Critical vulnerability archive — page 182

FlowiseAI7 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-41268 · FlowiseAI Flowise

Flowise: Flowise Parameter Override Bypass Remote Command Execution

EPSS 17%public exploit CVSS 9.8

CVE-2026-41276 · FlowiseAI Flowise

Flowise: AccountService resetPassword Authentication Bypass Vulnerability

EPSS 7%public exploit CVSS 9.8

CVE-2026-41264 · FlowiseAI Flowise

Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability

EPSS 2%public exploit CVSS 9.8

CVE-2026-41137 · FlowiseAI Flowise

Flowise: Code Injection in CSVAgent leads to Authenticated RCE

EPSS 1%public exploit CVSS 9.4

CVE-2026-41265 · FlowiseAI Flowise

Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-41274 · FlowiseAI Flowise

Flowise: Cypher Injection in GraphCypherQAChain

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-41267 · FlowiseAI Flowise

Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association

EPSS 0.3%public exploit CVSS 9.8

Hugging Face1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-25874 · Hugging Face LeRobot

LeRobot Unsafe Deserialization Remote Code Execution via gRPC

EPSS 16%public exploit CVSS 9.8

radareorg1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-6942 · radareorg radare2-mcp

radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass

EPSS 2%public exploit CVSS 9.8

roxy-wi2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-33076 · roxy-wi roxy-wi

Roxy-WI vulnerable to path traversal and arbitrary file writing

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-33078 · roxy-wi roxy-wi

Roxy-WI has SQL Injection in haproxy_section_save Endpoint via Unsanitized server_ip Parameter

EPSS 0.4%public exploit CVSS 9.8

kvcache-ai1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-26210 · kvcache-ai ktransformers

KTransformers Unsafe Deserialization RCE via balance_serve

EPSS 0.7%public exploit CVSS 9.8

kyverno1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-41323 · kyverno kyverno

Kyverno: ServiceAccount token leaked to external servers via apiCall service URL

EPSS 0.6%public exploit CVSS 9.1

Studio-421 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-41247 · Studio-42 elFinder

elFinder: Command injection in resize background color parameter when using ImageMagick CLI

EPSS 2%CVSS 9.8

Microsoft7 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-33819 · Microsoft Microsoft Bing

Microsoft Bing Remote Code Execution Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-21515 · Microsoft Azure IOT Central

Azure IoT Central Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.9

CVE-2026-26150 · Microsoft Microsoft Purview eDiscovery

Microsoft Purview eDiscovery Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 10.0

CVE-2026-35431 · Microsoft Microsoft Entra

Microsoft Entra ID Entitlement Management Spoofing Vulnerability

EPSS 0.5%CVSS 10.0

CVE-2026-32210 · Microsoft Microsoft Dynamics 365 (online)

Microsoft Dynamics 365 (online) Spoofing Vulnerability

EPSS 0.6%CVSS 9.3

CVE-2026-24303 · Microsoft Microsoft Partner Center

Microsoft Partner Center Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.6

CVE-2026-33102 · Microsoft Microsoft 365 Copilot

Microsoft 365 Copilot Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.3

SenseLive6 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

DeltaWW4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-1949 · DeltaWW AS320T

Incorrect calculation of buffer size on the stack in AS320T

EPSS 0.6%CVSS 9.8

CVE-2026-1951 · DeltaWW AS320T

No checking of the length of the buffer with the directory name in AS320T

EPSS 0.6%CVSS 9.8

CVE-2026-1950 · DeltaWW AS320T

No checking of the length of the buffer with the file name in AS320T

EPSS 0.3%CVSS 9.8

CVE-2026-1952 · DeltaWW AS320T

Denial of service via the undocumented subfunction in AS320T

EPSS 0.3%CVSS 9.8

Intrado1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-6074 · Intrado 911 Emergency Gateway

Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)

EPSS 0.6%CVSS 9.8

Linux14 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-31637 · Linux Linux

rxrpc: reject undecryptable rxkad response tickets

EPSS 0.6%CVSS 9.8

CVE-2026-31633 · Linux Linux

rxrpc: Fix integer overflow in rxgk_verify_response()

EPSS 0.5%CVSS 9.8

CVE-2026-31669 · Linux Linux

mptcp: fix slab-use-after-free in __inet_lookup_established

EPSS 0.5%CVSS 9.8

CVE-2026-31536 · Linux Linux

smb: server: let send_done handle a completion without IB_SEND_SIGNALED

EPSS 0.4%CVSS 9.8

CVE-2026-31589 · Linux Linux

mm: call ->free_folio() directly in folio_unmap_invalidate()

EPSS 0.4%CVSS 9.8

CVE-2026-31608 · Linux Linux

smb: server: avoid double-free in smb_direct_free_sendmsg after smb_direct_flush_send_list()

EPSS 0.5%CVSS 9.8

CVE-2026-31609 · Linux Linux

smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()

EPSS 0.5%CVSS 9.8

CVE-2026-31649 · Linux Linux

net: stmmac: fix integer underflow in chain mode

EPSS 0.5%CVSS 9.8

CVE-2026-31659 · Linux Linux

batman-adv: reject oversized global TT response buffers

EPSS 0.4%CVSS 9.8

CVE-2026-31668 · Linux Linux

seg6: separate dst_cache for input and output paths in seg6 lwtunnel

EPSS 0.4%CVSS 9.8

CVE-2026-31533 · Linux Linux

net/tls: fix use-after-free in -EBUSY error path of tls_do_encryption

EPSS 0.4%CVSS 9.8

CVE-2026-31657 · Linux Linux

batman-adv: hold claim backbone gateways by reference

EPSS 0.4%CVSS 9.8

CVE-2026-31636 · Linux Linux

rxrpc: fix RESPONSE authenticator parser OOB read

EPSS 0.4%CVSS 9.1

CVE-2026-31607 · Linux Linux

usbip: validate number_of_packets in usbip_pack_ret_submit()

EPSS 0.3%CVSS 9.8

Ericsson1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-25660 · Ericsson CodeChecker

Authentication bypass for certain API calls

EPSS 0.4%CVSS 9.8

redhat-cnalr1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-40472 · redhat-cnalr

Hackage package metadata stored XSS vulnerability

EPSS 0.3%CVSS 9.9

Google2 vulnerabilities on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-6919 · Google Chrome

Use after free in DevTools in Google Chrome prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to…

EPSS 0.3%CVSS 9.6

CVE-2026-6920 · Google Chrome

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer…

EPSS 0.2%CVSS 9.6

The archive.