Critical vulnerability archive — page 131

decolua2 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-46339 · decolua 9router

9Router: Unauthenticated Remote Code Execution via unprotected MCP custom plugin routes

EPSS 3%public exploit CVSS 10.0

CVE-2026-49352 · decolua 9router

9Router: Hardcoded Default fallback JWT Secret Allows Authentication Bypass

EPSS 0.6%public exploit CVSS 9.8

yamcs4 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

WWBN3 vulnerabilities on this pageMax CVSS 9.6Priority 53KEV 0

CVE-2026-63304 · WWBN AVideo

AVideo through 29.0 OS Command Injection via listFFmpegProcesses

EPSS 2%public exploit CVSS 9.2

CVE-2026-63305 · WWBN AVideo

AVideo through 29.0 OS Command Injection via ffmpeg.json.php

EPSS 2%public exploit CVSS 9.2

CVE-2026-54458 · WWBN AVideo

AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin

EPSS 0.4%public exploit CVSS 9.6

nocobase1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-52887 · nocobase nocobase

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE

EPSS 0.9%public exploit CVSS 10.0

jupyter-server2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-44181 · jupyter-server enterprise_gateway

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution

EPSS 0.8%public exploit CVSS 10.0

CVE-2026-44180 · jupyter-server enterprise_gateway

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed

EPSS 0.7%public exploit CVSS 9.8

argoproj1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-54526 · argoproj argo-workflows

Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing

EPSS 0.6%public exploit CVSS 9.9

StratonWebDesigners1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-45336 · StratonWebDesigners HireFlow

HireFlow: Use of Hard-coded Credentials

EPSS 0.6%public exploit CVSS 10.0

wekan3 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-55652 · wekan wekan

Wekan: Header-login IP allowlist bypass via X-Forwarded-For spoofing in Wekan allows unauthenticated full account takeover (incl. admin)

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-52893 · wekan wekan

Wekan: OIDC Account Takeover via Unconditional Email-Based Account Merge in onCreateUser hook

EPSS 0.5%public exploit CVSS 9.2

CVE-2026-52891 · wekan wekan

Wekan: Shell Injection via Avatar Upload

EPSS 0.8%CVSS 9.9

mitre1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-38158 · mitre

A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive dat…

EPSS 0.5%public exploit CVSS 9.8

dataease2 vulnerabilities on this pageMax CVSS 9.5Priority 47KEV 0

CVE-2026-45534 · dataease dataease

DataEase: RCE Vulnerability

EPSS 0.6%public exploit CVSS 9.0

CVE-2026-46684 · dataease dataease

DataEase: Unauthorized Command Execution Vulnerability

EPSS 0.3%CVSS 9.5

whyour1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-55445 · whyour qinglong

Qinglong: Incomplete fix for CVE-2026-3965: Improper Authentication

EPSS 0.5%public exploit CVSS 9.3

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-15013 · cyberlord92 SAML Single Sign On – SSO Login

SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion

EPSS 2%CVSS 9.8

microsoft4 vulnerabilities on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-59865 · microsoft kiota

Kiota: Command injection via x-ms-kiota-info dependencyInstallCommand surfaced by `kiota info`

EPSS 4%CVSS 9.3

CVE-2026-59866 · microsoft kiota

Kiota: Arbitrary file write + code-injection via x-ms-kiota-info clientClassName and clientNamespaceName

EPSS 1%CVSS 9.3

CVE-2026-59864 · microsoft kiota

Kiota: Path/URL injection into generated Copilot plugin manifest via x-ai-* extensions

EPSS 1%CVSS 9.3

CVE-2026-54733 · microsoft o365-moodle

moodle-local_o365: Authentication bypass via unverified JWT signature in Teams SSO endpoint

EPSS 0.9%CVSS 9.3

kopia1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-45695 · kopia kopia

Kopia: Unauthenticated RCE via SSH ProxyCommand Injection when --insecure --without-password is used

EPSS 2%CVSS 9.8

stoatchat1 vulnerability on this pageMax CVSS 9.2Priority 42KEV 0

CVE-2026-63306 · stoatchat stoatchat

stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints

EPSS 0.3%public exploit CVSS 9.2

X-Rite2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-49900 · X-Rite MA-T6

Origin Validation Error in X-Rite MA-T6

EPSS 1.0%CVSS 9.8

CVE-2023-49899 · X-Rite MA-T6

Origin Validation Error in X-Rite MA-T6

EPSS 0.3%CVSS 9.8

grafana-cold-storage1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-63087 · grafana-cold-storage oncall

Grafana OnCall 1.16.11 Unauthenticated Token Hijack via Plugin Install Endpoint

EPSS 0.7%CVSS 9.8

mwtcmi2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-46512 · mwtcmi frogman

Frogman: Dialplan template parameters interpolated into extensions_custom.conf without escaping

EPSS 0.7%CVSS 9.9

CVE-2026-46515 · mwtcmi frogman

Frogman: Multiple read-tier tools expose admin-grade data and arbitrary GraphQL execution

EPSS 0.6%CVSS 9.3

SGLang1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-14890 · SGLang SGLang

CVE-2026-14890

EPSS 1.0%CVSS 9.1

TOKUHIROM1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-3031 · TOKUHIROM Image::EPEG

Image::EPEG versions through 0.15 for Perl embeds an unsupported version of the Epeg library

EPSS 0.7%CVSS 9.8

illumos1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-15422 · illumos illumos-gate

SCTP needs to better-check INIT ACK chunk parameters

EPSS 0.9%CVSS 9.1

openziti1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-45568 · openziti zrok

zrok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

EPSS 0.5%CVSS 9.9

CODECHILD2 vulnerabilities on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-57073 · CODECHILD HTML::Bare

HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead

EPSS 0.7%CVSS 9.1

CVE-2026-57074 · CODECHILD XML::Bare

XML::Bare versions through 0.53 for Perl have an unbounded character lookahead

EPSS 0.6%CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-12492 · Unknown Happy Coders OTP Login for WooCommerce

Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user

EPSS 0.5%CVSS 9.8

Zoom Communications1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-53412 · Zoom Communications Zoom Workplace for Windows

Zoom Workplace VDI Plugin for Windows - Improper Input Validation

EPSS 0.5%CVSS 9.8

cap-js1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-46421 · cap-js @cap-js/sqlite

Supply chain compromise via malicious package versions (@cap-js/sqlite, @cap-js/postgres, @cap-js/db-service)

EPSS 0.5%CVSS 9.3

Spring Security1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-22752 · Spring Security Spring Authorization Server

Spring Security Authorization Server Dynamic Client Registration endpoints perform insufficient validation of client metadata

EPSS 0.5%CVSS 9.6

TODDR1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-57075 · TODDR YAML::Syck

YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char lookup-table index in syck_base64dec

EPSS 0.6%CVSS 9.1

Canonical1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2026-11386 · Canonical ubuntu-pro-client (ubuntu-advantage-tools)

ubuntu-pro-client Input Validation Vulnerability Leading to Arbitrary APT Directive Injection and Remote Code Execution

EPSS 0.5%CVSS 9.0

czlonkowski1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2026-54052 · czlonkowski n8n-mcp

n8n-MCP: Cross-tenant access to workflow version backups in multi-tenant HTTP deployments

EPSS 0.4%CVSS 9.9

HCL Software1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-56453 · HCL Software DFXAnalytics

HCL DFXAnalytics is affected by an Account Takeover via Response Manipulation vulnerability.

EPSS 0.4%CVSS 9.8

wg-easy1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-63089 · wg-easy wg-easy

WireGuard Easy Weak Token Generation Information Disclosure via OTL Route

EPSS 0.4%CVSS 9.3

cilium1 vulnerability on this pageMax CVSS 9.2Priority 29KEV 0

CVE-2026-49445 · cilium cilium

Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access

EPSS 0.2%CVSS 9.2

Snowflake1 vulnerability on this pageMax CVSS 9.2Priority 29KEV 0

CVE-2026-15925 · Snowflake Snowflake Connector for Python

Improper TLS Hostname Verification in Snowflake Connector for Python

EPSS 0.2%CVSS 9.2

The archive.