Critical vulnerability archive — page 162

danny-avila1 vulnerability on this pageMax CVSS 9.6Priority 56KEV 0

CVE-2026-32625 · danny-avila LibreChat

LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

EPSS 3%public exploit CVSS 9.6

mitre9 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-36576 · mitre

An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to…

EPSS 1%public exploit CVSS 9.8

CVE-2025-67447 · mitre

The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection.

EPSS 1%public exploit CVSS 9.8

CVE-2026-35904 · mitre

Incorrect access control in the web management interface of T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 a…

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-67446 · mitre

Improper Authentication (Authentication Bypass) exists in Neterbit NW-431F Router 20241014-IR03 and before.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-35906 · mitre

An undocumented debug CGI endpoint in T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03 allows unauthenticated attackers to execut…

EPSS 0.5%public exploit CVSS 9.6

CVE-2026-36748 · mitre

RockRMS v16.13 and before v.17.7.0 is vulnerable to Cross Site Scripting (XSS) via Social Media links in user profile.

EPSS 0.3%public exploit CVSS 9.0

CVE-2026-36182 · mitre

GNCC GP5 v7.1.76 was discovered to utilize a weak hashing algorithm to protect the root password, possibly allowing attackers to obtain r…

EPSS 0.2%public exploit CVSS 9.8

CVE-2026-35905 · mitre

T3 Technology CPE models T625Pro v1.0.07, T6825G v1.0.03, and T7281 v1.0.03 were discovered to contain a hardcoded password for root acce…

EPSS 0.4%CVSS 9.8

CVE-2026-38967 · mitre

CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.

EPSS 0.3%CVSS 9.8

ROCm1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-49121 · ROCm aiter

AI Tensor Engine for ROCm (AITER) 0.1.14 Unauthenticated RCE via MessageQueue.recv() Pickle Deserialization

EPSS 1%public exploit CVSS 9.8

Spacelabs Healthcare1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-0611 · Spacelabs Healthcare Sentinel

Spacelabs Healthcare Sentinel 10.5.x < 11.6.0 Unauthenticated RCE via .NET Remoting

EPSS 0.7%public exploit CVSS 9.8

Gitlawb1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-42074 · Gitlawb openclaude

OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input

EPSS 0.6%public exploit CVSS 9.8

huggingface1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2026-5241 · huggingface huggingface/transformers

Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers

EPSS 0.6%public exploit CVSS 9.6

langroid1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-25879 · langroid langroid

Langroid has Prompt to SQL Injection, Leading to RCE

EPSS 0.6%public exploit CVSS 9.8

projectcapsule1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-22872 · projectcapsule capsule

Capsule TenantResource RawItems Cluster-Scoped Resource Creation Vulnerability

EPSS 0.7%public exploit CVSS 9.1

HP Inc.1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-0826 · HP Inc. poly_trio_8300

Poly Voice – Possible Remote Control of Certain Poly Devices

EPSS 32%CVSS 9.2

goauthentik2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-49448 · goauthentik authentik

authentik: SourceStage bypass via empty POST

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-42849 · goauthentik authentik

authentik: Reflected XSS in SFE AutosubmitStage allows IDP account takeover

EPSS 0.3%CVSS 9.3

mlflow1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-4035 · mlflow mlflow/mlflow

Environment Variable Resolution Vulnerability in mlflow/mlflow

EPSS 0.5%public exploit CVSS 9.1

themeum1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-8206 · themeum Kirki – Freeform Page Builder, Website Builder & Customizer

Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

EPSS 1%CVSS 9.8

alfio-event1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-35482 · alfio-event alf.io

alf.io has an Authenticated RCE via Extension Script Sandbox Escape

EPSS 0.3%public exploit CVSS 9.1

maziyarpanahi1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-47117 · maziyarpanahi openmed

OpenMed < 1.5.2 Remote Code Execution via PII Model Loading

EPSS 0.9%CVSS 9.8

OpenStack1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-41283 · OpenStack Mistral

OpenStack Mistral through 22.0.0 allows Arbitrary Remote Code Execution when the API is exposed.

EPSS 0.7%CVSS 9.9

cline1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-44211 · cline cline

Cline Kanban Server has a Cross-Origin WebSocket Hijacking Vulnerability

EPSS 0.2%public exploit CVSS 9.6

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-47065 · Apache Software Foundation Apache MINA

Apache MINA: Critical Deserialization Allow-list Bypass via resolveProxyClass - ZDRES-232

EPSS 0.5%CVSS 9.8

MBS1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-35075 · MBS Single-A

Hardcoded default Password for Service Account

EPSS 0.5%CVSS 9.8

Progress Software2 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-7312 · Progress Software Sitefinity

CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity

EPSS 0.4%CVSS 10.0

CVE-2026-7198 · Progress Software Sitefinity

CWE-284: Improper Access Control in web services in Progress Sitefinity

EPSS 0.4%CVSS 9.8

Acer2 vulnerabilities on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-49185 · Acer Connect M6E 5G Portable WiFi Router

Instruction Injection via FieldX MDM

EPSS 0.4%CVSS 10.0

CVE-2026-49186 · Acer Connect M6E 5G Portable WiFi Router

Lack of MQTT Broker Topic Access Control Lists

EPSS 0.3%CVSS 9.8

armember1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-5076 · armember ARMember Premium – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup

ARMember Premium <= 7.3.1 - Insecure Password Reset Mechanism to Unauthenticated Privilege Escalation

EPSS 0.4%CVSS 9.8

Rocketgenius Inc.1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-48866 · Rocketgenius Inc. Gravity Forms

WordPress Gravity Forms plugin <= 2.10.0.1 - Arbitrary File Deletion vulnerability

EPSS 0.5%CVSS 9.6

Simple SA1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-34906 · Simple SA Wirtualna Uczelnia

Server-Side Template Injection (SSTI) in Wirtualna Uczelnia

EPSS 0.6%CVSS 9.3

Cloud Foundry Foundation1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-40965 · Cloud Foundry Foundation uaa_release

Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private key exposure.

EPSS 0.3%CVSS 10.0

IBM3 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-9311 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by remote code execution

EPSS 0.5%CVSS 9.0

CVE-2026-9319 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by a remote code execution vulnerability

EPSS 0.5%CVSS 9.0

CVE-2026-8644 · IBM WebSphere Application Server

IBM WebSphere Application Server is affected by an identity spoofing vulnerability

EPSS 0.3%CVSS 9.1

misp1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-10611 · misp misp

OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled

EPSS 0.4%CVSS 10.0

ABB1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2025-14771 · ABB T-MAC Plus

File Disclosure in ABB T-MAC Plus web application and in ABB T-MAC plus Server - Default IIS Web Site

EPSS 0.3%CVSS 9.9

Linux2 vulnerabilities on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-46244 · Linux Linux

netfilter: nft_inner: Fix IPv6 inner_thoff desync

EPSS 0.4%CVSS 9.1

CVE-2026-46266 · Linux Linux

inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP

EPSS 0.5%CVSS 9.1

Wasiliy Strecker / ContestGallery developer1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-42680 · Wasiliy Strecker / ContestGallery developer Contest Gallery Pro

WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerability

EPSS 0.3%CVSS 9.8

CloudPirates-io2 vulnerabilities on this pageMax CVSS 10.0Priority 34KEV 0

CVE-2026-45131 · CloudPirates-io helm-charts

CloudPirates Open Source Helm Charts: GitHub Actions pull_request_target workflow allows secret exfiltration via fork pull requests

EPSS 0.3%CVSS 10.0

CVE-2026-45132 · CloudPirates-io helm-charts

CloudPirates Open Source Helm Charts: GitHub Actions workflow leaks PAT and SSH signing key via unsafe credential handling

EPSS 0.3%CVSS 10.0

Themeisle1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2025-53209 · Themeisle Masteriyo LMS PRO

WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

EPSS 0.3%CVSS 9.8

Ahmad1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-42684 · Ahmad WP Job Portal

WordPress WP Job Portal plugin <= 2.5.1 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

Tomdever1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-42682 · Tomdever wpForo Forum

WordPress wpForo Forum plugin <= 3.0.6 - Broken Access Control vulnerability

EPSS 0.3%CVSS 9.1

Wp Directory Kit1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-42672 · Wp Directory Kit WP Directory Kit

WordPress WP Directory Kit plugin <= 1.5.1 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

Google1 vulnerability on this pageMax CVSS 10.0Priority 30KEV 0

CVE-2026-0072 · Google Android XR

In addInputMethodListener of com.android.server.inputmethod.InputMethodManagerService, there is a missing permission check.

EPSS 0.1%CVSS 10.0

The archive.