Critical vulnerability archive — page 175

BerriAI1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-42208 · BerriAI litellm

LiteLLM: SQL injection in Proxy API key verification

KEV · due 11 May EPSS 89%public exploit SSVC act CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2025-69691 · mitre

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.

EPSS 0.7%public exploit CVSS 9.9

CVE-2026-38360 · mitre

Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code…

EPSS 6%CVSS 9.8

CVE-2026-37431 · mitre

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appoint…

EPSS 0.3%public exploit CVSS 9.8

0din-ai1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-41512 · 0din-ai ai-scanner

Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`

EPSS 0.6%public exploit CVSS 9.9

axios1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2026-42264 · axios axios

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

EPSS 0.8%public exploit CVSS 9.1

MervinPraison3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-41497 · MervinPraison PraisonAI

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-44336 · MervinPraison PraisonAI

PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection

EPSS 0.6%public exploit CVSS 9.6

CVE-2026-44335 · MervinPraison PraisonAI

SSRF bypass in PraisonAI

EPSS 0.4%public exploit CVSS 9.8

Universal Robots1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-8153 · Universal Robots PolyScope 5

Command injection in Dashboard Server interface

EPSS 3%CVSS 9.8

electerm4 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-41500 · electerm electerm

electerm has Command Injection Vulnerability via runMac function

EPSS 2%CVSS 9.8

CVE-2026-41501 · electerm electerm

electerm has Command Injection Vulnerability via runLinux function

EPSS 1%CVSS 9.8

CVE-2026-43941 · electerm electerm

Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

EPSS 0.4%CVSS 9.6

CVE-2026-43944 · electerm electerm

electerm: dangerous code can be run through links or command line

EPSS 0.4%CVSS 9.6

sovity1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-42160 · sovity dataspace-portal

Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend

EPSS 0.3%public exploit CVSS 10.0

DrayTek1 vulnerability on this pageMax CVSS 9.2Priority 42KEV 0

CVE-2022-50994 · DrayTek Vigor 2960

DrayTek Vigor 2960 < 1.5.1.4 OS Command Injection via mainfunction.cgi

EPSS 1%CVSS 9.2

th30d4y1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-41900 · th30d4y OpenLearnX

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

EPSS 0.9%CVSS 10.0

nhost1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-41574 · nhost nhost

Nhost Vulnerable to Account Takeover via OAuth Email Verification Bypass

EPSS 0.8%CVSS 9.8

SEPPmail AG3 vulnerabilities on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-44128 · SEPPmail AG Secure Email Gateway

Unauthenticated Remote Code Execution

EPSS 0.8%CVSS 9.3

CVE-2026-44126 · SEPPmail AG Secure Email Gateway

Insecure deserialization

EPSS 0.5%CVSS 9.2

CVE-2026-44125 · SEPPmail AG Secure Email Gateway

Missing Authorization in GINAv2

EPSS 0.4%CVSS 9.3

Linux12 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-43304 · Linux Linux

libceph: define and enforce CEPH_MAX_KEY_LEN

EPSS 0.6%CVSS 9.8

CVE-2026-43402 · Linux Linux

kthread: consolidate kthread exit paths to prevent use-after-free

EPSS 0.6%CVSS 9.8

CVE-2026-43414 · Linux Linux

scsi: qla2xxx: Completely fix fcport double free

EPSS 0.6%CVSS 9.8

CVE-2026-43465 · Linux Linux

net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ

EPSS 0.5%CVSS 9.8

CVE-2026-43341 · Linux Linux

net/ipv6: ioam6: prevent schema length wraparound in trace fill

EPSS 0.5%CVSS 9.8

CVE-2026-43407 · Linux Linux

libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply()

EPSS 0.7%CVSS 9.1

CVE-2026-43376 · Linux Linux

ksmbd: fix use-after-free by using call_rcu() for oplock_info

EPSS 0.4%CVSS 9.8

CVE-2026-43379 · Linux Linux

ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close()

EPSS 0.4%CVSS 9.8

CVE-2026-43383 · Linux Linux

net/tcp-md5: Fix MAC comparison to be constant-time

EPSS 0.5%CVSS 9.4

CVE-2026-43384 · Linux Linux

net/tcp-ao: Fix MAC comparison to be constant-time

EPSS 0.5%CVSS 9.8

CVE-2026-43406 · Linux Linux

libceph: prevent potential out-of-bounds reads in process_message_header()

EPSS 0.6%CVSS 9.1

CVE-2026-43378 · Linux Linux

smb: server: fix use-after-free in smb2_open()

EPSS 0.3%CVSS 9.8

jkroepke1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-41070 · jkroepke openvpn-auth-oauth2

openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access

EPSS 0.4%CVSS 10.0

Amazon1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-8178 · Amazon Amazon Redshift JDBC Driver

Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

EPSS 0.6%CVSS 9.2

orneryd1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-42072 · orneryd NornicDB

Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access

EPSS 0.4%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-25199 · Apache Software Foundation Apache CloudStack

Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access

EPSS 0.5%CVSS 9.1

mauriciopoppe1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-41507 · mauriciopoppe math-codegen

Remote Code Execution (RCE) via String Literal Injection into math-codegen

EPSS 0.4%CVSS 9.8

CROSS-signature1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-41509 · CROSS-signature CROSS-implementation

Integer underflow in crypto_sign_open() leads to buffer overflow

EPSS 0.3%CVSS 9.8

jackc1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-41889 · jackc pgx

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

EPSS 0.4%CVSS 9.8

MailEnable1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-44400 · MailEnable MailEnable Enterprise Premium

MailEnable Enterprise Premium < 10.55 Authorization Bypass via WebAdmin

EPSS 0.4%CVSS 9.8

Remote Spark (https://www.remotespark.com/)1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-6213 · Remote Spark (https://www.remotespark.com/) SparkView

Remote Spark SparkView RCE

EPSS 0.3%CVSS 10.0

CashDro1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-8076 · CashDro CashDro 3 Administration Panel

Weak credentials vulnerability in the CashDro 3 web administration panel

EPSS 0.3%CVSS 9.3

inducer1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-41588 · inducer relate

RELATE: Timing Attack Vulnerability in course/auth.py — check_sign_in_key()

EPSS 0.4%CVSS 9.0

ZcashFoundation4 vulnerabilities on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-41583 · ZcashFoundation zebra

ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling

EPSS 0.3%CVSS 9.3

CVE-2026-44498 · ZcashFoundation zebra

ZEBRA: Block Validator Undercounts Coinbase and P2SH Sigops

EPSS 0.3%CVSS 9.2

CVE-2026-41584 · ZcashFoundation zebra

ZEBRA: rk Identity Point Panic in Transaction Verification

EPSS 0.3%CVSS 9.2

CVE-2026-44497 · ZcashFoundation zebra

ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type Handling due to Stale Buffer

EPSS 0.2%CVSS 9.3

czlonkowski1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-44694 · czlonkowski n8n-mcp

n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths

EPSS 0.2%CVSS 9.1

useplunk1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-42193 · useplunk plunk

Plunk: SNS webhook forgery

EPSS 0.1%CVSS 9.1

The archive.