The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,897 matching vulnerabilities · Page 134 of 778

Dan-in-CA1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-58479 · Dan-in-CA SIP

Sustainable Irrigation Platform 5.2.16 RCE via cli_control Plugin Command Injection

EPSS 4%public exploit CVSS 9.8

VITEC2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-61498 · VITEC Flamingo

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via gen_graphs.php

EPSS 4%public exploit CVSS 9.8

CVE-2026-60121 · VITEC Flamingo

Vitec Flamingo 4.12.2 Unauthenticated OS Command Injection via ping.php

EPSS 3%public exploit CVSS 9.8

decolua2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-59801 · decolua 9Router

9Router 0.4.41 - Unauthenticated API Exposure via /api/providers

EPSS 3%public exploit CVSS 9.8

CVE-2026-62327 · decolua 9Router

9Router 0.4.41 - Unauthenticated API Key Exposure via /api/usage/stats

EPSS 6%public exploit CVSS 9.3

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-38450 · mitre

An issue in Aetopia Digital Asset Management DAM v.1.0.0 allows a remote attacker to execute arbitrary code via the name and description…

EPSS 1%public exploit CVSS 9.8

CVE-2026-51808 · mitre

Buffer Overflow vulnerability in OpenHTJ2K v.0.18.4 and before allows an attacker to execute arbitrary code via the openhtj2k_decoder_imp…

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-52101 · mitre

An issue in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to obtain sensitive information via the function uplo…

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-51807 · mitre

Heap-based out-of-bounds write in j2k_precinct_subband::parse_packet_header() in OpenHTJ2K versions 0.18.3 and earlier (fixed in v0.18.4)…

EPSS 0.7%CVSS 9.8

ChurchCRM1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-58409 · ChurchCRM CRM

ChurchCRM: Authenticated Remote Code Execution (RCE) via Malicious Plugin Upload

EPSS 0.6%public exploit CVSS 9.1

zephyrproject1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-10672 · zephyrproject zephyr

Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)

EPSS 0.6%public exploit CVSS 9.1

Apache Software Foundation5 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-62392 · Apache Software Foundation Apache Kylin

Apache Kylin: OS Command Injection via Async Query API

EPSS 2%CVSS 9.8

CVE-2026-62390 · Apache Software Foundation Apache Kylin

Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API

EPSS 0.7%CVSS 9.8

CVE-2026-58319 · Apache Software Foundation Apache Doris

Apache Doris: Improper Authentication in Frontend HTTP API

EPSS 0.7%CVSS 9.1

CVE-2026-59083 · Apache Software Foundation Apache Tomcat

Apache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypass

EPSS 0.5%CVSS 9.1

CVE-2026-59084 · Apache Software Foundation Apache Tomcat

Apache Tomcat: EncryptInterceptor requirements not clearly documented

EPSS 0.5%CVSS 9.1

ueberauth1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-55954 · ueberauth ueberauth_apple

Missing ID token claim validation in ueberauth_apple allows account takeover

EPSS 0.5%public exploit CVSS 9.1

zereight1 vulnerability on this pageMax CVSS 9.2Priority 46KEV 0

CVE-2026-61462 · zereight mcp-gitlab

mcp-gitlab Path Traversal via job_id Parameter

EPSS 0.5%public exploit CVSS 9.2

rejetto1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-61500 · rejetto hfs

Rejetto HFS < 3.2.1 Session Forgery via Predictable Signing Key

EPSS 2%CVSS 9.8

ServiceNow1 vulnerability on this pageMax CVSS 9.5Priority 43KEV 0

CVE-2026-6875 · ServiceNow ServiceNow AI Platform

Sandbox Escape in ServiceNow AI Platform

EPSS 1%CVSS 9.5

EVbee6 vulnerabilities on this pageMax CVSS 9.3Priority 42KEV 0

Unknown1 vulnerability on this pageMax CVSS 9.6Priority 42KEV 0

CVE-2026-11563 · Unknown Word Count and Social Shares

Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

EPSS 0.2%public exploit CVSS 9.6

4real1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-6847 · 4real ThemisNETPanel

Unauthenticated Remote Code Execution in ThemisNETPanel

EPSS 0.9%CVSS 9.3

HMBRAND1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-15043 · HMBRAND DBI::SQL::Nano

DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text

EPSS 0.7%CVSS 9.8

JetBrains1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-62422 · JetBrains YouTrack

In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypas…

EPSS 0.6%CVSS 10.0

Milestone Systems1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-3014 · Milestone Systems XProtect Management Server

Remote Code Execution by administrative user on the Management Server

EPSS 0.8%CVSS 9.1

Mura Software1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-12257 · Mura Software CMS

Remote code execution in Mura Software’s CMS

EPSS 0.7%CVSS 9.3

SAP_SE3 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-44747 · SAP_SE SAP NetWeaver Application Server ABAP

Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP

EPSS 0.6%CVSS 9.9

CVE-2026-27690 · SAP_SE SAP Approuter

HTTP Request Smuggling in SAP Approuter

EPSS 0.7%CVSS 9.1

CVE-2026-44761 · SAP_SE SAP Commerce Cloud

Insecure Sample Credentials in SAP Commerce Cloud

EPSS 0.5%CVSS 9.1

Siemens1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-56451 · Siemens Opcenter X

A vulnerability has been identified in Opcenter X (All versions < V2604).

EPSS 0.5%CVSS 10.0

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.0Priority 38KEV 0

CVE-2026-57898 · Eclipse Foundation Eclipse BaSyx - Java Server SDK

In Eclipse BaSyx Java Server SDK versions 2.0.0-milestone-05 to 2.0.0-milestone-12, deployments using the MongoDB backend are vulnerable…

EPSS 0.7%CVSS 9.0

HAARG1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-57433 · HAARG Storable

Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record

EPSS 0.5%CVSS 9.8

Thales CERT1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-13014 · Thales CERT Suspicious

Remote Code Execution vulnerability in "Suspicious" application

EPSS 0.7%CVSS 9.2

Rockwell Auotmation1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-10577 · Rockwell Auotmation 1715 EtherNet/IP Communications Module

Rockwell Automation 1715 Redundant IO – Access Control Vulnerability

EPSS 0.4%CVSS 10.0

tenable1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-15265 · tenable tenable_agent

Tenable Agent Path Traversal Leading to Remote Code Execution

EPSS 0.6%CVSS 9.3

CPANSec1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-13221 · CPANSec

Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.10 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk

EPSS 0.5%CVSS 9.1

Rockwell Automation3 vulnerabilities on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2025-11698 · Rockwell Automation CompactLogix® 5380 Recovery Image Compact GuardLogix® 5380 Recovery Image CompactLogix® 5480 Recovery Image ControlLogix® 5580 Recovery Image GuardLogix® 5580 Recovery Image

CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

EPSS 0.4%CVSS 9.2

CVE-2025-12011 · Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570

CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

EPSS 0.4%CVSS 9.2

CVE-2025-12012 · Rockwell Automation CompactLogix® 5370 Compact GuardLogix® 5370 ControlLogix® 5570 GuardLogix® 5570

CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

EPSS 0.4%CVSS 9.2

Google Cloud1 vulnerability on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-14934 · Google Cloud BigQuery

Cross-Tenant Repository Takeover via Improper Access Control in BigQuery, Dataform and Colab Enterprise

EPSS 0.4%CVSS 9.4

JONASBN1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-58102 · JONASBN Crypt::OpenSSL::X509

Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts

EPSS 0.3%CVSS 9.1

Snowflake1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-15183 · Snowflake Snowflake Spark Connector

Input Validation Vulnerabilities in Snowflake Spark Connector

EPSS 0.3%CVSS 9.2

GNU2 vulnerabilities on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-40469 · GNU gawk

Heap buffer overflow in gawk

EPSS 0.2%CVSS 9.1

CVE-2026-40468 · GNU gawk

Heap buffer overflow in gawk

EPSS 0.2%CVSS 9.1