Critical vulnerability archive — page 178

Eclipse Foundation1 vulnerability on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2026-7411 · Eclipse Foundation Eclipse BaSyx

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an u…

EPSS 4%public exploit CVSS 10.0

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-36356 · mitre

The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command in…

EPSS 20%public exploit CVSS 9.1

CVE-2026-38428 · mitre

Kestra v1.3.3 and before is vulnerable to SQL Injection.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-38431 · mitre

ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-38429 · mitre

OpenCMS v20 and before is vulnerable to XML External Entity (XXE) in the Admin Import DB feature due to insecure XML parsing of user supp…

EPSS 0.3%CVSS 9.8

CVE-2026-34408 · mitre

An issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0).

EPSS 0.3%CVSS 9.1

Shenzhen Yipu Commercial and Trading Co., Ltd5 vulnerabilities on this pageMax CVSS 9.3Priority 56KEV 0

CVE-2026-41922 · Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender OS Command Injection via wireless.cgi

EPSS 5%public exploit CVSS 9.3

CVE-2026-41923 · Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender OS Command Injection via internet.cgi

EPSS 3%public exploit CVSS 9.3

CVE-2026-41924 · Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender OS Command Injection via makeRequest.cgi

EPSS 3%public exploit CVSS 9.3

CVE-2026-41925 · Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender OS Command Injection via adm.cgi (reboot_time)

EPSS 4%public exploit CVSS 9.3

CVE-2026-41926 · Shenzhen Yipu Commercial and Trading Co., Ltd WDR201A WiFi Extender

WDR201A WiFi Extender OS Command Injection via firewall.cgi

EPSS 1%public exploit CVSS 9.3

EvoMap1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-42076 · EvoMap evolver

Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution

EPSS 2%public exploit CVSS 9.8

Totolink1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-7823 · Totolink A8000RU

Totolink A8000RU cstecgi.cgi setAppFilterCfg os command injection

EPSS 2%public exploit CVSS 9.8

0xJacky3 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-42221 · 0xJacky nginx-ui

nginx-ui: Unauthenticated First-Run Installer Allows Remote Initial Admin Claim

EPSS 1%public exploit CVSS 9.8

CVE-2026-42238 · 0xJacky nginx-ui

Unauthenticated Remote Code Execution via Backup Restore in nginx-ui

EPSS 1.0%public exploit CVSS 9.8

CVE-2026-42222 · 0xJacky nginx-ui

nginx-ui: Unauthenticated first-boot instance claim via POST /api/install allows remote bootstrap takeover

EPSS 0.3%public exploit CVSS 9.8

patriksimek5 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-24781 · patriksimek vm2

vm2: Sandbox Breakout Through Inspect

EPSS 1%public exploit CVSS 9.8

CVE-2026-26956 · patriksimek vm2

vm2: WASM Sandbox Escape (Node 25 only)

EPSS 1%public exploit CVSS 9.8

CVE-2026-24118 · patriksimek vm2

VM2 Sandbox Breakout Through lookupGetter

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-24120 · patriksimek vm2

vm2: Sandbox Breakout Through Promise Species

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-26332 · patriksimek vm2

vm2: Sandbox Escape

EPSS 0.7%public exploit CVSS 10.0

EFM1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-7834 · EFM ipTIME NAS1dual

EFM ipTIME NAS1dual misc_main.cgi get_csrf_whites stack-based overflow

EPSS 0.6%public exploit CVSS 9.8

Eclipse2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-54344 · Eclipse Equinox OSGi

Eclipse Equinox OSGi 3.7.2 Remote Code Execution via Console

EPSS 0.5%public exploit CVSS 9.8

CVE-2023-54342 · Eclipse Equinox OSGi

Eclipse Equinox OSGi 3.8-3.18 Console Remote Code Execution

EPSS 0.5%public exploit CVSS 9.8

Arelle1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-42796 · Arelle Arelle

Arelle < 2.39.10 Unauthenticated RCE via /rest/configure

EPSS 3%CVSS 9.8

enchant971 vulnerability on this pageMax CVSS 9.4Priority 44KEV 0

CVE-2026-41571 · enchant97 note-mark

Note Mark: OIDC-registered users authenticated by submitting password "null"

EPSS 0.4%public exploit CVSS 9.4

OpenC32 vulnerabilities on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2026-42087 · OpenC3 cosmos

OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base

EPSS 0.3%public exploit CVSS 9.6

CVE-2026-42088 · OpenC3 cosmos

OpenC3 COSMOS: Administrative Actions via the Script Runner Tool

EPSS 0.3%public exploit CVSS 9.6

Apache Software Foundation6 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-42027 · Apache Software Foundation Apache OpenNLP

Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader

EPSS 0.7%CVSS 9.8

CVE-2026-42810 · Apache Software Foundation Apache Polaris

Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names

EPSS 0.4%CVSS 9.9

CVE-2026-42811 · Apache Software Foundation Apache Polaris

Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions

EPSS 0.4%CVSS 9.9

CVE-2026-40682 · Apache Software Foundation Apache OpenNLP

Apache OpenNLP: XXE via Dictionary Parsing in DictionaryEntryPersistor

EPSS 0.5%CVSS 9.1

CVE-2026-42809 · Apache Software Foundation Apache Polaris

Apache Polaris: staged table creation could vend storage credentials for unvalidated locations

EPSS 0.4%CVSS 9.9

CVE-2026-42812 · Apache Software Foundation Apache Polaris

Apache Polaris: No protection on `write.metadata.path`

EPSS 0.4%CVSS 9.9

n8n-io4 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-42231 · n8n-io n8n

n8n: Prototype Pollution in XML Webhook Body Parser Leads to RCE

EPSS 0.9%CVSS 9.4

CVE-2026-42232 · n8n-io n8n

n8n: XML Node Prototype Pollution to RCE

EPSS 0.5%CVSS 9.4

CVE-2026-42233 · n8n-io n8n

n8n: SQL Injection in Oracle Database Node via Limit Field

EPSS 0.3%CVSS 9.8

CVE-2026-42235 · n8n-io n8n

n8n: XSS via MCP OAuth client

EPSS 0.3%CVSS 9.6

Linux1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-43067 · Linux Linux

ext4: handle wraparound when searching for blocks for indirect mapped blocks

EPSS 0.5%CVSS 9.8

ahmadgb1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-5294 · ahmadgb GeekyBot — AI Copilot, Chatbot, WooCommerce Lead Gen & Zero-Prompt Content

GeekyBot <= 1.2.2 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation via 'geekybot_frontendajax' AJAX Action

EPSS 0.5%CVSS 9.8

MoreConvert1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-5722 · MoreConvert MoreConvert Pro

MoreConvert Pro <= 1.9.14 - Authentication Bypass via Waitlist Guest Verification Token Reuse

EPSS 0.5%CVSS 9.8

OpenClaw3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-43566 · OpenClaw OpenClaw

OpenClaw 2026.4.7 < 2026.4.14 - Privilege Escalation via Untrusted Webhook Wake Events

EPSS 0.4%CVSS 9.8

CVE-2026-43526 · OpenClaw OpenClaw

OpenClaw < 2026.4.12 - Server-Side Request Forgery via QQBot Reply Media URL Handling

EPSS 0.3%CVSS 9.3

CVE-2026-43534 · OpenClaw OpenClaw

OpenClaw < 2026.4.10 - Unsanitized External Input in Agent Hook Events

EPSS 0.2%CVSS 9.8

streetwriters1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2026-42090 · streetwriters notesnook

Notesnook: RCE via stored XSS in note export rendering

EPSS 0.5%CVSS 9.6

Red Hat2 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-34000 · Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Xwayland: xorg: x.org x server: information disclosure and denial of service via out-of-bounds read in xkb geometry processing.

EPSS 0.5%CVSS 9.1

CVE-2026-34002 · Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling

EPSS 0.5%CVSS 9.1

dreamstechnologies1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-13618 · dreamstechnologies Mentoring

Mentoring <= 1.2.8 - Unauthenticated Privilege Escalation in mentoring_process_registration

EPSS 0.3%CVSS 9.8

Saleswonder LLC1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-40797 · Saleswonder LLC WebinarIgnition

WordPress WebinarIgnition plugin <= 4.08.253 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Qualcomm, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 31KEV 0

CVE-2026-25293 · Qualcomm, Inc. Snapdragon

Incorrect authorization in PLC FW

EPSS 0.2%CVSS 9.8

The archive.