Critical vulnerability archive — page 171

Cisco1 vulnerability on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-20182 · Cisco Cisco Catalyst SD-WAN Controller

Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

KEV · due 17 May EPSS 92%public exploit SSVC act CVSS 10.0

Palo Alto Networks4 vulnerabilities on this pageMax CVSS 9.8Priority 97KEV 1

CVE-2026-0257 · Palo Alto Networks Cloud NGFW

PAN-OS: GlobalProtect Authentication Bypass Vulnerabilities

KEV · due 1 Jun ransomware use EPSS 96%public exploit SSVC act CVSS 9.1

CVE-2026-0264 · Palo Alto Networks Cloud NGFW

PAN-OS: Heap-Based Buffer Overflow in DNS Proxy and DNS Server Allows Unauthenticated Remote Code Execution

EPSS 0.6%CVSS 9.8

CVE-2026-0263 · Palo Alto Networks Cloud NGFW

PAN-OS: Remote Code Execution (RCE) in IKEv2 Processing

EPSS 0.4%CVSS 9.8

CVE-2026-0258 · Palo Alto Networks Cloud NGFW

PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching

EPSS 0.3%CVSS 9.1

gotenberg2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-42589 · gotenberg gotenberg

Gotenberg: Unauthenticated RCE via ExifTool Metadata Key Injection

EPSS 3%public exploit CVSS 9.8

CVE-2026-42596 · gotenberg gotenberg

Gotenberg: Unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook

EPSS 2%public exploit CVSS 9.4

opnsense3 vulnerabilities on this pageMax CVSS 9.1Priority 56KEV 0

CVE-2026-44194 · opnsense core

OPNsense: RCE on user managment

EPSS 6%public exploit CVSS 9.1

CVE-2026-44193 · opnsense core

OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-45158 · opnsense core

OPNsense: Command Injection via Attacker-Controlled DHCP Config

EPSS 0.5%CVSS 9.1

EVANK1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-8500 · EVANK Web::Passwd

Web::Passwd versions through 0.03 for Perl is vulnerable to RCE

EPSS 2%public exploit CVSS 9.8

MagicMirrorOrg1 vulnerability on this pageMax CVSS 9.2Priority 53KEV 0

CVE-2026-42281 · MagicMirrorOrg MagicMirror

MagicMirror²: Unauthenticated SSRF via /cors endpoint

EPSS 2%public exploit CVSS 9.2

midoks1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-41315 · midoks mdserver-web

mdserver-web: Missing Authorization and Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS 1%public exploit CVSS 9.8

patriksimek1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-44005 · patriksimek vm2

vm2: Sandbox escape

EPSS 0.8%public exploit CVSS 10.0

netty3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-42579 · netty netty

Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

EPSS 1%public exploit CVSS 9.1

CVE-2026-42581 · netty netty

Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-42584 · netty netty

Netty: HttpClientCodec response desynchronization

EPSS 0.8%public exploit CVSS 9.1

openclaw1 vulnerability on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2026-8634 · openclaw crabbox

Crabbox < v0.12.0 Environment Variable Information Disclosure

EPSS 1.0%public exploit CVSS 9.3

burstbv1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-8181 · burstbv Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative)

Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover

EPSS 15%CVSS 9.8

cubecart3 vulnerabilities on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-44377 · cubecart v6

CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-45053 · cubecart v6

CubeCart: Authenticated Arbitrary File Upload to RCE in REST Files API

EPSS 0.6%public exploit CVSS 9.1

CVE-2026-45714 · cubecart v6

CubeCart: Server-Side Template Injection (SSTI) in Smarty Templates leading to RCE

EPSS 0.4%public exploit CVSS 9.1

siyuan-note3 vulnerabilities on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-44588 · siyuan-note siyuan

SiYuan: URL-encoded title bypasses `escapeAriaLabel`, decoded by `decodeURIComponent` into a tooltip-XSS

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-44670 · siyuan-note siyuan

SiYuan: Stored XSS via Attribute View name to Electron renderer RCE in SiYuan

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-45375 · siyuan-note siyuan

SiYuan: Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution

EPSS 0.3%public exploit CVSS 9.0

gtsteffaniak1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-44542 · gtsteffaniak filebrowser

FileBrowser Quantum: Unauthenticated Path Traversal in Public Share Delete Allows Arbitrary File Deletion

EPSS 0.5%public exploit CVSS 9.1

ckan2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-42031 · ckan ckan

CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

EPSS 2%CVSS 9.8

CVE-2026-42032 · ckan ckan

CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`

EPSS 0.4%CVSS 9.1

strapi2 vulnerabilities on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-27886 · strapi strapi

Strapi may leak sensitive data via relational filtering due to lack of query sanitization

EPSS 2%CVSS 9.2

CVE-2026-22599 · strapi strapi

Strapi Vulnerable to SQL Injection in Content Type Builder

EPSS 1%CVSS 9.3

enchant971 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-44523 · enchant97 note-mark

Note Mark: JWT Secret Weakness allows Full Account Takeover via token forgery

EPSS 0.1%public exploit CVSS 10.0

fleetdm1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-26191 · fleetdm fleet

Fleet vulnerable to OS command injection in software packages

EPSS 0.8%CVSS 9.8

shahinurislam1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-6271 · shahinurislam Career Section

Career Section <= 1.7 - Unauthenticated Arbitrary File Upload

EPSS 0.7%CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-41615 · Microsoft Microsoft Authenticator for Android

Microsoft Authenticator Information Disclosure Vulnerability

EPSS 0.6%CVSS 9.6

MISP2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-44381 · MISP MISP

MISP: SQL injection via unvalidated ordering parameters in event and shadow attribute listings

EPSS 0.7%CVSS 9.3

CVE-2026-44364 · MISP misp-modules

misp-modules website - Missing CSRF protection in the website home blueprint

EPSS 0.2%CVSS 9.3

Akilli Commerce Software Technologies Ltd. Co.2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-2347 · Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website

IDOR in Akıllı Ticaret's E-Commerce Pack

EPSS 0.4%CVSS 9.8

CVE-2025-11024 · Akilli Commerce Software Technologies Ltd. Co. E-Commerce Website

SQLi in Akıllı Ticaret's E-Commerce Pack

EPSS 0.4%CVSS 9.8

Infused Addons2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-6510 · Infused Addons InfusedWoo Pro

InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Privilege Escalation via 'iwar_save_recipe'

EPSS 0.4%CVSS 9.8

CVE-2026-6512 · Infused Addons InfusedWoo Pro

InfusedWoo Pro <= 5.1.2 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters

EPSS 0.3%CVSS 9.1

valtimo-platform1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-42555 · valtimo-platform valtimo

Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin users

EPSS 0.6%CVSS 9.1

Lightning-AI1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-44484 · Lightning-AI pytorch-lightning

Compromise of PyTorch Lightning PyPi Package Versions

EPSS 0.4%CVSS 9.8

frappe1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-44442 · frappe erpnext

ERPNext: Unauthorised Document modification due to missing validation

EPSS 0.3%CVSS 9.9

richardhbtz1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-44482 · richardhbtz soundcloud-rpc

soundcloud-rpc: Remote Code Execution via XSS in Track Title

EPSS 0.3%CVSS 9.6

Google2 vulnerabilities on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2026-8511 · Google Chrome

Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a cra…

EPSS 0.2%CVSS 9.6

CVE-2026-8580 · Google Chrome

Use after free in Mojo in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a c…

EPSS 0.2%CVSS 9.6

loft-sh1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-42457 · loft-sh loft

vCluster Platform: Stored XSS can lead to privilege escalation

EPSS 0.3%CVSS 9.0

nearform1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-44351 · nearform fast-jwt

fast-jwt: Empty HMAC secret accepted via async key resolver - JWT auth bypass

EPSS 0.3%CVSS 9.1

GStreamer1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-46470 · GStreamer Good Plug-ins

An issue was discovered in GStreamer gst-plugins-good before 1.28.2.

EPSS 0.2%CVSS 9.1

wavelens1 vulnerability on this pageMax CVSS 9.4Priority 29KEV 0

CVE-2026-44592 · wavelens gradient

Gradient: Unauthenticated worker on /proto → arbitrary NAR write / cache poisoning

EPSS 0.2%CVSS 9.4

The archive.