Critical vulnerability archive — page 148

joomshaper.net1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-48908 · joomshaper.net SP Page Builder extension for Joomla

Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

KEV · due 10 Jul EPSS 89%public exploit SSVC act CVSS 10.0

Flowise2 vulnerabilities on this pageMax CVSS 9.9Priority 59KEV 0

CVE-2026-56274 · Flowise Flowise

Flowise - Remote Code Execution via MCP Security Bypass in validateCommandFlags and validateArgsForLocalFileAccess

EPSS 8%public exploit CVSS 9.9

CVE-2024-58351 · Flowise Flowise

Flowise - Remote Code Execution via overrideConfig Parameter

EPSS 0.7%CVSS 9.8

Crawl4AI3 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-56265 · Crawl4AI Crawl4AI

Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

EPSS 3%public exploit CVSS 9.8

CVE-2026-56258 · Crawl4AI Crawl4AI

Crawl4AI - Arbitrary File Write via output_path Symlink and TOCTOU

EPSS 0.9%CVSS 9.2

CVE-2026-56266 · Crawl4AI Crawl4AI

Crawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints

EPSS 0.5%CVSS 9.2

picklescan1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-56315 · picklescan picklescan

picklescan - Remote Code Execution via Unblocked Standard Library Modules

EPSS 1%public exploit CVSS 9.8

prefecthq1 vulnerability on this pageMax CVSS 9.9Priority 53KEV 0

CVE-2026-5366 · prefecthq prefecthq/prefect

Git Argument Injection in prefecthq/prefect

EPSS 1%public exploit CVSS 9.9

BerriAI2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-12773 · BerriAI litellm

BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication

EPSS 1%public exploit CVSS 9.8

CVE-2026-49468 · BerriAI litellm

LiteLLM: Authentication Bypass via Host Header Injection

EPSS 3%CVSS 9.8

snyk1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-12866 · snyk

All versions of the package expr-eval are vulnerable to Code Execution via the toJSFunction() API.

EPSS 0.9%public exploit CVSS 9.8

vllm-project1 vulnerability on this pageMax CVSS 9.1Priority 51KEV 0

CVE-2026-48746 · vllm-project vllm

vLLM: OpenAI auth bypass

EPSS 1%public exploit CVSS 9.1

SiYuan1 vulnerability on this pageMax CVSS 9.6Priority 47KEV 0

CVE-2026-56397 · SiYuan SiYuan

SiYuan - Remote Code Execution via Malicious Bazaar Package Metadata and README

EPSS 0.5%public exploit CVSS 9.6

PHPOffice1 vulnerability on this pageMax CVSS 9.2Priority 46KEV 0

CVE-2026-45034 · PHPOffice PhpSpreadsheet

PhpSpreadsheet: File::prohibitWrappers bypass

EPSS 0.5%public exploit CVSS 9.2

FOSSBilling2 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-27604 · FOSSBilling FOSSBilling

FOSSBilling: Improper API Role Validation (system) Enables Unauthenticated Access to Privileged Admin Functions

EPSS 1%CVSS 10.0

CVE-2026-28496 · FOSSBilling FOSSBilling

FOSSBilling: Server-side template injection in Twig template rendering enables information disclosure and RCE

EPSS 2%CVSS 9.4

zohocorp1 vulnerability on this pageMax CVSS 9.0Priority 44KEV 0

CVE-2026-11374 · zohocorp manageengine_adselfservice_plus

Account Takeover via Predictable SSO Ticket Generation

EPSS 3%CVSS 9.0

ImageMagick2 vulnerabilities on this pageMax CVSS 9.2Priority 43KEV 0

CVE-2026-56379 · ImageMagick ImageMagick

ImageMagick - Command Injection via SVG Decoder

EPSS 2%CVSS 9.2

CVE-2026-56367 · ImageMagick ImageMagick

ImageMagick - Heap Out-of-Bounds Read in PSB RLE Decoding

EPSS 0.2%CVSS 9.1

WooCommerce1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2022-50972 · WooCommerce WooCommerce

WooCommerce 7.1.0 Remote Code Execution via class-wc-meta-box-product-images.php

EPSS 1%CVSS 9.8

IBM6 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-10561 · IBM Langflow OSS

Unauthenticated Remote Code Execution in Langflow OSS PythonREPLComponent via Builtins Injection

EPSS 0.8%CVSS 10.0

CVE-2026-9072 · IBM WebSphere Application Server

WebSphere Application Server Remote Code Execution

EPSS 0.7%CVSS 9.8

CVE-2026-7664 · IBM Langflow OSS

Unauthenticated Flow Execution via Webhook Endpoint in Langflow OSS

EPSS 0.5%CVSS 9.8

CVE-2026-12628 · IBM Storage Protect Client

Hardcoded credential in the IBM Storage Protect Snapshot For Windows leads to unauthorized access to system

EPSS 0.6%CVSS 9.1

CVE-2026-8646 · IBM WebSphere Application Server

IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by multiple vulnerabilities

EPSS 0.6%CVSS 9.1

CVE-2026-9006 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by server-side request forgery

EPSS 0.4%CVSS 9.1

LY Corporation1 vulnerability on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-11746 · LY Corporation Central Dogma

A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting…

EPSS 0.2%public exploit CVSS 9.4

Autodesk1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-10789 · Autodesk Fusion

MCP Extension Code Injection Vulnerability in Autodesk Fusion Desktop

EPSS 0.7%CVSS 9.6

n8n-io5 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

NetComm Wireless Pty Ltd1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-35019 · NetComm Wireless Pty Ltd NF20MESH

NetComm NF20MESH < R6B032 Hardcoded AES Key Authentication Bypass

EPSS 0.8%CVSS 9.2

misp4 vulnerabilities on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-56422 · misp misp

MISP Core: Mass Assignment and Object Re-ownership via Unvalidated Request Fields

EPSS 0.6%CVSS 9.4

CVE-2026-56447 · misp misp

MISP remote code execution via arbitrary rdkafka configuration path

EPSS 0.6%CVSS 9.3

CVE-2026-56423 · misp misp

MISP Core: Broken access control allows instance-wide unauthorized deletion of event reports and sharing groups via bulk deletion endpoints

EPSS 0.5%CVSS 9.4

CVE-2026-56425 · misp misp

MISP AAD authentication plugin - Improper OAuth State Handling, Missing Session Rotation, Insecure Redirect URI Validation, and Log Injection

EPSS 0.5%CVSS 9.3

n8n1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-56348 · n8n n8n

n8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters Endpoint

EPSS 0.5%CVSS 9.9

Gaudire2 vulnerabilities on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2026-7165 · Gaudire Assassin game

Multiple vulnerabilities in the Assassin game by Gaudire

EPSS 0.5%CVSS 9.4

CVE-2026-7166 · Gaudire Assassin game

Multiple vulnerabilities in the Assassin game by Gaudire

EPSS 0.5%CVSS 9.2

JASEI1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-11373 · JASEI Net::Statsite::Client

Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections

EPSS 0.6%CVSS 9.1

AVideo1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-56345 · AVideo AVideo

AVideo - Arbitrary User Session Hijacking via Meet Plugin uploadRecordedVideo Endpoint

EPSS 0.5%CVSS 9.2

HAYAJO1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-9733 · HAYAJO Mojolicious::Plugin::Web::Auth::OAuth2

Mojolicious::Plugin::Web::Auth::OAuth2 versions through 0.17 for Perl have an insecure default state parameter

EPSS 0.5%CVSS 9.1

jupyter-server1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-44727 · jupyter-server jupyter_server

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

EPSS 0.4%CVSS 9.3

GNOME1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-6653 · GNOME libxml2

libxml2: Use after free in xmlParseInternalSubset via improper entity resolution handling

EPSS 0.4%CVSS 9.8

Grafana1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-28381 · Grafana Snowflake Datasource

Local File Read/Write to Potential Privilege Escalation via Snowflake GET/PUT

EPSS 0.4%CVSS 9.6

MessagePack-CSharp1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-48509 · MessagePack-CSharp MessagePack-CSharp

MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies

EPSS 0.4%CVSS 9.1

Totolink1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2026-44089 · Totolink EX1200L

Buffer Overflow in Totolink EX1200L router

EPSS 0.3%CVSS 9.4

Canonical1 vulnerability on this pageMax CVSS 9.0Priority 28KEV 0

CVE-2026-12249 · Canonical Ubuntu 20.04 LTS

Canonical ADSys Trust Store Poisoning via Plaintext HTTP Certificate Auto-Enrollment

EPSS 0.1%CVSS 9.0

The archive.