Critical vulnerability archive — page 180

WebPros1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-41940 · WebPros cPanel

WebPros cPanel and WHM Authentication Bypass via Login Flow

KEV · due 3 May ransomware use EPSS 99%public exploit SSVC act CVSS 9.8

Synway Information Engineering Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-71284 · Synway Information Engineering Co., Ltd. Synway SMG Gateway Management Software

Synway SMG Gateway Management Software OS Command Injection via radius_address

EPSS 6%public exploit CVSS 9.8

opencats1 vulnerability on this pageMax CVSS 9.2Priority 57KEV 0

CVE-2026-27760 · opencats OpenCATS

OpenCATS PHP Code Injection via installer AJAX endpoint

EPSS 33%public exploit CVSS 9.2

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-7248 · D-Link DI-8100

D-Link DI-8100 CGI Endpoint tgfile.htm tgfile_htm buffer overflow

EPSS 2%public exploit CVSS 9.8

Totolink8 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-7202 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setWiFiWpsStart os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7203 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setUrlFilterRules os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7204 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setPptpServerCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7240 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setVpnAccountCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7241 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7242 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setOpenVpnClientCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7243 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setRadvdCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-7244 · Totolink A8000RU

Totolink A8000RU CGI cstecgi.cgi setWiFiEasyGuestCfg os command injection

EPSS 2%public exploit CVSS 9.8

arc531 vulnerability on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2026-26015 · arc53 DocsGPT

Unauthenticated RCE in DocsGPT MCP STDIO Configuration

EPSS 1%public exploit CVSS 10.0

mitre5 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-36841 · mitre

TOTOLINK N200RE V5 was discovered to contain a command injection vulnerability via the macstr and bandstr parameters in the formMapDelDev…

EPSS 1%public exploit CVSS 9.8

CVE-2025-60889 · mitre

Insecure deserialization of untrusted input in StellarGroup HPX 1.11.0 under certain conditions may allow attackers to execute arbitrary…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-36767 · mitre

A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any write…

EPSS 0.4%public exploit CVSS 10.0

CVE-2026-38992 · mitre

Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-36760 · mitre

An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permi…

EPSS 0.4%public exploit CVSS 9.6

Weaver Network Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2022-50993 · Weaver Network Co., Ltd. E-office

Weaver E-office < 10.0_20221201 Unauthenticated Arbitrary File Read via XmlRpcServlet

EPSS 0.8%public exploit CVSS 9.8

Tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2018-25317 · Tenda W3002R

Tenda W3002R/A302/W309R V5.07.64_en Cookie Session Weakness DNS Change

EPSS 0.7%public exploit CVSS 9.8

CVE-2018-25318 · Tenda FH303/A300

Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

EPSS 0.7%public exploit CVSS 9.8

Progress Software1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-4670 · Progress Software MOVEit Automation

Improper Authentication vulnerability in Progress MOVEit Automation

EPSS 5%CVSS 9.8

wazuh1 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2026-30893 · wazuh wazuh

Wazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peer

EPSS 0.4%public exploit CVSS 9.9

Red Hat1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-33845 · Red Hat Red Hat Enterprise Linux 10

Gnutls: gnutls: denial of service via dtls zero-length fragment

EPSS 2%CVSS 9.1

Ollama2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-42249 · Ollama Ollama

Remote Code Execution in Ollama via Update Mechanism

EPSS 1%CVSS 9.8

CVE-2026-42248 · Ollama Ollama

Missing Signature Verification for Updates in Ollama

EPSS 0.7%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-41607 · Apache Software Foundation Apache Thrift

Apache Thrift: C++ JSON OOB read

EPSS 0.9%CVSS 9.1

CVE-2026-41873 · Apache Software Foundation Pony Mail

Pony Mail: Admin account takeover via request smuggling

EPSS 0.4%CVSS 9.8

NVIDIA1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-24178 · NVIDIA FLARE SDK

NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may…

EPSS 0.6%CVSS 9.8

OpenClaw2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-41397 · OpenClaw OpenClaw

OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

EPSS 0.5%CVSS 9.6

CVE-2026-41386 · OpenClaw OpenClaw

OpenClaw < 2026.3.22 - Privilege Escalation via Unbound Bootstrap Setup Codes

EPSS 0.3%CVSS 9.8

Snap One, LLC1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-41446 · Snap One, LLC WattBox 800

WattBox 800 & 820 Series < 2.10.0.0 RCE via Diagnostic Endpoints

EPSS 0.4%CVSS 9.8

Spring3 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-40976 · Spring Spring Boot

In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints.

EPSS 0.5%CVSS 9.1

CVE-2026-40974 · Spring Spring Boot

Spring Boot's Cassandra auto-configuration does not perform hostname verification when establishing an SSL connection to Cassandra.

EPSS 0.2%CVSS 9.8

CVE-2026-40971 · Spring Spring Boot

When configured to use an SSL bundle, Spring Boot's RabbitMQ auto-configuration does not perform hostname verification when connecting to…

EPSS 0.2%CVSS 9.1

Carlson Software1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-3893 · Carlson Software VASCO-B GNSS Receiver

Carlson Software VASCO-B GNSS Receiver Missing Authentication for Critical Function

EPSS 0.4%CVSS 9.4

Exim2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-40685 · Exim Exim

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON…

EPSS 0.3%CVSS 9.8

CVE-2026-40687 · Exim Exim

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write t…

EPSS 0.4%CVSS 9.1

Google1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-7333 · Google Chrome

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a cr…

EPSS 0.4%CVSS 9.6

MIYAGAWA1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-7381 · MIYAGAWA Plack::Middleware::XSendfile

Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting

EPSS 0.4%CVSS 9.1

CRM Sistemas de Fidelización1 vulnerability on this pageMax CVSS 10.0Priority 34KEV 0

CVE-2026-3325 · CRM Sistemas de Fidelización MegaCMS

SQL injection in MegaCMS by CRM Sistemas de Fidelización

EPSS 0.3%CVSS 10.0

snyk1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-13030 · snyk

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.

EPSS 0.3%CVSS 9.8

TUBITAK BILGEM Software Technologies Research Institute1 vulnerability on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-5166 · TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center

Path Traversal in TUBITAK BILGEM's Pardus Software Center

EPSS 0.3%CVSS 9.6

ASR1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-42799 · ASR Kestrel

Out-of-bounds read in ulp

EPSS 0.3%CVSS 9.8

Milesight1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-32644 · Milesight MS-Cxx63-PD

Milesight Cameras Use of Hard-coded Cryptographic Key

EPSS 0.2%CVSS 9.8

Mozilla1 vulnerability on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2026-7321 · Mozilla Firefox

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component

EPSS 0.3%CVSS 9.6

MphRx1 vulnerability on this pageMax CVSS 9.4Priority 32KEV 0

CVE-2026-5779 · MphRx Minerva

Multiple vulnerabilities in MphRx's Minerva

EPSS 0.3%CVSS 9.4

OPPO1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-22070 · OPPO ColorOS Assistant

ColorOS Assistant Path Traversal Vulnerability

EPSS 0.2%CVSS 9.8

Jenkins Project1 vulnerability on this pageMax CVSS 9.0Priority 31KEV 0

CVE-2026-42523 · Jenkins Project Jenkins GitHub Plugin

Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the fe…

EPSS 0.3%CVSS 9.0

RTI1 vulnerability on this pageMax CVSS 9.1Priority 29KEV 0

CVE-2025-14543 · RTI Connext Professional

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Core Libraries) allows Serialized Data External Linking.

EPSS 0.2%CVSS 9.1

The archive.