Critical vulnerability archive — page 137

balbooa.com1 vulnerability on this pageMax CVSS 10.0Priority 99KEV 1

CVE-2026-56291 · balbooa.com balbooa.com Balbooa Forms extension for Joomla

Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

KEV · due 13 Jul EPSS 15%public exploit SSVC act CVSS 10.0

LocalAI1 vulnerability on this pageMax CVSS 9.2Priority 52KEV 0

CVE-2026-59707 · LocalAI LocalAI

LocalAI - Server-Side Request Forgery via POST /models/apply

EPSS 1%public exploit CVSS 9.2

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-52200 · mitre

An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management A…

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-31309 · mitre

Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated…

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-51599 · mitre

An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1.0.5 Build 230306 Rel.79931n allows an unauthent…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-51597 · mitre

MERCURY MIPC252W IP camera v1.0.5 Build 230306 Rel.79931n does not implement nonce expiration in RTSP Digest authentication.

EPSS 0.5%public exploit CVSS 9.1

appium1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-58192 · appium appium

Appium: Unauthenticated arbitrary file/directory deletion in @appium/storage-plugin

EPSS 0.6%public exploit CVSS 10.0

mem02 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-59705 · mem0 mem0

mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-59706 · mem0 mem0

mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url

EPSS 0.4%public exploit CVSS 9.3

Creative Themes1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-58480 · Creative Themes Blocksy Companion

Blocksy Companion Pro < 2.1.47 Unauthenticated File Upload via save_attachments

EPSS 4%CVSS 9.8

hapifhir1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-55471 · hapifhir org.hl7.fhir.core

HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory

EPSS 0.6%public exploit CVSS 9.1

isaacs1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-59873 · isaacs node-tar

node-tar: Decompression/parse DoS via unlimited input

EPSS 0.6%public exploit CVSS 9.2

jupyterlab1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-54527 · jupyterlab jupyterlab-git

JupyterLab Git: Stored XSS leading to RCE

EPSS 0.5%public exploit CVSS 9.3

dgraph-io1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-54061 · dgraph-io dgraph

Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import

EPSS 0.5%public exploit CVSS 9.1

repomix1 vulnerability on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2026-59702 · repomix repomix

repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

EPSS 0.4%public exploit CVSS 9.3

bitwarden1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-60104 · bitwarden server

Bitwarden Server < 2026.6.0 Authorization Bypass via Admin Auth Request

EPSS 0.4%public exploit CVSS 9.3

fluent1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-44024 · fluent fluentd

Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

EPSS 1%CVSS 9.8

acymailing.com1 vulnerability on this pageMax CVSS 9.2Priority 42KEV 0

CVE-2026-56292 · acymailing.com acymailing.com AcyMailing extension for Joomla

Joomla Extension - acymailing.com - SQL Injection in AcyMailing extension < 10.11.1

EPSS 1%CVSS 9.2

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-41042 · Apache Software Foundation Apache Gravitino

Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter

EPSS 2%CVSS 9.1

creativethemeshq1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-15158 · creativethemeshq Blocksy Companion

Blocksy Companion <= 2.1.46 - Unauthenticated Arbitrary File Upload via 'blc-review-images[]' Parameter

EPSS 1%CVSS 9.8

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-14245 · cyberlord92 miniOrange OTP Login, Verification and SMS Notifications

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter

EPSS 1%CVSS 9.8

tombgtn1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-14487 · tombgtn Simple Coherent Form

Simple Coherent Form <= 2.4.13 - Unauthenticated Arbitrary File Deletion via 'id' Parameter

EPSS 1%CVSS 9.1

rabilal1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-12153 · rabilal WP Learn Manager

WP Learn Manager <= 1.1.8 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation and Activation via jslearnmanager_ajax AJAX Action

EPSS 0.7%CVSS 9.8

TONYC1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-14454 · TONYC Imager

Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed

EPSS 0.7%CVSS 9.8

u-boot1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-29009 · u-boot u-boot

U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK

EPSS 0.7%CVSS 9.8

Webpros1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-56843 · Webpros Plesk

Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up do…

EPSS 0.7%CVSS 9.9

Xerte2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-12116 · Xerte Xerte Online Tools

CVE-2026-12116

EPSS 0.7%CVSS 9.8

CVE-2026-14261 · Xerte Xerte Online Tools

CVE-2026-14261

EPSS 1%CVSS 9.1

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-9695 · Dassault Systèmes DELMIA Apriso

Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026

EPSS 0.6%CVSS 9.8

Progress2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-8801 · Progress MOVEit Transfer

File Extension Restriction Bypass in MOVEit Transfer

EPSS 0.5%CVSS 9.8

CVE-2026-8649 · Progress MOVEit Transfer

Institution scope bypass vulnerability in custom reports

EPSS 0.5%CVSS 9.8

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-9074 · IBM API Connect

IBM API Connect SQL Injection

EPSS 0.5%CVSS 9.8

CVE-2026-3144 · IBM API Connect

IBM API Connect Default Credentials

EPSS 0.4%CVSS 9.8

Inrove Software and Internet Services1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-5955 · Inrove Software and Internet Services BiEticaret

SQLi in Inrove Software's BiEticaret

EPSS 0.5%CVSS 9.8

joe0071 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-9701 · joe007 Eventer

Eventer <= 4.4.2 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

EPSS 0.5%CVSS 9.8

Webbeyaz Web Design1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-8307 · Webbeyaz Web Design Mediküm Web

SQLi in Webbeyaz's Mediküm Web

EPSS 0.5%CVSS 9.8

CloudFoundry Foundation1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-47826 · CloudFoundry Foundation BOSH CLI tool

blobs.yaml Path Traversal Allows File Writes

EPSS 0.5%CVSS 9.1

CoreWCF1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-54782 · CoreWCF CoreWCF

CoreWCF: Authentication bypass in CoreWCF SAML 1.1 / 2.0 token signature validation

EPSS 0.4%CVSS 10.0

HMBRAND2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-14739 · HMBRAND DBI

DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders

EPSS 0.4%CVSS 9.8

CVE-2026-14740 · HMBRAND DBI

DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment

EPSS 0.4%CVSS 9.1

Microsoft1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-47646 · Microsoft Dynamics 365 Customer Voice

Dynamics 365 Customer Voice Spoofing Vulnerability

EPSS 0.5%CVSS 9.3

OceanicSoft Informatics Systems Ltd.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-2342 · OceanicSoft Informatics Systems Ltd. ValeApp

XSS in Oceanicsoft's ValeApp

EPSS 0.4%CVSS 9.3

Snowflake1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-15062 · Snowflake Snowpark Python SDK

SQL Injection in Snowflake Snowpark Python SDK

EPSS 0.4%CVSS 9.6

Google1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-15113 · Google Chrome

Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox…

EPSS 0.3%CVSS 9.6

OpenBSD1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2026-60002 · OpenBSD OpenSSH

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange.

EPSS 0.3%CVSS 9.4

coder1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-46354 · coder coder

Coder: PKCS#7 signature bypass in Azure instance identity allows unauthenticated agent token theft

EPSS 0.3%CVSS 9.1

X.Org1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-56000 · X.Org xorg-x11-server

xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent()

EPSS 0.3%CVSS 9.0

Xen3 vulnerabilities on this pageMax CVSS 9.4Priority 29KEV 0

CVE-2025-27462 · Xen Windows PV drivers

WinPVDrivers: Excessive permissions on user-exposed devices

EPSS 0.2%CVSS 9.4

CVE-2025-27463 · Xen Windows PV drivers

WinPVDrivers: Excessive permissions on user-exposed devices

EPSS 0.2%CVSS 9.4

CVE-2025-27464 · Xen Windows PV drivers

WinPVDrivers: Excessive permissions on user-exposed devices

EPSS 0.2%CVSS 9.4

The archive.