Critical vulnerability archive — page 158

Oracle Corporation1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-35273 · Oracle Corporation PeopleSoft Enterprise PeopleTools

Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability

KEV · due 15 Jun ransomware use EPSS 97%public exploit SSVC act CVSS 9.8

Splunk1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-20253 · Splunk Splunk Enterprise

Unauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise

KEV · due 21 Jun EPSS 97%public exploit SSVC act CVSS 9.8

Microsoft8 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-45657 · Microsoft Windows 11 version 23H2

Windows Kernel Remote Code Execution Vulnerability

EPSS 15%CVSS 9.8

CVE-2026-47291 · Microsoft Windows 10 Version 1607

HTTP.sys Remote Code Execution Vulnerability

EPSS 25%CVSS 9.8

CVE-2026-26142 · Microsoft Nuance PowerScribe 360 4.0

Nuance PowerScribe Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

CVE-2026-44815 · Microsoft Windows 10 Version 1607

DHCP Client Service Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-47643 · Microsoft Azure Stack Edge

Azure Stack Edge Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-47281 · Microsoft Visual Studio Code

Visual Studio Code Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.6

CVE-2026-42904 · Microsoft Windows 10 Version 21H2

Windows TCP/IP Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.6

CVE-2026-45602 · Microsoft Windows 10 Version 1607

Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability

EPSS 0.4%CVSS 9.1

boxlite-ai2 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-46703 · boxlite-ai boxlite

BoxLite: Path Traversal Vulnerability in boxlite Leads to Arbitrary File Write on the Host

EPSS 0.5%public exploit CVSS 9.6

CVE-2026-46695 · boxlite-ai boxlite

BoxLite: Permission Bypass in boxlite Allows Modification of Read-Only Files

EPSS 0.3%public exploit CVSS 10.0

roxy-wi4 vulnerabilities on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2026-45558 · roxy-wi roxy-wi

Roxy-WI: Authenticated RCE on every managed HAProxy load balancer via `option` field config injection in section save

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-45556 · roxy-wi roxy-wi

Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-45552 · roxy-wi roxy-wi

Roxy-WI: Cross-tenant authorization bypass on /install/* — guest can run Ansible / SSH on every registered server

EPSS 0.3%public exploit CVSS 9.9

CVE-2026-45550 · roxy-wi roxy-wi

Roxy-WI: IDOR on PUT /smon/check — any user can rewrite any tenant's monitoring URL/IP/body

EPSS 0.2%public exploit CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-9067 · Unknown Schema & Structured Data for WP & AMP

Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload

EPSS 0.6%public exploit CVSS 9.1

duck-organization1 vulnerability on this pageMax CVSS 9.5Priority 46KEV 0

CVE-2026-47172 · duck-organization quest-bot

Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_run` deployment.

EPSS 0.4%public exploit CVSS 9.5

Adobe4 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-47928 · Adobe ColdFusion 2025

ColdFusion | Improper Input Validation (CWE-20)

EPSS 2%CVSS 9.6

CVE-2026-48303 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

EPSS 0.6%CVSS 10.0

CVE-2026-47938 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

EPSS 0.4%CVSS 10.0

CVE-2026-34691 · Adobe Adobe Experience Manager 6.5 LTS

Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)

EPSS 0.4%CVSS 9.3

MariaDB1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-49261 · MariaDB server

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

EPSS 2%CVSS 10.0

mitre1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-38581 · mitre

SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0 allows remote attackers to execute arbitrary SQL commands v…

EPSS 0.3%public exploit CVSS 9.8

Veeam1 vulnerability on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2026-44963 · Veeam Backup and Replication

A vulnerability allowing remote code execution (RCE) on the Backup Server by an authenticated domain user.

EPSS 2%CVSS 9.4

Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-10045 · Shenzhen Kangda Xin Intelligent Network Technology Co., Ltd DR300

CVE-2026-10045

EPSS 0.2%public exploit CVSS 9.8

AmentoTech1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-6254 · AmentoTech Doctreat Core

Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

EPSS 0.5%CVSS 9.8

Soagen Informatics Technologies Software and Consulting Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-11561 · Soagen Informatics Technologies Software and Consulting Inc. Apinizer

SSTI in Soagen Informatics' Apinizer

EPSS 0.4%CVSS 9.8

Spring1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-41699 · Spring Spring for GraphQL

Unsafe Deserialization in Spring GraphQL

EPSS 0.4%CVSS 9.8

Başarsoft Information Technologies Inc.1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-11839 · Başarsoft Information Technologies Inc. Rotaban

Arbitrary File Upload in Basarsoft's Rotaban

EPSS 0.3%CVSS 9.9

fission5 vulnerabilities on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-46614 · fission fission

Fission router exposes /fission-function/<ns>/<name> on its public listener, allowing invocation of any function without an HTTPTrigger

EPSS 0.4%CVSS 9.8

CVE-2026-50545 · fission fission

Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

EPSS 0.3%CVSS 9.9

CVE-2026-50563 · fission fission

Fission Container Executor Function PodSpec Injection Leading to Node Escape

EPSS 0.3%CVSS 9.9

CVE-2026-50564 · fission fission

Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape

EPSS 0.3%CVSS 9.9

CVE-2026-50566 · fission fission

Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation

EPSS 0.3%CVSS 9.9

Limatek System Inc.1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-7852 · Limatek System Inc. LimRAD NAC

Unrestricted File Upload in Limatek's LimRAD NAC

EPSS 0.4%CVSS 9.8

QNAP Systems Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-26240 · QNAP Systems Inc. File Station 5

File Station 5

EPSS 0.4%CVSS 9.1

CVE-2026-26241 · QNAP Systems Inc. File Station 5

File Station 5

EPSS 0.5%CVSS 9.1

CVE-2025-66276 · QNAP Systems Inc. QTS

QTS

EPSS 0.3%CVSS 9.8

PEVANS1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-50638 · PEVANS Metrics::Any::Adapter::DogStatsd

Metrics::Any::Adapter::DogStatsd versions before 0.04 for Perl does not protect against metric injections

EPSS 0.3%CVSS 9.1

redhat6 vulnerabilities on this pageMax CVSS 9.6Priority 33KEV 0

Palo Alto Networks1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-0274 · Palo Alto Networks Cortex XSIAM CommvaultSecurityIQ Marketplace

Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration

EPSS 0.3%CVSS 9.1

Google Cloud1 vulnerability on this pageMax CVSS 9.4Priority 30KEV 0

CVE-2026-4764 · Google Cloud Dialogflow CX

Privilege Escalation in Dialogflow CX via Playbook Import

EPSS 0.2%CVSS 9.4

Haskell Programming Language1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-9648 · Haskell Programming Language crypton-certificate

CVE-2026-9648

EPSS 0.2%CVSS 9.1

espressif1 vulnerability on this pageMax CVSS 9.3Priority 28KEV 0

CVE-2026-45328 · espressif esp-idf

ESF-IDF: Out-of-Bounds Write in ESP-TEE Secure Service Wrappers

EPSS 0.1%CVSS 9.3

The archive.