Critical vulnerability archive — page 149

icagenda.com1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-48939 · icagenda.com iCagenda extension for Joomla

Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

KEV · due 13 Jul EPSS 20%public exploit SSVC act CVSS 10.0

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-51846 · mitre

In Tenda AC7 v15.03.06.44, the wanSpeed parameter of the route /goform/AdvSetMacMtuWan has a stack buffer overflow vulnerability that can…

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-62821 · mitre

Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leavin…

EPSS 1%public exploit CVSS 9.1

CVE-2026-51843 · mitre

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the wanMTU parameter.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-51844 · mitre

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the cloneType parameter.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-51845 · mitre

Tenda AC7 v15.03.06.44 contains a stack buffer overflow vulnerability in the /goform/AdvSetMacMtuWan interface via the mac parameter.

EPSS 0.6%public exploit CVSS 9.8

coturn1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-43994 · coturn coturn

Coturn: Stack buffer overflow in decode_oauth_token_gcm()

EPSS 0.7%public exploit CVSS 9.8

startreedata1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-49257 · startreedata mcp-pinot

mcp-pinot: Unauthenticated tool invocation via default oauth_enabled=False + host 0.0.0.0 bind

EPSS 0.6%public exploit CVSS 10.0

sysown2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-48773 · sysown proxysql

ProxySQL pre-auth heap overflow in MySQL and PostgreSQL first-packet handling

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-48772 · sysown proxysql

ProxySQL: PROXY-Protocol-v1 UNKNOWN parses spoofed source IP, bypassing mysql_query_rules.client_addr ACL

EPSS 0.2%public exploit CVSS 10.0

joomshaper.net1 vulnerability on this pageMax CVSS 9.5Priority 47KEV 0

CVE-2026-48909 · joomshaper.net SP LMS extension for Joomla

Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

EPSS 5%CVSS 9.5

Cap-go2 vulnerabilities on this pageMax CVSS 9.4Priority 46KEV 0

CVE-2026-56081 · Cap-go capgo

Cap-go - Account Lockout via 2FA Misconfiguration on Unverified Email

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-56073 · Cap-go capgo

Cap-go - OTP Bypass via Response Manipulation in Email Verification

EPSS 0.2%public exploit CVSS 9.4

themefusion1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-8713 · themefusion Avada (Fusion) Builder

Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value

EPSS 3%CVSS 9.1

claudiopizzillo1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-54419 · claudiopizzillo PIAF-HMS

PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query

EPSS 1%CVSS 9.8

Microsoft5 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-54130 · Microsoft Microsoft 365 Copilot

M365 Copilot Information Disclosure Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-45480 · Microsoft Azure Active Directory

Azure Active Directory Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 10.0

CVE-2026-48584 · Microsoft Azure Synapse

Microsoft Azure Synapse Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.9

CVE-2026-47647 · Microsoft Microsoft Dynamics 365

Dynamics 365 Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.9

CVE-2026-48582 · Microsoft Microsoft Exchange Online

Microsoft Exchange Online Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.6

betterdocs1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-7515 · betterdocs BetterDocs Pro

BetterDocs Pro <= 3.8.0 - Unauthenticated Local File Inclusion via doc_style

EPSS 0.9%CVSS 9.8

SUSE1 vulnerability on this pageMax CVSS 9.4Priority 42KEV 0

CVE-2026-44939 · SUSE Rancher

Command injection through unsanitized YAML parameter in Rancher

EPSS 1%CVSS 9.4

AVer1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-40624 · AVer PTC500S

AVer PTC cameras Files or Directories Accessible to External Parties

EPSS 0.8%CVSS 9.8

Government Accountability Office1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-54103 · Government Accountability Office Electronic Protest Docketing System (EPDS)

U.S. GAO EPDS and CBCA EDS unauthenticated password change

EPSS 0.8%CVSS 9.8

NI2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-48137 · NI grpc-device

Untrusted pointer dereference in NI grpc-device sideband streaming API

EPSS 0.8%CVSS 9.8

CVE-2026-9142 · NI grpc-device

Insecure Default Credentials vulnerability in NI grpc-device when TLS configuration is not present

EPSS 0.4%CVSS 9.3

pgadmin.org3 vulnerabilities on this pageMax CVSS 9.5Priority 41KEV 0

CVE-2026-12046 · pgadmin.org pgAdmin 4

pgAdmin 4: Unauthenticated pickle deserialization in SQL Editor close / update_connection routes enables remote code execution

EPSS 1%CVSS 9.5

CVE-2026-12045 · pgadmin.org pgAdmin 4

pgAdmin 4: AI Assistant read-only transaction bypass allows unauthorised writes and remote code execution

EPSS 0.7%CVSS 9.4

CVE-2026-12048 · pgadmin.org pgAdmin 4

pgAdmin 4: Stored XSS via untrusted error and plan-node text rendered through html-react-parser

EPSS 0.3%CVSS 9.3

error3111 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-54414 · error311 FileRise

FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover

EPSS 0.7%CVSS 9.8

JetBrains3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-50242 · JetBrains Hub

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via…

EPSS 0.6%CVSS 10.0

CVE-2026-56142 · JetBrains Hub

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 privilege escalation by a…

EPSS 0.6%CVSS 9.6

CVE-2026-56141 · JetBrains Hub

In JetBrains Hub before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 account takeover via pred…

EPSS 0.5%CVSS 9.8

wpmudev1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-11551 · wpmudev Branda – White Label & Branding, Free Login Page Customizer

Branda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover

EPSS 0.6%CVSS 9.8

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-9158 · Eclipse Foundation Eclipse 4diac

In Eclipse 4diac FORTE versions 3.0.0 to 3.1.0, a specially crafted DELETE connection command to the management interface can lead to a d…

EPSS 0.6%CVSS 9.8

iba1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-8024 · iba ibaPDA

Deserialization vulnerability in ibaPDA and ibaDatCoordinator

EPSS 0.6%CVSS 9.8

JTL Software1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-54390 · JTL Software JTL Shop

JTL Shop < 5.7.2 Server-Side Template Injection via Smarty Renderer

EPSS 0.6%CVSS 9.8

Bitnami1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-47846 · Bitnami bitnami/cassandra

Bitnami Cassandra container images are affected by a retained default superuser vulnerability.

EPSS 0.5%CVSS 9.8

deepstreamIO1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-49252 · deepstreamIO deepstream.io

deepstream is vulnerable to prototype pollution

EPSS 0.5%CVSS 9.9

Apache Software Foundation4 vulnerabilities on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-39999 · Apache Software Foundation Apache APISIX

Apache APISIX: JWT Algorithm Confusion allows authentication bypass

EPSS 0.6%CVSS 9.1

CVE-2026-49871 · Apache Software Foundation Apache APISIX

Apache APISIX: cas-auth login CSRF / session injection issue

EPSS 0.4%CVSS 9.3

CVE-2026-44087 · Apache Software Foundation Apache APISIX

Apache APISIX: Openid-connect plugin Identity Header Spoofing

EPSS 0.3%CVSS 9.1

CVE-2026-49230 · Apache Software Foundation Apache APISIX

Apache APISIX: Authentication bypass in jwe-decrypt

EPSS 0.3%CVSS 9.1

JONASBN1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-9265 · JONASBN Crypt::OpenSSL::PKCS12

Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attribute UTF8STRING path

EPSS 0.6%CVSS 9.1

Webmin1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-56020 · Webmin Webmin

Webmin HTTP header authentication bypass

EPSS 0.5%CVSS 9.2

Silver Leaf Technologies, Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-10560 · Silver Leaf Technologies, Inc. Worksnaps.net Worksnaps

Hardcoded cloud credentials in Worksnaps client application binaries expose production cloud resources

EPSS 0.4%CVSS 9.3

haproxy1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-55203 · haproxy haproxy

HAProxy - Integer Overflow in FCGI Demux Record Length Field

EPSS 0.3%CVSS 9.1

Google2 vulnerabilities on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-11718 · Google MCP Toolbox for Databases (googleapis/mcp-toolbox)

An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.

EPSS 0.2%CVSS 9.3

CVE-2026-11717 · Google MCP Toolbox for Databases (googleapis/mcp-toolbox)

An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox.

EPSS 0.2%CVSS 9.3

szTheory1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-49454 · szTheory relyra

Relyra SAML SignatureValue not cryptographically verified -> authentication bypass

EPSS 0.2%CVSS 9.1

The archive.