Critical vulnerability archive — page 136

Flux1591 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-61459 · Flux159 mcp-server-kubernetes

MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

EPSS 2%public exploit CVSS 9.8

langroid3 vulnerabilities on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-54769 · langroid langroid

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

EPSS 0.9%public exploit CVSS 10.0

CVE-2026-54760 · langroid langroid

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

EPSS 0.6%public exploit CVSS 9.3

CVE-2026-55615 · langroid langroid

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

EPSS 0.5%public exploit CVSS 9.2

rabbitmq2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-57211 · rabbitmq rabbitmq-server

RabbitMQ: UNC SSRF affecting the management UI on Windows

EPSS 0.6%public exploit CVSS 10.0

CVE-2026-57216 · rabbitmq rabbitmq-server

RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks

EPSS 0.5%public exploit CVSS 10.0

decolua1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-55500 · decolua 9router

9router: Exposure of Sensitive Information and Unprotected Database Import/Export Allows Complete Credential Theft and Database Takeover

EPSS 0.5%public exploit CVSS 9.9

FreeRDP2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-57158 · FreeRDP FreeRDP

FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-57156 · FreeRDP FreeRDP

FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing

EPSS 0.7%CVSS 9.8

metabase2 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-59827 · metabase metabase

Metabase: Unsafe Deserialization of H2 Query Results

EPSS 4%CVSS 9.9

CVE-2026-59826 · metabase metabase

Metabase: Arbitrary Code Execution via Database Connection Detail Bypass

EPSS 1%CVSS 9.1

nesquena2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-58123 · nesquena hermes-webui

Hermes WebUI < 0.51.788 Unauthenticated RCE via Terminal API

EPSS 5%CVSS 9.8

CVE-2026-58122 · nesquena hermes-webui

Hermes WebUI < 0.51.307 Authentication Bypass via X-Forwarded-For Header Spoofing

EPSS 0.4%CVSS 9.3

prowler-cloud1 vulnerability on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2026-59151 · prowler-cloud prowler

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

EPSS 0.5%public exploit CVSS 9.6

ruvnet1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-59726 · ruvnet ruflo

Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment

EPSS 3%CVSS 10.0

Vikunja1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-56765 · Vikunja Vikunja

Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Disclosure Chained with Cross-Project Attachment IDOR

EPSS 0.5%public exploit CVSS 9.8

getgrav1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-58492 · getgrav grav

grav-plugin-database: SQL Injection in PDO::tableExists() due to Unsanitized Table Name Interpolation

EPSS 0.5%public exploit CVSS 9.2

MervinPraison1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-61444 · MervinPraison PraisonAI

PraisonAI before 4.6.78 Code Injection via f-string

EPSS 0.5%public exploit CVSS 9.4

WebRehab1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-14894 · WebRehab Super Forms – Drag & Drop Form Builder

Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

EPSS 3%CVSS 9.8

ntpsec1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-58459 · ntpsec gpsd

gpsd gpsprof Command Injection via gnuplot plot title subtype field

EPSS 3%CVSS 9.6

open-webui2 vulnerabilities on this pageMax CVSS 9.0Priority 45KEV 0

CVE-2026-59216 · open-webui open-webui

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id

EPSS 0.5%public exploit CVSS 9.0

CVE-2026-59214 · open-webui open-webui

Open WebUI: Stored web worker XSS via Pyodide

EPSS 0.4%CVSS 9.0

Dell1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-56688 · Dell PowerFlex Manager

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Co…

EPSS 2%CVSS 9.1

tenteeglobal1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-15282 · tenteeglobal Instant Appointment

Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

EPSS 1%CVSS 9.8

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-12761 · cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow

EPSS 0.9%CVSS 9.8

R-SOFT SERWIS1 vulnerability on this pageMax CVSS 9.0Priority 41KEV 0

CVE-2026-41880 · R-SOFT SERWIS DMS

OS Command Injection in R-SOFT DMS

EPSS 1%CVSS 9.0

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-28564 · Apache Software Foundation Apache IoTDB

Apache IoTDB: REST Basic Authentication Accepts Stale Cached Credentials

EPSS 0.7%CVSS 9.8

CVE-2026-40008 · Apache Software Foundation Apache IoTDB

Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPC

EPSS 0.6%CVSS 9.8

CVE-2026-40005 · Apache Software Foundation Apache IoTDB

Apache IoTDB: Path Traversal in Pipe File Transfer Receiver

EPSS 0.5%CVSS 9.1

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-59792 · JetBrains IntelliJ IDEA

In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in project workspace ID handling was possible

EPSS 0.6%CVSS 9.8

Semtek Informatics Software Consulting Trade Ltd. Co.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-5801 · Semtek Informatics Software Consulting Trade Ltd. Co. SEM-PMP

SQLi in Semtek Informatics' SEM-PMP

EPSS 0.6%CVSS 9.8

Adam Retail Automation Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-2397 · Adam Retail Automation Ltd. MobilMen 20T

SQLi in AdamPOS' MobilMen 20T

EPSS 0.5%CVSS 9.8

discourse1 vulnerability on this pageMax CVSS 9.0Priority 38KEV 0

CVE-2026-53963 · discourse discourse

Discourse: Stored-XSS in 2FA delete confirmation modal

EPSS 0.7%CVSS 9.0

getkirby1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-54003 · getkirby kirby

Kirby: External Initialization of the Panel on reverse proxy setups with the `Forwarded` header

EPSS 0.7%CVSS 9.1

Palo Alto Networks1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-0284 · Palo Alto Networks Cloud NGFW

PAN-OS: XML Injection Vulnerability in Large Scale VPN (LSVPN)

EPSS 0.5%CVSS 9.9

Linux1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-53363 · Linux Linux

xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

EPSS 0.4%CVSS 9.8

ninjew1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-15300 · ninjew GEO my WP

GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / 'lng' Parameters

EPSS 0.6%CVSS 9.1

PayRange1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-13461 · PayRange PayRange

PayRange version 7.0.7 contains a JavaScript injection vulnerability

EPSS 0.5%CVSS 9.6

Red Hat2 vulnerabilities on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-15143 · Red Hat Red Hat OpenShift AI 2.25

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

EPSS 0.5%CVSS 9.3

CVE-2026-15378 · Red Hat Red Hat OpenShift AI 2.25

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

EPSS 0.5%CVSS 9.3

Crawl4AI1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-56261 · Crawl4AI Crawl4AI

Crawl4AI - Server-Side Request Forgery via Webhook URLs

EPSS 0.5%CVSS 9.2

mitre1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-51119 · mitre

An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privileges via the /SystemUsers/CreateAppUser components

EPSS 0.5%CVSS 9.1

Xen8 vulnerabilities on this pageMax CVSS 9.4Priority 30KEV 0

The archive.