Critical vulnerability archive — page 172

langflow-ai1 vulnerability on this pageMax CVSS 9.6Priority 57KEV 0

CVE-2026-42048 · langflow-ai langflow

Langflow: Path Traversal in Langflow Knowledge Bases API

EPSS 4%public exploit CVSS 9.6

enesgkky1 vulnerability on this pageMax CVSS 9.3Priority 53KEV 0

CVE-2026-44225 · enesgkky Pulpy

Pulpy: Incomplete filesystem sandbox in pulpy.fs bridge allows packaged web apps to read arbitrary user files

EPSS 2%public exploit CVSS 9.3

patriksimek7 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-43997 · patriksimek vm2

vm2: Sandbox Escape

EPSS 1.0%public exploit CVSS 10.0

CVE-2026-43999 · patriksimek vm2

vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape

EPSS 1.0%public exploit CVSS 9.9

CVE-2026-44006 · patriksimek vm2

vm2: Sandbox Escape

EPSS 0.8%public exploit CVSS 10.0

CVE-2026-44007 · patriksimek vm2

vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution

EPSS 1%public exploit CVSS 9.9

CVE-2026-44009 · patriksimek vm2

vm2: Sandbox Breakout Through Null Proto Exception

EPSS 1%public exploit CVSS 9.8

CVE-2026-44008 · patriksimek vm2

vm2 has sandbox breakout via `neutralizeArraySpeciesBatch`

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-45411 · patriksimek vm2

vm2: Sandbox Breakout Using Async Generator

EPSS 0.6%public exploit CVSS 9.8

ChurchCRM2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-42288 · ChurchCRM CRM

ChurchCRM: Incomplete fix for CVE-2026-39337: Unauthenticated RCE in Setup Wizard via unsanitized DB_PASSWORD

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-44547 · ChurchCRM CRM

ChurchCRM: Incomplete fix for CVE-2026-40582: public API login still bypasses 2FA and account lockout in ChurchCRM 7.2.2

EPSS 0.3%public exploit CVSS 9.6

espressif1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-42854 · espressif arduino-esp32

arduino-esp32: Stack buffer overflow in WebServer multipart boundary parsing leads to remote crash potential RCE

EPSS 0.6%public exploit CVSS 9.8

Microsoft10 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-41089 · Microsoft Windows Server 2012

Windows Netlogon Remote Code Execution Vulnerability

EPSS 78%CVSS 9.8

CVE-2026-41096 · Microsoft Windows 11 version 23H2

Windows DNS Client Remote Code Execution Vulnerability

EPSS 3%CVSS 9.8

CVE-2026-41103 · Microsoft Microsoft Confluence SAML SSO plugin

Microsoft SSO Plugin for Jira & Confluence Elevation of Privilege Vulnerability

EPSS 5%CVSS 9.1

CVE-2026-42898 · Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

EPSS 1%CVSS 9.9

CVE-2026-33821 · Microsoft Dynamics 365

Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.9

CVE-2026-40379 · Microsoft Microsoft Entra

Azure Entra ID Spoofing Vulnerability

EPSS 0.9%CVSS 9.3

CVE-2026-42823 · Microsoft Azure Logic Apps

Azure Logic Apps Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 9.9

CVE-2026-42833 · Microsoft Microsoft Dynamics 365 (on-premises) version 9.1

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

EPSS 0.7%CVSS 9.1

CVE-2026-33117 · Microsoft Azure SDK for Java

Azure SDK for Java Security Feature Bypass Vulnerability

EPSS 0.5%CVSS 9.1

CVE-2026-40402 · Microsoft Windows 11 version 23H2

Windows Hyper-V Elevation of Privilege Vulnerability

EPSS 0.3%CVSS 9.3

F52 vulnerabilities on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-42945 · F5 NGINX Plus

NGINX ngx_http_rewrite_module vulnerability

EPSS 68%CVSS 9.2

CVE-2026-41225 · F5 BIG-IP

iControl REST vulnerability

EPSS 0.3%CVSS 9.1

dedoc1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-44262 · dedoc scramble

Scramble: Remote code execution via evaluation of user-controlled input in validation rules

EPSS 6%CVSS 9.4

wger-project1 vulnerability on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2026-43948 · wger-project wger

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

EPSS 0.4%public exploit CVSS 9.9

0xJacky1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2026-44015 · 0xJacky nginx-ui

Nginx UI: Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware Allows Access to Internal Services

EPSS 0.3%public exploit CVSS 9.9

efwGrp2 vulnerabilities on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2026-44257 · efwGrp efw4.X

efw4.X: RCE via zipslip

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-44258 · efwGrp efw4.X

efw4.X: Path Traversal via Unchecked dst Parameter leads to Remote Code Execution

EPSS 0.4%public exploit CVSS 9.3

ELECOM CO.,LTD.2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-42062 · ELECOM CO.,LTD. WRC-BE72XSD-B

ELECOM wireless LAN access point devices contain an OS command injection in processing of username parameter.

EPSS 2%CVSS 9.8

CVE-2026-40621 · ELECOM CO.,LTD. WRC-BE72XSD-B

ELECOM wireless LAN access point devices do not require authentication to access some specific URLs.

EPSS 0.5%CVSS 9.8

No-Instructions1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-42889 · No-Instructions relay-server

Relay Server WebSocket authentication bypass when token is omitted

EPSS 0.4%public exploit CVSS 9.1

Paiement1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2020-37168 · Paiement Ecommerce Systempay

Ecommerce Systempay 1.0 Production Key Brute Force

EPSS 0.2%public exploit CVSS 9.8

Cleanuparr1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-44183 · Cleanuparr Cleanuparr

Cleanuparr: X-Forwarded-For leftmost parsing allows remote unauthenticated admin takeover when reverse-proxy mode is enabled

EPSS 0.2%public exploit CVSS 9.8

Adobe2 vulnerabilities on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2026-34659 · Adobe Adobe Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

EPSS 0.6%CVSS 9.6

CVE-2026-34660 · Adobe Adobe Connect

Adobe Connect | Incorrect Authorization (CWE-863)

EPSS 0.4%CVSS 9.3

codingjoe1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-42196 · codingjoe django-s3file

django-s3file: Relative path traversal

EPSS 0.6%CVSS 9.9

Canon Marketing Japan Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-32661 · Canon Marketing Japan Inc. GUARDIANWALL MailSuite (On-premises version)

Stack-based buffer overflow vulnerability exists in GUARDIANWALL MailSuite and GUARDIANWALL Mail Security Cloud (SaaS version).

EPSS 0.5%CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-44277 · Fortinet FortiAuthenticator

A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through…

EPSS 0.6%CVSS 9.1

jupyterlab1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-42557 · jupyterlab jupyterlab

jupyterlab: Command linker attributes in HTML enable one-click command execution from untrusted content

EPSS 0.5%CVSS 9.6

SUSE1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2026-41050 · SUSE Rancher

Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering

EPSS 0.4%CVSS 9.9

MongoDB, Inc.1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-8431 · MongoDB, Inc. Ops Manager

Ops Manager RCE via webhook body

EPSS 0.4%CVSS 9.4

SPIP1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-8430 · SPIP SPIP

SPIP < 4.4.14 Remote Code Execution via nginx

EPSS 0.4%CVSS 9.2

thymeleaf1 vulnerability on this pageMax CVSS 9.0Priority 34KEV 0

CVE-2026-41901 · thymeleaf thymeleaf

Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions

EPSS 0.4%CVSS 9.0

ArcadeData1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-44221 · ArcadeData arcadedb

ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases

EPSS 0.3%CVSS 9.0

Hitachi Vantara1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2025-11159 · Hitachi Vantara Pentaho Data Integration and Analytics

Hitachi Vantara Pentaho Data Integration & Analytics - Dependency on Vulnerable Third-Party Component

EPSS 0.3%CVSS 9.1

smp461 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-44196 · smp46 pingvin-share-x

Pingvin Share X: TOTP Authentication Bypass via Password-only Login

EPSS 0.3%CVSS 9.1

WebPros1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-29204 · WebPros WHMCS

Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonI…

EPSS 0.3%CVSS 9.1

l3montree-dev1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-42300 · l3montree-dev devguard

DevGuard: Unauthenticated identity assertion via `X-Admin-Token` header

EPSS 0.3%CVSS 9.3

mitre1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2025-27851 · mitre

The locally served web site on the Garmin WDU (v1 1.4.6 and v2 5.0) allows a cross-site origin WebSocket hijacking attack.

EPSS 0.1%CVSS 9.3

The archive.