Critical vulnerability archive — page 163

FreeRDP1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-45700 · FreeRDP FreeRDP

Heap-buffer-overflow write in planar bitmap decoder

EPSS 6%public exploit CVSS 9.8

TRENDnet5 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-10060 · TRENDnet TEW-432BRP

TRENDnet TEW-432BRP formSetRoute command injection

EPSS 6%public exploit CVSS 9.8

CVE-2026-10061 · TRENDnet TEW-432BRP

TRENDnet TEW-432BRP formWPS command injection

EPSS 6%public exploit CVSS 9.8

CVE-2026-10062 · TRENDnet TEW-432BRP

TRENDnet TEW-432BRP formSetRoute stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-10063 · TRENDnet TEW-432BRP

TRENDnet TEW-432BRP formWPS stack-based overflow

EPSS 0.9%CVSS 9.8

CVE-2026-10064 · TRENDnet TEW-432BRP

TRENDnet TEW-432BRP formSetPortTr stack-based overflow

EPSS 0.4%CVSS 9.8

Dokploy8 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-45633 · Dokploy dokploy

Dokploy: Command Injection in /docker-container-logs Endpoint

EPSS 1%public exploit CVSS 9.9

CVE-2026-45663 · Dokploy dokploy

Dokploy: Remote Code Execution via destinationPath in Container File Upload

EPSS 1%public exploit CVSS 9.9

CVE-2026-45629 · Dokploy dokploy

Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint

EPSS 0.9%public exploit CVSS 9.9

CVE-2026-45661 · Dokploy dokploy

Dokploy: Remote Code Execution through Path Traversal

EPSS 0.8%public exploit CVSS 9.9

CVE-2026-45630 · Dokploy dokploy

Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement

EPSS 0.9%public exploit CVSS 9.0

CVE-2026-45631 · Dokploy dokploy

Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret

EPSS 0.5%public exploit CVSS 10.0

CVE-2026-45632 · Dokploy dokploy

Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution

EPSS 0.3%public exploit CVSS 9.9

CVE-2026-45628 · Dokploy dokploy

Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline

EPSS 0.2%CVSS 9.6

Deltasql1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2018-25412 · Deltasql Delta Sql

Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php

EPSS 0.8%public exploit CVSS 9.8

zyddnys1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-10042 · zyddnys manga-image-translator

manga-image-translator RCE via Unsafe Pickle Deserialization in Share Model

EPSS 0.6%public exploit CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-44825 · Apache Software Foundation Apache Solr

Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users

EPSS 4%CVSS 9.8

CVE-2026-42252 · Apache Software Foundation Apache Airflow

Apache Airflow: BashOperator Jinja2 injection via dag_run.conf — low-privilege user pattern

EPSS 0.4%CVSS 9.1

infiniflow1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-45312 · infiniflow ragflow

RAGFlow: Server-Side Template Injection in Prompt Generator leads to Remote Code Execution

EPSS 0.4%public exploit CVSS 9.9

Totolink1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-10187 · Totolink N300RH

Totolink N300RH Web Management wireless.so setWiFiBasicConfig stack-based overflow

EPSS 7%CVSS 9.8

SillyTavern2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-44650 · SillyTavern SillyTavern

SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS 0.6%public exploit CVSS 9.1

CVE-2026-44649 · SillyTavern SillyTavern

SillyTavern: Authentication Bypass via SSO Header Injection

EPSS 0.2%public exploit CVSS 9.8

Waterfall8 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-41269 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41270 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41272 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41274 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41275 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41276 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41277 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in t…

EPSS 1%CVSS 9.8

CVE-2025-41273 · Waterfall WF-500

Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-…

EPSS 0.4%CVSS 9.8

yhirose1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-45372 · yhirose cpp-httplib

cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection

EPSS 0.3%public exploit CVSS 9.9

rustfs1 vulnerability on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2026-45043 · rustfs rustfs

RustFS: ImportIam Allows Creation of Backdoor Service Accounts Under Any Parent Including Root

EPSS 0.2%public exploit CVSS 9.3

WebPros1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-44962 · WebPros Plesk

Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpo…

EPSS 0.7%CVSS 9.9

Dassault Systèmes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-7858 · Dassault Systèmes Teamwork Cloud - Standard Edition

Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

EPSS 0.5%CVSS 9.8

Disig1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-8931 · Disig Web Signer

Critical RCE vulnerability in Disig Web Signer

EPSS 0.7%CVSS 9.4

TriliumNext1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-45668 · TriliumNext Trilium

Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)

EPSS 0.2%public exploit CVSS 9.3

Interinfo1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-10071 · Interinfo DreamMaker

Interinfo｜DreamMaker - Arbitrary File Upload

EPSS 0.5%CVSS 9.8

NI1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-9051 · NI SystemLink Enterprise

Authentication Bypass Vulnerability in NI SystemLink Enterprise

EPSS 0.6%CVSS 9.3

OTRS AG1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-48188 · OTRS AG OTRS

SQL Injection via MySQL Quote Method

EPSS 0.7%CVSS 9.1

verbb1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-45697 · verbb formie

Formie: Pre-authenticated server-side template injection in Hidden fields

EPSS 0.5%CVSS 9.8

FreePBX1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-46376 · FreePBX security-reporting

FreePBX: Unauthenticated Use of Hard-Coded Credentials Vulnerability in FreePBX UCP Interface

EPSS 0.4%CVSS 9.8

Jinan USR IOT Technology Limited (PUSR)1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-7786 · Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Hard-coded Credentials

EPSS 0.4%CVSS 9.8

KMW1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-5386 · KMW KM-IP521

KMW CCTV Security Cameras Unverified Password Change

EPSS 0.6%CVSS 9.1

getarcaneapp1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2026-45625 · getarcaneapp arcane

Arcane: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs

EPSS 0.4%CVSS 9.9

Remote Spark (https://www.remotespark.com/)1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-8326 · Remote Spark (https://www.remotespark.com/) SparkView

Remote Spark SparkView Path Traversal in RDP Drive Redirection leading to RCE

EPSS 0.4%CVSS 10.0

Suprema1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-9508 · Suprema BioStar 2 (server)

Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

EPSS 0.3%CVSS 10.0

Sergey1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-48879 · Sergey AIWU

WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerability

EPSS 0.3%CVSS 9.8

shopperlabs1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-47744 · shopperlabs shopper

Shopper: Authorization bypass and RBAC privilege escalation in team settings

EPSS 0.3%CVSS 9.9

cli1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-48501 · cli cli

GitHub CLI tokens leak via `gh attestation` commands

EPSS 0.3%CVSS 9.1

WPTravel1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-4290 · WPTravel WP Travel Pro

WP Travel Pro <= 10.6.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion Including Administrators

EPSS 0.3%CVSS 9.1

The archive.