Critical vulnerability archive — page 176

BerriAI1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-42208 · BerriAI litellm

LiteLLM: SQL injection in Proxy API key verification

KEV · due 11 May EPSS 89%public exploit SSVC act CVSS 9.8

mitre8 vulnerabilities on this pageMax CVSS 9.9Priority 56KEV 0

CVE-2024-51092 · mitre

LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index…

EPSS 7%public exploit CVSS 9.1

CVE-2025-67887 · mitre

1C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upl…

EPSS 2%public exploit CVSS 9.8

CVE-2023-46453 · mitre

Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in administrative control of the device) via a username…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-69691 · mitre

Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.

EPSS 0.7%public exploit CVSS 9.9

CVE-2025-69690 · mitre

Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing t…

EPSS 0.8%public exploit CVSS 9.1

CVE-2026-38360 · mitre

Directory Traversal vulnerability in fohrloop dash-uploader v.0.1.0 through v.0.7.0a2 allows a remote attacker to execute arbitrary code…

EPSS 6%CVSS 9.8

CVE-2025-69599 · mitre

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-37431 · mitre

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appoint…

EPSS 0.3%public exploit CVSS 9.8

argoproj1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2026-42880 · argoproj argo-cd

ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

EPSS 0.6%public exploit CVSS 9.6

axios1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2026-42264 · axios axios

Axios: Prototype pollution read-side gadgets in HTTP adapter allow credential injection and request hijacking

EPSS 0.8%public exploit CVSS 9.1

gitpython-developers1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-42284 · gitpython-developers GitPython

GitPython: Unsafe option check validates multi_options before shlex.split transforms it

EPSS 0.6%public exploit CVSS 9.8

Yarbo3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-7413 · Yarbo Firmware

Persistent undocumented backdoor access in Yarbo robot

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-7415 · Yarbo Firmware

Open MQTT orchestration without read/write ACLs in Yarbo robot firmware

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-7414 · Yarbo Firmware

Hardcoded credentials in Yarbo robot firmware

EPSS 0.5%public exploit CVSS 9.8

hyperledger1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-41586 · hyperledger fabric

ObjectInputStream.readObject() without ObjectInputFilter in fabric-sdk-java allows Java deserialization RCE

EPSS 0.5%public exploit CVSS 9.8

Universal Robots1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-8153 · Universal Robots PolyScope 5

Command injection in Dashboard Server interface

EPSS 3%CVSS 9.8

AcademySoftwareFoundation2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-42217 · AcademySoftwareFoundation openexr

OpenEXR: Shift exponent overflow in `readVariableLengthInteger()` (`ImfIDManifest.cpp`)

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-42216 · AcademySoftwareFoundation openexr

OpenEXR: Out-of-bounds read in `IDManifest::init()` during prefix expansion

EPSS 0.5%public exploit CVSS 9.1

charmbracelet1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-41589 · charmbracelet wish

Wish has SCP Path Traversal that allows arbitrary file read/write

EPSS 0.4%public exploit CVSS 9.6

electerm4 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-41500 · electerm electerm

electerm has Command Injection Vulnerability via runMac function

EPSS 2%CVSS 9.8

CVE-2026-41501 · electerm electerm

electerm has Command Injection Vulnerability via runLinux function

EPSS 1%CVSS 9.8

CVE-2026-43941 · electerm electerm

Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click

EPSS 0.4%CVSS 9.6

CVE-2026-43944 · electerm electerm

electerm: dangerous code can be run through links or command line

EPSS 0.4%CVSS 9.6

Microsoft6 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-35435 · Microsoft Azure AI Foundry

Azure AI Foundry Elevation of Privilege Vulnerability

EPSS 1%CVSS 10.0

CVE-2026-42826 · Microsoft Azure DevOps

Azure DevOps Information Disclosure Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-33109 · Microsoft Azure Managed Instance for Apache Cassandra

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

EPSS 0.7%CVSS 9.9

CVE-2026-35428 · Microsoft Azure Cloud Shell

Azure Cloud Shell Spoofing Vulnerability

EPSS 0.9%CVSS 9.6

CVE-2026-33823 · Microsoft Microsoft Teams

Microsoft Team Events Portal Information Disclosure Vulnerability

EPSS 0.7%CVSS 9.6

CVE-2026-33844 · Microsoft Azure Managed Instance for Apache Cassandra

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.0

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-42010 · Red Hat Red Hat Enterprise Linux 10

Gnutls: gnutls: authentication bypass via nul character in username

EPSS 1%CVSS 9.8

th30d4y1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-41900 · th30d4y OpenLearnX

OpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment

EPSS 0.9%CVSS 10.0

freescout-help-desk1 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-41902 · freescout-help-desk freescout

FreeScout's user invitation hash never expires: permanent unauthenticated account takeover if invite link leaks

EPSS 0.2%public exploit CVSS 9.1

Hitachi2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-9661 · Hitachi Hitachi Virtual Storage Platform One Block 23

OS command injection vulneravility in the management gui (maintenance utility) of Hitachi Virtual Storage Platform One Block 23/24/26/28

EPSS 0.9%CVSS 9.8

CVE-2025-1978 · Hitachi Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F350, F370, F700, F900

Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console

EPSS 0.5%CVSS 9.8

Ivanti3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-5788 · Ivanti Endpoint Manager Mobile

An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to in…

EPSS 0.8%CVSS 9.8

CVE-2026-5787 · Ivanti Endpoint Manager Mobile

An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attack…

EPSS 0.7%CVSS 9.1

CVE-2026-7821 · Ivanti Endpoint Manager Mobile

Improper certificate validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker…

EPSS 0.5%CVSS 9.1

GitHub1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-8034 · GitHub Enterprise Server

Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion

EPSS 0.5%CVSS 9.8

Mozilla2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-8091 · Mozilla Firefox

Incorrect boundary conditions in the Audio/Video: Playback component

EPSS 0.5%CVSS 9.8

CVE-2026-8094 · Mozilla Firefox

Other issue in the WebRTC component

EPSS 0.4%CVSS 9.8

Spring1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-40982 · Spring Spring Cloud Config

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module.

EPSS 0.7%CVSS 9.1

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-25199 · Apache Software Foundation Apache CloudStack

Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access

EPSS 0.5%CVSS 9.1

Remote Spark (https://www.remotespark.com/)1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-6213 · Remote Spark (https://www.remotespark.com/) SparkView

Remote Spark SparkView RCE

EPSS 0.3%CVSS 10.0

CashDro1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-8076 · CashDro CashDro 3 Administration Panel

Weak credentials vulnerability in the CashDro 3 web administration panel

EPSS 0.3%CVSS 9.3

Open Notebook1 vulnerability on this pageMax CVSS 10.0Priority 33KEV 0

CVE-2026-33587 · Open Notebook Open Notebook

Remote Code Execution (RCE) via Server-Side Template Injection (SSTI)

EPSS 0.2%CVSS 10.0

torproject1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-44603 · torproject Tor

Tor before 0.4.9.7 has an out-of-bounds read by one byte via a malformed BEGIN cell, aka TROVE-2026-007.

EPSS 0.3%CVSS 9.1

DivvyDrive Information Technologies Inc.1 vulnerability on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2026-6795 · DivvyDrive Information Technologies Inc. DivvyDrive

Open Redirect in DivvyDrive Information Technologies' DivvyDrive

EPSS 0.2%CVSS 9.6

i18next1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-41691 · i18next i18next-http-backend

i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns

EPSS 0.3%CVSS 9.1

TUBITAK BILGEM Software Technologies Research Institute1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-6508 · TUBITAK BILGEM Software Technologies Research Institute Liderahenk

RCE in TUBITAK BILGEM's Liderahenk

EPSS 0.2%CVSS 9.8

The archive.