Critical vulnerability archive — page 174

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-8263 · Tenda AC6

Tenda AC6 httpd WifiExtraSet fromSetWirelessRepeat os command injection

EPSS 5%public exploit CVSS 9.8

getgrav3 vulnerabilities on this pageMax CVSS 9.4Priority 56KEV 0

CVE-2026-42607 · getgrav grav

Grav: Remote Code Execution (RCE) via Malicious Plugin ZIP Upload in Direct Install Feature

EPSS 4%public exploit CVSS 9.1

CVE-2026-42613 · getgrav grav

Grav: Privilege Escalation via Missing Server-Side Validation of groups/access

EPSS 1%public exploit CVSS 9.4

CVE-2026-42608 · getgrav grav

Grav: Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component.

EPSS 0.6%public exploit CVSS 9.1

labring1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-42302 · labring FastGPT

FastGPT: Unauthenticated Remote Code Execution (RCE) via code-server Misconfiguration in agent-sandbox

EPSS 0.7%public exploit CVSS 9.8

Opencats1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2021-47936 · Opencats OpenCATS

OpenCATS 0.9.4 Remote Code Execution via Resume Upload

EPSS 0.7%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-8305 · VulDB

OpenClaw bluebubbles Webhook monitor.ts handleBlueBubblesWebhookRequest improper authentication

EPSS 0.7%public exploit CVSS 9.8

mstore1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2021-47933 · mstore MStore API

WordPress MStore API 2.0.6 Arbitrary File Upload

EPSS 0.6%public exploit CVSS 9.8

socfortress1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-42869 · socfortress CoPilot

SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC tools

EPSS 0.6%public exploit CVSS 10.0

mitre1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-38567 · mitre

HireFlow v1.2 is vulnerable to SQL injection in the /login and /search endpoints.

EPSS 0.5%public exploit CVSS 9.8

oxyno-zeta1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2026-42882 · oxyno-zeta s3-proxy

oxyno-zeta/s3-proxy: Security Issues in Resource Path Matching

EPSS 0.6%public exploit CVSS 9.4

pgadmin.org1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-7813 · pgadmin.org pgAdmin 4

pgAdmin 4: Cross-user data access and shared-server privilege escalation in server mode

EPSS 0.5%public exploit CVSS 9.9

bitwarden1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-43639 · bitwarden server

Bitwarden Server < 2026.4.0 Missing Authorization via Provider Clients

EPSS 0.6%public exploit CVSS 9.1

Opencart1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-47923 · Opencart opencart

OpenCart 3.0.3.8 Session Fixation via OCSESSID Cookie

EPSS 0.4%public exploit CVSS 9.8

ArchiveBox1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-42601 · ArchiveBox ArchiveBox

ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

EPSS 0.4%public exploit CVSS 9.8

download-from-files1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2021-47940 · download-from-files Download From Files

WordPress Download From Files 1.48 Arbitrary File Upload

EPSS 0.4%public exploit CVSS 9.8

FlowiseAI1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-43995 · FlowiseAI Flowise

Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)

EPSS 0.4%public exploit CVSS 9.8

openedx1 vulnerability on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2026-42858 · openedx openedx-platform

Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint

EPSS 0.4%public exploit CVSS 9.9

thecartpress1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2021-47932 · thecartpress TheCartPress

WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthenticated

EPSS 0.4%public exploit CVSS 9.8

go-pkgz1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-42560 · go-pkgz auth

auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation

EPSS 0.4%public exploit CVSS 9.1

sovity1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-42160 · sovity dataspace-portal

Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend

EPSS 0.3%public exploit CVSS 10.0

ThinkInAIXYZ1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-43900 · ThinkInAIXYZ deepchat

DeepChat: Persistent DOM XSS via HTML Entity Encoding in `<antArtifact>` SVG Rendering (Bypass of `svgSanitizer.ts`)

EPSS 0.4%public exploit CVSS 9.3

emlog1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-42287 · emlog emlog

Emlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() Functions

EPSS 0.2%public exploit CVSS 10.0

linkwarden1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-44313 · linkwarden linkwarden

LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function

EPSS 0.3%public exploit CVSS 9.1

phpvms1 vulnerability on this pageMax CVSS 9.4Priority 42KEV 0

CVE-2026-42569 · phpvms phpvms

phpvms: /importer authorization bypass causing full database wipe

EPSS 1%CVSS 9.4

PHP Group4 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-6722 · PHP Group PHP

Use-After-Free in SOAP using Apache map

EPSS 0.9%CVSS 9.8

CVE-2025-14179 · PHP Group PHP

SQL injection in pdo_firebird via NUL bytes in quoted strings

EPSS 0.4%CVSS 9.8

CVE-2026-6104 · PHP Group PHP

Global buffer over-read in mb_convert_encoding() with attacker-supplied encoding

EPSS 0.5%CVSS 9.1

CVE-2026-7261 · PHP Group PHP

SoapServer session-persisted object use-after-free via SOAP header fault

EPSS 0.3%CVSS 9.8

Termix-SSH1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-42454 · Termix-SSH Termix

Termix: OS Command Injection in Docker Container Management Endpoints

EPSS 0.7%CVSS 9.9

getsentry1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-42354 · getsentry sentry

Sentry: Improper authentication on SAML SSO process allows user identity linking

EPSS 0.6%CVSS 9.8

gitroomhq2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-42298 · gitroomhq postiz-app

Postiz: Arbitrary Code Execution and Token Exfiltration in pr-docker-build.yml via untrusted Dockerfile.dev

EPSS 0.5%CVSS 10.0

CVE-2026-42556 · gitroomhq postiz-app

Postiz stored XSS in public preview page

EPSS 0.3%CVSS 9.0

jkroepke1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-41070 · jkroepke openvpn-auth-oauth2

openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access

EPSS 0.4%CVSS 10.0

peerigon1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-44643 · peerigon angular-expressions

Angular Expressions - Remote Code Execution using filters

EPSS 0.5%CVSS 10.0

Amazon1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-8178 · Amazon Amazon Redshift JDBC Driver

Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

EPSS 0.6%CVSS 9.2

orneryd1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-42072 · orneryd NornicDB

Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access

EPSS 0.4%CVSS 9.8

ruby1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-42257 · ruby net-imap

net-imap: Command Injection via "raw" arguments to multiple commands

EPSS 0.4%CVSS 9.8

PostgreSQL1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-6665 · PostgreSQL

PgBouncer buffer overflow in SCRAM

EPSS 0.4%CVSS 9.8

jackc1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-41889 · jackc pgx

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

EPSS 0.4%CVSS 9.8

MailEnable1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-44400 · MailEnable MailEnable Enterprise Premium

MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin

EPSS 0.4%CVSS 9.8

Dell2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-35157 · Dell ECS

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula…

EPSS 0.3%CVSS 9.8

CVE-2026-40636 · Dell ECS

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulner…

EPSS 0.2%CVSS 9.8

ManoManoTech1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-42864 · ManoManoTech firefighter-incident

FireFighter: Unauthenticated SSRF in Raid jira_bot endpoint allows IAM credential theft

EPSS 0.3%CVSS 9.9

PelicanPlatform1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-42571 · PelicanPlatform pelican

Privilege Escalation Attack affecting Pelican Web UI

EPSS 0.3%CVSS 9.0

ZcashFoundation3 vulnerabilities on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-44498 · ZcashFoundation zebra

ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops

EPSS 0.3%CVSS 9.2

CVE-2026-41584 · ZcashFoundation zebra

ZEBRA: rk Identity Point Panic in Transaction Verification

EPSS 0.3%CVSS 9.2

CVE-2026-44497 · ZcashFoundation zebra

ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

EPSS 0.2%CVSS 9.3

czlonkowski1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-44694 · czlonkowski n8n-mcp

n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths

EPSS 0.2%CVSS 9.1

useplunk1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-42193 · useplunk plunk

Plunk: SNS webhook forgery

EPSS 0.1%CVSS 9.1

The archive.