Critical vulnerability archive — page 147

unclecode1 vulnerability on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-53753 · unclecode crawl4ai

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

EPSS 3%public exploit CVSS 10.0

feast-dev1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-56121 · feast-dev feast

Feast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC Deserialization

EPSS 1%public exploit CVSS 9.8

lobehub1 vulnerability on this pageMax CVSS 9.0Priority 53KEV 0

CVE-2026-54157 · lobehub lobehub

LobeHub: Unauthenticated SSRF in `/webapi/proxy`

EPSS 2%public exploit CVSS 9.0

langflow-ai3 vulnerabilities on this pageMax CVSS 9.6Priority 52KEV 0

CVE-2026-55450 · langflow-ai langflow

Langflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak

EPSS 1%public exploit CVSS 9.3

CVE-2026-48519 · langflow-ai langflow

Langflow: Unauthenticated RCE in Shareable Playgrounds

EPSS 0.8%public exploit CVSS 9.6

CVE-2026-55447 · langflow-ai langflow

Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

EPSS 0.7%CVSS 9.6

yt-dlp2 vulnerabilities on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2026-50023 · yt-dlp yt-dlp

yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)

EPSS 0.7%public exploit CVSS 9.6

CVE-2026-50574 · yt-dlp yt-dlp

yt-dlp: Arbitrary code execution via manifest downloads with aria2c

EPSS 0.5%CVSS 9.6

MarlinFirmware1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-56111 · MarlinFirmware Marlin

Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler

EPSS 0.6%public exploit CVSS 9.1

Capgo2 vulnerabilities on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-56237 · Capgo Capgo

Capgo - Unauthenticated API Key Generation via Client-Side Parameter Manipulation

EPSS 0.5%public exploit CVSS 9.3

CVE-2026-56223 · Capgo Capgo

Capgo - Account Takeover via Cross-Domain SSO Email Assertion in provision-user

EPSS 0.4%public exploit CVSS 9.3

GeoVision Inc.8 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-12486 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

EPSS 3%CVSS 9.1

CVE-2026-12849 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

EPSS 3%CVSS 9.1

CVE-2026-12850 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

EPSS 3%CVSS 9.1

CVE-2026-12851 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box 4E libNetSetObj.so OS command injection vulnerability

EPSS 3%CVSS 9.1

CVE-2026-12485 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

EPSS 0.6%CVSS 10.0

CVE-2026-12846 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

EPSS 0.6%CVSS 10.0

CVE-2026-12847 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

EPSS 0.6%CVSS 10.0

CVE-2026-12848 · GeoVision Inc. GV-I/O Box 4E

GeoVision GV-I/O Box DVRSearch buffer overflow vulnerabilities in CMD_IP_SET command

EPSS 0.6%CVSS 10.0

immich-app1 vulnerability on this pageMax CVSS 9.6Priority 43KEV 0

CVE-2026-53662 · immich-app immich

immich: One-click account takeover via XSS in login page continue redirect

EPSS 0.3%public exploit CVSS 9.6

pravel2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-12417 · pravel SignUp & SignIn

SignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover

EPSS 0.8%CVSS 9.8

CVE-2026-12416 · pravel Invoice Generator

Invoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter

EPSS 0.7%CVSS 9.8

traefik3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-48020 · traefik traefik

Traefik StripPrefix Route-Level Auth Bypass via Path Normalization

EPSS 0.8%CVSS 10.0

CVE-2026-53622 · traefik traefik

Traefik: HTTP/3 mTLS bypass via exact SNI TLSOptions lookup for wildcard and mixed-case hosts

EPSS 0.6%CVSS 10.0

CVE-2026-48491 · traefik traefik

Traefik: SNICheck ignores wildcard TLSOptions mappings, allowing domain-fronted mTLS bypass

EPSS 0.4%CVSS 10.0

Linux14 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-52914 · Linux Linux

batman-adv: fix fragment reassembly length accounting

EPSS 0.6%CVSS 9.8

CVE-2026-52924 · Linux Linux

sctp: purge outqueue on stale COOKIE-ECHO handling

EPSS 0.7%CVSS 9.8

CVE-2026-52986 · Linux Linux

netfilter: nf_conntrack_sip: don't use simple_strtoul

EPSS 0.6%CVSS 9.8

CVE-2026-52982 · Linux Linux

net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit()

EPSS 0.5%CVSS 9.8

CVE-2026-52931 · Linux Linux

batman-adv: tp_meter: avoid use of uninit sender vars

EPSS 0.5%CVSS 9.8

CVE-2026-52958 · Linux Linux

libceph: Fix potential out-of-bounds access in osdmap_decode()

EPSS 0.7%CVSS 9.1

CVE-2026-52999 · Linux Linux

netfilter: nfnetlink_osf: fix out-of-bounds read on option matching

EPSS 0.6%CVSS 9.1

CVE-2026-53010 · Linux Linux

ksmbd: fix use-after-free in smb2_open during durable reconnect

EPSS 0.4%CVSS 9.8

CVE-2026-52955 · Linux Linux

libceph: Fix potential out-of-bounds access in crush_decode()

EPSS 0.4%CVSS 9.8

CVE-2026-52993 · Linux Linux

tipc: fix double-free in tipc_buf_append()

EPSS 0.4%CVSS 9.8

CVE-2026-53002 · Linux Linux

netfilter: conntrack: remove sprintf usage

EPSS 0.4%CVSS 9.8

CVE-2026-53006 · Linux Linux

ipv6: fix possible UAF in icmpv6_rcv()

EPSS 0.4%CVSS 9.8

CVE-2026-53043 · Linux Linux

ocfs2/dlm: validate qr_numregions in dlm_match_regions()

EPSS 0.5%CVSS 9.1

CVE-2026-52989 · Linux Linux

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

EPSS 0.4%CVSS 9.8

ruby-concurrency1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-54906 · ruby-concurrency concurrent-ruby

concurrent-ruby: ReadWriteLock allows wrong-thread write release and stray read-release counter corruption

EPSS 0.2%public exploit CVSS 9.8

n8n-io3 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-44791 · n8n-io n8n

n8n: XML Node Prototype Pollution Patch Bypass

EPSS 0.5%CVSS 9.9

CVE-2026-44790 · n8n-io n8n

n8n: Arbitrary File Read via Git Node

EPSS 0.5%CVSS 9.4

CVE-2026-44792 · n8n-io n8n

n8n: Source Control Pull SQL Injection

EPSS 0.4%CVSS 9.0

poweradmin1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-54588 · poweradmin poweradmin

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

EPSS 0.5%CVSS 9.6

Red Hat1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-11807 · Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8

Eda-server: websocket missing authorization allows credential theft via activation_id spoofing

EPSS 0.5%CVSS 9.6

anthropics1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-54316 · anthropics claude-code

Claude Code: Out-of-Band Data Exfiltration via Pre-Approved HuggingFace Domain in WebFetch

EPSS 0.5%CVSS 9.1

electron1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-54257 · electron electron

Electron: Buffer performs incorrect byte length calculations resulting in heap buffer under/overflow

EPSS 0.4%CVSS 9.3

n8n1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-56351 · n8n n8n

n8n - SQL Injection in MySQL, PostgreSQL, and Microsoft SQL Nodes

EPSS 0.4%CVSS 9.6

Google Cloud1 vulnerability on this pageMax CVSS 10.0Priority 32KEV 0

CVE-2026-12537 · Google Cloud Gemini CLI

Unauthenticated Remote Code Execution in Gemini CLI CI/CD Workflows

EPSS 0.2%CVSS 10.0

denoland1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-44726 · denoland deno

Deno: TLS retry copies stale upgrade hook, risking plaintext traffic

EPSS 0.2%CVSS 9.1

The archive.