Critical vulnerability archive — page 168

Ubiquiti Inc4 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 3

CVE-2026-34908 · Ubiquiti Inc UniFi OS Server

Ubiquiti UniFi OS Improper Access Control Vulnerability

KEV · due 26 Jun EPSS 89%public exploit SSVC act CVSS 10.0

CVE-2026-34909 · Ubiquiti Inc UniFi OS Server

Ubiquiti UniFi OS Path Traversal Vulnerability

KEV · due 26 Jun EPSS 69%public exploit SSVC act CVSS 10.0

CVE-2026-34910 · Ubiquiti Inc UniFi OS Server

Ubiquiti UniFi OS Improper Input Validation Vulnerability

KEV · due 26 Jun EPSS 90%public exploit SSVC act CVSS 10.0

CVE-2026-33000 · Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi…

EPSS 1%CVSS 9.1

Drupal1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-9082 · Drupal Drupal core

Drupal core - Highly critical - SQL injection - SA-CORE-2026-004

KEV · due 27 May EPSS 89%public exploit SSVC act CVSS 9.8

LiteSpeed Technologies1 vulnerability on this pageMax CVSS 10.0Priority 99KEV 1

CVE-2026-48172 · LiteSpeed Technologies cPanel Plugin

LiteSpeed cPanel Plugin Privilege Escalation Vulnerability

KEV · due 29 May EPSS 18%public exploit SSVC act CVSS 10.0

phenixdigital1 vulnerability on this pageMax CVSS 9.5Priority 55KEV 0

CVE-2026-8467 · phenixdigital phoenix_storybook

Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground

EPSS 2%public exploit CVSS 9.5

themefusion1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-6279 · themefusion Avada (Fusion) Builder

Avada (Fusion) Builder <= 3.15.2 - Unauthenticated Remote Code Execution via PHP Function Injection via 'render_logics' Shortcode Attribute via Widget AJAX Handler

EPSS 10%CVSS 9.8

Taiko Network Communications Pte Ltd.2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-9141 · Taiko Network Communications Pte Ltd. AG1000-01A SMS Alert Gateway

Taiko AG1000-01A Rev 7.3/8 Authentication Bypass via Web Interface

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-9139 · Taiko Network Communications Pte Ltd. AG1000-01A SMS Alert Gateway

Taiko AG1000-01A Rev 7.3/8 Hard-coded Credentials via login.zhtml

EPSS 0.5%CVSS 9.8

F51 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-9256 · F5 NGINX Plus

NGINX ngx_http_rewrite_module vulnerability

EPSS 11%CVSS 9.2

Trend Micro, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-71210 · Trend Micro, Inc. TrendAI Apex One

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute command…

EPSS 4%CVSS 9.8

CVE-2025-71211 · Trend Micro, Inc. TrendAI Apex One

A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute command…

EPSS 4%CVSS 9.8

xwiki2 vulnerabilities on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-23734 · xwiki xwiki-commons

XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash

EPSS 19%CVSS 9.3

CVE-2026-33137 · xwiki xwiki-platform

XWiki Platform has an Unauthenticated XAR Import via REST /wikis/{wikiName}

EPSS 0.6%CVSS 9.3

golang.org/x/crypto7 vulnerabilities on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2026-42508 · golang.org/x/crypto golang.org/x/crypto/ssh/knownhosts

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

EPSS 7%CVSS 9.1

CVE-2026-46595 · golang.org/x/crypto golang.org/x/crypto/ssh

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

EPSS 0.6%CVSS 10.0

CVE-2026-39830 · golang.org/x/crypto golang.org/x/crypto/ssh

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

EPSS 0.7%CVSS 9.1

CVE-2026-39832 · golang.org/x/crypto golang.org/x/crypto/ssh/agent

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

EPSS 0.7%CVSS 9.1

CVE-2026-39834 · golang.org/x/crypto golang.org/x/crypto/ssh

Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh

EPSS 0.6%CVSS 9.1

CVE-2026-39831 · golang.org/x/crypto golang.org/x/crypto/ssh

Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh

EPSS 0.5%CVSS 9.1

CVE-2026-39833 · golang.org/x/crypto golang.org/x/crypto/ssh/agent

Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent

EPSS 0.5%CVSS 9.1

HP Inc1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-8631 · HP Inc HP Linux Imaging and Printing Software

HP Linux Imaging and Printing Software – Potential Escalation of Privilege and Arbitrary Code Execution

EPSS 2%CVSS 9.8

ISC1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-3593 · ISC BIND 9

Heap use-after-free vulnerability in BIND 9 DNS-over-HTTPS implementation

EPSS 2%CVSS 9.8

Cisco1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-20223 · Cisco Cisco Secure Workload

Cisco Secure Workload Unauthorized API Access Vulnerability

EPSS 0.8%CVSS 10.0

twigphp1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-24425 · twigphp Twig

Twig 2.16.x & 3.9.0-3.25.x Sandbox Bypass via SourcePolicyInterface

EPSS 0.8%CVSS 9.9

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-44930 · Apache Software Foundation Apache CXF

Apache CXF: LDAP Injection vulnerability in XKMS LDAP Repository

EPSS 0.7%CVSS 9.8

CVE-2026-48207 · Apache Software Foundation Apache Fory

Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement

EPSS 0.6%CVSS 9.8

Honeywell International Inc.1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-5433 · Honeywell International Inc. Control Network Module (CNM)

Improper sanitization

EPSS 1.0%CVSS 9.1

Linux1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-43501 · Linux Linux

ipv6: rpl: reserve mac_len headroom when recompressed SRH grows

EPSS 0.7%CVSS 9.8

Repute Infosystems1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-6960 · Repute Infosystems BookingPress Appointment Booking Pro

BookingPress Pro <= 5.6 - Unauthenticated Arbitrary File Upload via Signature Custom Field

EPSS 0.7%CVSS 9.8

Concrete CMS1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-8134 · Concrete CMS Concrete CMS

Concrete CMS 9.5.0 and below is vulnerable to Authenticated RCE via Composer customTemplate Path Traversal leading to PHP File Inclusion

EPSS 0.7%CVSS 9.4

Red Hat1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-9277 · Red Hat Cryostat 4 on RHEL 9

shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`

EPSS 0.8%CVSS 9.2

Altium3 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-9102 · Altium Altium Enterprise Server

Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write

EPSS 0.6%CVSS 9.4

CVE-2026-9152 · Altium Altium 365

Unauthenticated SOAP Endpoint in Altium 365 SearchService Allows Cross-Tenant Data Exfiltration and Index Destruction

EPSS 0.3%CVSS 10.0

CVE-2026-9129 · Altium Altium Enterprise Server

Path Traversal in Altium Enterprise Server Viewer StorageController Allows Arbitrary File Read

EPSS 0.2%CVSS 9.4

Divi Engine1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-5118 · Divi Engine Divi Form Builder

Divi Form Builder <= 5.1.2 - Unauthenticated Privilege Escalation via 'role'

EPSS 0.5%CVSS 9.8

Netatalk1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-44050 · Netatalk Netatalk

Heap buffer overflow in CNID daemon comm_rcv()

EPSS 0.4%CVSS 9.9

ZKTeco1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-8598 · ZKTeco SSC335-GC2063-Face-0b77 Solution Camera

Unauthenticated Export Service in ZKTeco CCTV Cameras

EPSS 0.5%CVSS 9.1

Mattermost1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-4858 · Mattermost Mattermost

Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token.

EPSS 0.3%CVSS 9.9

RRWO1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-47372 · RRWO Crypt::SaltedHash

Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts

EPSS 0.4%CVSS 9.1

WP Swings1 vulnerability on this pageMax CVSS 10.0Priority 34KEV 0

CVE-2026-45444 · WP Swings Gift Cards For WooCommerce Pro

WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability

EPSS 0.3%CVSS 10.0

frappe1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2026-39405 · frappe lms

Frappe has Path Transversal via SCORM

EPSS 0.3%CVSS 9.4

9front1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-9054 · 9front 9front

Invalid IP packets cause a kernel panic

EPSS 0.3%CVSS 9.2

Open ISES2 vulnerabilities on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-48241 · Open ISES Tickets

Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php

EPSS 0.3%CVSS 9.2

CVE-2026-48242 · Open ISES Tickets

Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php

EPSS 0.3%CVSS 9.2

syslink software AG2 vulnerabilities on this pageMax CVSS 9.6Priority 31KEV 0

CVE-2026-8670 · syslink software AG Avantra

Insecure session handling on metrics web server

EPSS 0.2%CVSS 9.6

CVE-2026-8673 · syslink software AG Avantra

Password re-initialization mechanism sends passwords in plain text

EPSS 0.2%CVSS 9.1

Trimble1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-9264 · Trimble SketchUp

Cross-Site Scripting in SketchUp Dynamic Components

EPSS 0.2%CVSS 9.3

Wp Directory Kit1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-39531 · Wp Directory Kit WP Directory Kit

WordPress WP Directory Kit plugin <= 1.5.0 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

The archive.