Critical vulnerability archive — page 132

SonicWall1 vulnerability on this pageMax CVSS 10.0Priority 99KEV 1

CVE-2026-15409 · SonicWall SMA1000

SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability

KEV · due 17 Jul ransomware use EPSS 7%public exploit SSVC act CVSS 10.0

Adobe11 vulnerabilities on this pageMax CVSS 9.9Priority 98KEV 1

CVE-2026-48356 · Adobe Adobe Commerce

Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)

KEV · due 10 Nov EPSS 47%public exploit SSVC act CVSS 9.3

CVE-2026-48318 · Adobe ColdFusion 2025

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

EPSS 1%CVSS 9.9

CVE-2026-48322 · Adobe ColdFusion 2025

ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)

EPSS 1%CVSS 9.9

CVE-2026-48319 · Adobe ColdFusion 2025

ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

EPSS 1%CVSS 9.1

CVE-2026-48334 · Adobe Illustrator Desktop 2026

Illustrator | Improper Input Validation (CWE-20)

EPSS 1%CVSS 9.3

CVE-2026-48358 · Adobe Adobe Commerce

Adobe Commerce | Improper Encoding or Escaping of Output (CWE-116)

EPSS 1%CVSS 9.1

CVE-2026-48324 · Adobe ColdFusion 2025

ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

EPSS 1%CVSS 9.1

CVE-2026-48284 · Adobe ColdFusion 2025

ColdFusion | Improper Input Validation (CWE-20)

EPSS 0.5%CVSS 9.6

CVE-2026-48325 · Adobe ColdFusion 2025

ColdFusion | Missing Authentication for Critical Function (CWE-306)

EPSS 0.6%CVSS 9.3

CVE-2026-48321 · Adobe ColdFusion 2025

ColdFusion | Incorrect Authorization (CWE-863)

EPSS 0.4%CVSS 9.3

CVE-2026-48327 · Adobe ColdFusion 2025

ColdFusion | Incorrect Authorization (CWE-863)

EPSS 0.4%CVSS 9.0

F51 vulnerability on this pageMax CVSS 9.2Priority 56KEV 0

CVE-2026-42533 · F5 NGINX Plus

NGINX Map directive and Regex matching vulnerability

EPSS 6%public exploit CVSS 9.2

vitest-dev1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-53633 · vitest-dev vitest

Vitest: Exposed Browser Mode API Can Proxy CDP and Overwrite Config Files, Leading to RCE

EPSS 0.9%public exploit CVSS 9.8

penpot1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-44986 · penpot penpot

Penpot: Pre-authenticated account takeover via team-invitation token + prepare-register-profile

EPSS 0.5%public exploit CVSS 9.9

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-30623 · mitre

LiteLLM 1.18.10 contains a remote code execution vulnerability in its MCP server creation functionality.

EPSS 6%CVSS 9.8

CVE-2026-51380 · mitre

Buffer Overflow vulnerability in Tenda AC10 v3 (firmware V03.03.16.09) allows attackers to cause a permanent Denial of Service (DoS) or p…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-30618 · mitre

xszyou Fay 4.3.1 contains a remote code execution vulnerability in its MCP STDIO server management and command execution handling.

EPSS 1%CVSS 9.8

CVE-2025-65720 · mitre

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with…

EPSS 0.7%CVSS 9.8

CVE-2026-26718 · mitre

A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application v.3.0.0 that allows an attacker to perform…

EPSS 0.2%public exploit CVSS 9.1

open-webui2 vulnerabilities on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2026-56400 · open-webui open-webui

open-webui - Remote Code Execution via CORS Misconfiguration and Session Validation

EPSS 0.5%public exploit CVSS 9.6

CVE-2026-56398 · open-webui open-webui

Open WebUI - Stored Cross-Site Scripting via OAuth Picture Claim SVG Data URI

EPSS 0.6%CVSS 9.0

openwrt1 vulnerability on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2026-62948 · openwrt openwrt

OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

EPSS 0.6%public exploit CVSS 9.6

HKUDS2 vulnerabilities on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-61740 · HKUDS LightRAG

LightRAG: Authentication bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

EPSS 0.5%public exploit CVSS 9.3

CVE-2026-61736 · HKUDS LightRAG

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

EPSS 1%CVSS 9.3

getgrav1 vulnerability on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2026-61451 · getgrav grav-plugin-api

Grav API Plugin before 1.0.4 Password Reset Token Poisoning via admin_base_url

EPSS 0.3%public exploit CVSS 9.6

rustfs1 vulnerability on this pageMax CVSS 9.0Priority 44KEV 0

CVE-2026-62378 · rustfs console

RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover

EPSS 0.4%public exploit CVSS 9.0

NVIDIA1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-24227 · NVIDIA TensorRT

NVIDIA TensorRT for contains a vulnerability where a user might cause a deserialization of untrusted data.

EPSS 1%CVSS 9.8

metabase1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-50148 · metabase metabase

Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

EPSS 0.8%CVSS 10.0

twigphp5 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CIENA2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-5270 · CIENA Navigator NCS

Authentication Bypass in Navigator and Blue Planet Products

EPSS 0.7%CVSS 9.8

CVE-2026-5269 · CIENA Navigator NCS

Navigator NCS and MCP System Accounts with Default Passwords

EPSS 0.5%CVSS 9.8

PreferredAI1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-43637 · PreferredAI cornac

Cornac < 2.6.0 Path Traversal via _extract_archive() in download.py

EPSS 0.7%CVSS 9.1

XhmikosR1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-53486 · XhmikosR decompress

decompress: Archive extraction can create files and links outside the target directory

EPSS 0.7%CVSS 9.1

Cisco2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-20156 · Cisco Cisco RoomOS Software

Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities

EPSS 0.5%CVSS 9.8

CVE-2026-20157 · Cisco Cisco RoomOS Software

Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities

EPSS 0.2%CVSS 9.8

Pegatron Corp.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-14960 · Pegatron Corp. Tdelo64.sys

CVE-2026-14960

EPSS 0.5%CVSS 9.8

AWS1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-15643 · AWS awslabs.healthlake-mcp-server

AWS HealthLake MCP Server SSRF via Pagination URL

EPSS 0.4%CVSS 9.2

Google1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-15773 · Google Chrome

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox esc…

EPSS 0.3%CVSS 9.6

jwt1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-45363 · jwt ruby-jwt

`jwt` (Ruby gem) - empty-key HMAC bypass

EPSS 0.4%CVSS 9.1

better-auth2 vulnerabilities on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2026-53513 · better-auth better-auth

Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration

EPSS 0.2%CVSS 9.6

CVE-2026-53512 · better-auth better-auth

Better Auth: OAuth refresh-token replay via missing client authentication on oidc-provider and mcp plugins

EPSS 0.3%CVSS 9.1

lightpanda-io2 vulnerabilities on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-52842 · lightpanda-io browser

Lightpanda:URL parser misidentifies page origin for URLs containing @ in the path - Same-Origin Policy bypass

EPSS 0.2%CVSS 9.3

CVE-2026-52843 · lightpanda-io browser

Lightpanda: fetch() and XMLHttpRequest attach session cookies to cross-origin requests regardless of credentials mode

EPSS 0.2%CVSS 9.3

labring1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-50562 · labring FastGPT

FastGPT: Untrusted PR artifacts are pushed and deployed by privileged preview workflows

EPSS 0.2%CVSS 9.3

ASUS1 vulnerability on this pageMax CVSS 9.5Priority 29KEV 0

CVE-2026-13385 · ASUS Router

An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-…

EPSS 0.1%CVSS 9.5

The archive.