Critical vulnerability archive — page 159

ivanti2 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-10520 · ivanti Sentry

Ivanti Sentry OS Command Injection Vulnerability

KEV · due 14 Jun EPSS 100%public exploit SSVC act CVSS 10.0

CVE-2026-10523 · ivanti Sentry

An Authentication Bypass vulnerability (CWE-288) in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauth…

EPSS 54%CVSS 9.9

checkpoint1 vulnerability on this pageMax CVSS 9.3Priority 98KEV 1

CVE-2026-50751 · checkpoint Quantum Security Gateway

User Authentication Bypass in VPN Remote Access and Mobile Access

KEV · due 11 Jun ransomware use EPSS 85%public exploit SSVC act CVSS 9.3

Fortinet1 vulnerability on this pageMax CVSS 9.1Priority 97KEV 1

CVE-2026-25089 · Fortinet FortiSandbox

Fortinet FortiSandbox OS Command Injection Vulnerability

KEV · due 19 Jul EPSS 76%public exploit SSVC act CVSS 9.1

FlowiseAI4 vulnerabilities on this pageMax CVSS 9.9Priority 59KEV 0

openbullet1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-25555 · openbullet openbullet2

OpenBullet2 0.3.2 Authentication Bypass via X-Api-Key Header

EPSS 2%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

YesWiki1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-52778 · YesWiki yeswiki

YesWiki has Unsafe eval() in Formula Calculator - Remote Code Execution (RCE) & Denial of Service (DoS)

EPSS 0.8%public exploit CVSS 9.8

WP Travel Kit1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-58349 · WP Travel Kit Travelscape

WordPress Theme Travelscape 1.0.3 Arbitrary File Upload

EPSS 0.7%public exploit CVSS 9.8

zephyrproject-rtos1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-5067 · zephyrproject-rtos Zephyr

Out-of-bounds read/write in HTTP WebSocket upgrade via non-null-terminated Sec-WebSocket-Key

EPSS 0.6%public exploit CVSS 9.8

Themeisle1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2017-20251 · Themeisle Woody Code Snippets

WordPress Insert PHP Plugin < 3.3.1 PHP Code Injection via REST API

EPSS 0.6%public exploit CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-11499 · Tenda HG7

Tenda HG7/HG9/HG10 formDOMAINBLK stack-based overflow

EPSS 7%CVSS 9.8

background-image-cropper1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-58348 · background-image-cropper Background Image Cropper

WordPress Background Image Cropper 1.2 Remote Code Execution

EPSS 0.8%CVSS 9.8

Apache Software Foundation4 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-29167 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_ldap per-dir use-after-free

EPSS 0.7%CVSS 9.8

CVE-2026-47430 · Apache Software Foundation Cordova Plugin InAppBrowser

Cordova Plugin InAppBrowser: iOS: Arbitrary Cordova callback IDs can be dispatched without validation from InAppBrowser WebViews

EPSS 0.7%CVSS 9.5

CVE-2026-44631 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

EPSS 0.5%CVSS 9.8

CVE-2026-42535 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_dav_fs protected directory access

EPSS 0.5%CVSS 9.1

OpenSSL1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-34182 · OpenSSL OpenSSL

CMS AuthEnvelopedData Processing May Accept Forged Messages

EPSS 1%CVSS 9.1

HMBRAND1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-9698 · HMBRAND DBI

DBI versions before 1.648 for Perl saved errors in a limited-sized buffer

EPSS 0.5%CVSS 9.8

AdguardTeam1 vulnerability on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2026-41448 · AdguardTeam AdGuardHome

AdGuard Home Authentication Bypass via Path Traversal in Admin-Token Cookie

EPSS 0.5%CVSS 9.4

Arm1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-10263 · Arm C1-Ultra

Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cort…

EPSS 0.5%CVSS 9.1

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-46289 · Linux Linux

lib/scatterlist: fix length calculations in extract_kvec_to_sg

EPSS 0.5%CVSS 9.8

CVE-2026-46325 · Linux Linux

RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE

EPSS 0.4%CVSS 9.8

CVE-2026-46316 · Linux Linux

KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry

EPSS 0.3%CVSS 9.3

QNAP Systems Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-44083 · QNAP Systems Inc. QuMagie

QuMagie

EPSS 0.5%CVSS 9.8

SAP_SE3 vulnerabilities on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-27671 · SAP_SE SAP NetWeaver AS ABAP and ABAP Platform

Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform

EPSS 0.4%CVSS 9.8

CVE-2026-40128 · SAP_SE SAP NetWeaver Application Server Java (Web Container)

Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)

EPSS 0.5%CVSS 9.0

CVE-2026-44748 · SAP_SE SAP NetWeaver AS ABAP and ABAP Platform

XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform

EPSS 0.2%CVSS 9.9

signalwire2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-49841 · signalwire freeswitch

FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read

EPSS 0.4%CVSS 9.8

CVE-2026-49840 · signalwire freeswitch

FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing

EPSS 0.3%CVSS 9.1

Spring1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-41855 · Spring Spring Framework

Spring Framework Unsafe Deserialization via Jackson JMS Converters

EPSS 0.3%CVSS 9.8

Google7 vulnerabilities on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-11651 · Google Chrome

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox v…

EPSS 0.3%CVSS 9.6

CVE-2026-11634 · Google Chrome

Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox…

EPSS 0.3%CVSS 9.6

CVE-2026-11638 · Google Chrome

Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via…

EPSS 0.3%CVSS 9.6

CVE-2026-11654 · Google Chrome

Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbo…

EPSS 0.3%CVSS 9.6

CVE-2026-11659 · Google Chrome

Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escap…

EPSS 0.3%CVSS 9.6

CVE-2026-11671 · Google Chrome

Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape v…

EPSS 0.2%CVSS 9.6

CVE-2026-11697 · Google Chrome

Insufficient validation of untrusted input in UI in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perfor…

EPSS 0.2%CVSS 9.6

Nemon1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-10731 · Nemon Nemon Trade Energy

SQL injection in Nemon products

EPSS 0.3%CVSS 9.3

AWS1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-11393 · AWS AgentCore CLI

Code injection via improper triple-quote escaping in AgentCore CLI Bedrock Agent import

EPSS 0.3%CVSS 9.0

MOSK Information Technologies Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-8025 · MOSK Information Technologies Ltd. CBS Platform

SQLi in MOSK Informatics' CBS Platform

EPSS 0.3%CVSS 9.8

Netcad Software Inc.1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-7486 · Netcad Software Inc. E-İmar

SQLi in Netcad's E-İmar

EPSS 0.3%CVSS 9.8

Skilja GmbH1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-41031 · Skilja GmbH Vinna Process Monitor

A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor

EPSS 0.2%CVSS 9.3

Siemens1 vulnerability on this pageMax CVSS 9.8Priority 30KEV 0

CVE-2026-46749 · Siemens SINEC INS

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).

EPSS 0.1%CVSS 9.8

The archive.