShaikh1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-62241 · MohibShaikh clawvet

clawvet < 0.7.5 Hard-coded JWT Secret Session Forgery

EPSS 0.7%public exploit CVSS 9.3

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-9810 · Unknown AI Copilot

AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth

EPSS 0.5%public exploit CVSS 9.8

avo-hq1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-55518 · avo-hq avo

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

EPSS 0.4%public exploit CVSS 9.6

shivammathur1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-46420 · shivammathur setup-php

setup-php: Command Injection in Repository-Derived PHP Version Resolution

EPSS 2%CVSS 9.8

getgrav1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-62232 · getgrav grav

Grav < 2.0.4 2FA Bypass via Secret Regeneration

EPSS 0.4%public exploit CVSS 9.1

codeigniter41 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-48062 · codeigniter4 CodeIgniter4

CodeIgniter: Uploaded file extension validation bypass in `ext_in` rule

EPSS 0.8%CVSS 9.8

PrestaShop1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-54159 · PrestaShop ps_facetedsearch

ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

EPSS 0.8%CVSS 10.0

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-53399 · Linux Linux

nfsd: release layout stid on setlease failure

EPSS 0.7%CVSS 9.8

CVE-2026-53398 · Linux Linux

NFSD: Fix SECINFO_NO_NAME decode error cleanup

EPSS 0.5%CVSS 9.8

CVE-2026-53384 · Linux Linux

serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails

EPSS 0.5%CVSS 9.8

Vimesoft Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-12692 · Vimesoft Inc. Enterprise Video Platform

Improper Authentication in Vimesoft's Enterprise Video Platform

EPSS 0.6%CVSS 9.8

CVE-2026-12693 · Vimesoft Inc. Enterprise Video Platform

IDOR in Vimesoft's Enterprise Video Platform

EPSS 0.5%CVSS 9.4

CVE-2026-12694 · Vimesoft Inc. Enterprise Video Platform

Missing Authorization in Vimesoft's Enterprise Video Platform

EPSS 0.4%CVSS 9.1

@fastify/http-proxy2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-15631 · @fastify/http-proxy @fastify/http-proxy

@fastify/http-proxy vulnerable to prefix escape via WebSocket path traversal

EPSS 0.5%CVSS 10.0

CVE-2026-16117 · @fastify/http-proxy @fastify/http-proxy

@fastify/http-proxy vulnerable to prefix escape via URL-encoded characters

EPSS 0.4%CVSS 10.0

joomdonation.com1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-60024 · joomdonation.com Events Booking extension for Joomla

Joomla Extension - joomdonation.com - Insecure default configuration Events Booking < 5.8.0

EPSS 0.5%CVSS 9.8

VMware1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-47865 · VMware Avi Load Balancer

VMware Avi Load Balancer Authentication Bypass Vulnerability

EPSS 0.6%CVSS 9.8

Bricksforge1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-14956 · Bricksforge Bricksforge

Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter

EPSS 0.5%CVSS 9.8

CodeRevolution1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-15982 · CodeRevolution Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit

Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'

EPSS 0.5%CVSS 9.8

Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-8297 · Gis Informatics Engineering Consulting Laboratory R&D and Software Services Inc. GisLab Laboratory Management System

SQLi in GIS Informatics' GisLab Laboratory Management System

EPSS 0.5%CVSS 9.8

urwid1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-9323 · urwid urwid

Insecure PRNG and Information Exposure in urwid Web Display Backend

EPSS 0.7%CVSS 9.2

@fastify/reply-from1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-16158 · @fastify/reply-from @fastify/reply-from

@fastify/reply-from vulnerable to cross-upstream request routing via URL cache key collision

EPSS 0.4%CVSS 10.0

surrealdb2 vulnerabilities on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2024-58366 · surrealdb surrealdb

SurrealDB before 1.1.1 Format String via Scripting Functions

EPSS 0.6%CVSS 9.0

CVE-2025-71392 · surrealdb surrealdb

SurrealDB before 2.2.2 SurrealQL Injection via export

EPSS 0.4%CVSS 9.4

faye1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-54466 · faye websocket-driver-node

websocket-driver: Message corruption via abuse of protocol length headers

EPSS 0.4%CVSS 9.2

ZcashFoundation1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-54496 · ZcashFoundation zebra

Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness

EPSS 0.3%CVSS 9.3

HCL Software1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2024-23564 · HCL Software Aftermarket EPC

HCL Aftermarket EPC is affected by Business Logic Vulnerability using which a non valid user of the application can obtain passwords from…

EPSS 0.3%CVSS 9.1

The archive.