Critical vulnerability archive — page 170

AVB Disc Soft1 vulnerability on this pageMax CVSS 9.8Priority 94KEV 1

CVE-2026-8398 · AVB Disc Soft DAEMON Tools Lite

Daemon Tools Lite Embedded Malicious Code Vulnerability

KEV · due 30 May EPSS 1%public exploit SSVC act CVSS 9.8

Chroma1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2026-45829 · Chroma ChromaDB

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated att…

EPSS 15%public exploit CVSS 10.0

langgenius2 vulnerabilities on this pageMax CVSS 9.4Priority 58KEV 0

CVE-2026-41948 · langgenius dify

Dify v1.14.1 Path Traversal via Plugin Daemon Internal API Access

EPSS 23%public exploit CVSS 9.4

CVE-2026-41947 · langgenius dify

Dify < 1.14.2 Authorization Bypass via Trace Configuration Endpoints

EPSS 6%public exploit CVSS 9.3

webdriverio1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-25244 · webdriverio webdriverio

WebdriverIO has Command Injection in the BrowserStack Service

EPSS 3%public exploit CVSS 9.8

Dokploy1 vulnerability on this pageMax CVSS 9.9Priority 54KEV 0

CVE-2026-27130 · Dokploy dokploy

Dokploy has Command Injection in its Service Operations

EPSS 1%public exploit CVSS 9.9

Jsonpickle1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2021-47952 · Jsonpickle python jsonpickle

python jsonpickle 2.0.0 Remote Code Execution via py/repr

EPSS 0.7%public exploit CVSS 9.8

radare22 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-8695 · radare2 radare2

radare2 6.1.5 Use-After-Free via gdbr_threads_list()

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-8696 · radare2 radare2

radare2 6.1.5 Use-After-Free via gdbr_pids_list()

EPSS 0.6%public exploit CVSS 9.8

acl1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2018-25320 · acl ACL Analytics

ACL Analytics 11.x - 13.0.0.579 Arbitrary Code Execution

EPSS 0.6%public exploit CVSS 9.8

wp-super-edit1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-47965 · wp-super-edit WP Super Edit

WordPress Plugin WP Super Edit 2.5.4 Unrestricted File Upload

EPSS 0.6%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-30118 · mitre

scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-31070 · mitre

The LalanaChami Pharmacy Management System (commit 5c3d028) allows unauthenticated remote attackers to escalate privileges by self-assign…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-30117 · mitre

scalar/astro v0.1.13 was discovered to contain an arbitrary file upload vulnerability in the the scalar_url query parameter of the Scalar…

EPSS 0.5%CVSS 9.8

CVE-2023-24215 · mitre

Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain admini…

EPSS 0.2%CVSS 9.1

adenhq1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-8757 · adenhq hive

adenhq hive Delete Request routes_sessions.py _read_events_tail path traversal

EPSS 0.6%public exploit CVSS 9.1

Gegl1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-37239 · Gegl libbabl

libbabl 0.1.62 Broken Double Free Detection Memory Safety

EPSS 0.5%public exploit CVSS 9.8

Yerootech1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-37228 · Yerootech iDS6 DSSPro Digital Signage System

iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

EPSS 0.4%public exploit CVSS 9.8

thorsten2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-45010 · thorsten phpmyfaq

phpMyFAQ - Unauthenticated Two-Factor Authentication Brute-Force via /admin/check Endpoint

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-46364 · thorsten phpmyfaq

phpMyFAQ - SQL Injection via User-Agent Header in BuiltinCaptcha

EPSS 2%CVSS 9.8

Eugeny1 vulnerability on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2026-45035 · Eugeny tabby

Tabby: RCE via `tabby://run` URL Scheme

EPSS 0.4%public exploit CVSS 9.4

OpenMage1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-42155 · OpenMage magento-lts

Magento LTS: Weak API Session ID — Predictable MD5 of Time-Derived Inputs

EPSS 0.4%public exploit CVSS 9.3

zelon881 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-44666 · zelon88 HRConvert2

HRConvert2: Missing Sanitization enables Unauthenticated Remote Command Execution

EPSS 0.4%public exploit CVSS 9.3

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-8836 · VulDB

lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow

EPSS 1%CVSS 9.8

Microsoft2 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-45495 · Microsoft Microsoft Edge (Chromium-based)

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.8

CVE-2026-42822 · Microsoft Azure Local

Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 10.0

open-webui2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-44551 · open-webui open-webui

Open WebUI: LDAP Empty Password Authentication Bypass

EPSS 1%CVSS 9.1

CVE-2026-44566 · open-webui open-webui

Open WebUI: Arbitrary File Upload and Path Traversal

EPSS 0.3%CVSS 9.8

AWS1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-8838 · AWS Amazon Redshift connector for Python

Remote Code Execution via eval() Injection in amazon-redshift-python-driver

EPSS 0.8%CVSS 9.8

benmcollins1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-44699 · benmcollins libjwt

LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC

EPSS 0.3%public exploit CVSS 9.1

DHTMLX3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-41553 · DHTMLX PDF Export Module

Remote Code Execution in PDF Export Module

EPSS 0.6%CVSS 10.0

CVE-2026-41552 · DHTMLX PDF Export Module

Path Traversal in PDF Export Module

EPSS 0.5%CVSS 9.2

CVE-2026-7182 · DHTMLX Diagram

Path Traversal in Diagram

EPSS 0.4%CVSS 9.2

JONASBN2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-8507 · JONASBN Crypt::OpenSSL::PKCS12

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl have out-of-bounds (OOB) write flaws

EPSS 0.6%CVSS 9.8

CVE-2026-8721 · JONASBN Crypt::OpenSSL::PKCS12

Crypt::OpenSSL::PKCS12 versions through 1.94 for Perl truncates passwords with embedded NULLs

EPSS 0.4%CVSS 9.8

m6159261 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-5229 · m615926 Receive Notifications After Form Submitting – Form Notify for Any Forms

Receive Notifications After Form Submitting – Form Notify for Any Forms <= 1.1.10 - Unauthenticated Authentication Bypass via LINE OAuth Callback

EPSS 0.7%CVSS 9.8

Google Cloud1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-2031 · Google Cloud Internal Integration Platform APIs

Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution.

EPSS 0.5%CVSS 10.0

SGLang3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-7304 · SGLang SGLang

CVE-2026-7304

EPSS 0.6%CVSS 9.8

CVE-2026-7301 · SGLang SGLang

CVE-2026-7301

EPSS 0.4%CVSS 9.8

CVE-2026-7302 · SGLang SGLang

CVE-2026-7302

EPSS 0.4%CVSS 9.1

611711Dark1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-44717 · 611711Dark mcp_calculate_server

MCP Calculate Server: Prompt Injection to RCE

EPSS 0.5%CVSS 9.8

traefik1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-44774 · traefik traefik

Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false

EPSS 0.5%CVSS 9.9

DumbWareio1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-45230 · DumbWareio DumbAssets

DumbAssets 1.0.11 Path Traversal File Deletion via /api/delete-file

EPSS 0.6%CVSS 9.1

h2oai1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-8751 · h2oai h2o-3

h2oai h2o-3 JAR Model.java importBinaryModel deserialization

EPSS 0.4%CVSS 9.8

vercel1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-45772 · vercel turborepo

Turborepo: Unexpected local code execution during Yarn Berry detection

EPSS 0.4%CVSS 9.8

PrestaShop1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-44212 · PrestaShop PrestaShop

PrestaShop: Stored XSS executable in customer service view

EPSS 0.4%CVSS 9.3

FreeRTOS1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-8686 · FreeRTOS coreMQTT

DoS from MQTT v5.0 Deserialization Fault in core MQTT

EPSS 0.4%CVSS 9.1

AMD1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-0481 · AMD AMD Instinct™ MI210

Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized…

EPSS 0.3%CVSS 9.2

openmrs1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-41258 · openmrs openmrs-core

OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange

EPSS 0.3%CVSS 9.1

Creartia Internet Consulting1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-4320 · Creartia Internet Consulting ICMS Content Management

Authorization Bypass in ICMS Content Management by Creartia Internet Consulting

EPSS 0.3%CVSS 9.3

The archive.