Critical vulnerability archive — page 185

ASUSTOR Inc.2 vulnerabilities on this pageMax CVSS 9.9Priority 54KEV 0

CVE-2026-6644 · ASUSTOR Inc. ADM

A command injection vulnerability was found in the PPTP VPN Clients on the ADM

EPSS 2%public exploit CVSS 9.4

CVE-2026-6643 · ASUSTOR Inc. ADM

A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

EPSS 0.5%CVSS 9.9

protobufjs1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-41242 · protobufjs protobuf.js

protobufjs has an arbitrary code execution issue

EPSS 0.8%public exploit CVSS 9.8

Dolibarr1 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2026-23500 · Dolibarr dolibarr

Dolibarr: OS Command Injection (RCE) via MAIN_ODT_AS_PDF configuration

EPSS 0.9%public exploit CVSS 9.4

labring1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-40351 · labring FastGPT

FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass

EPSS 0.6%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-37749 · mitre

A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass aut…

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-30269 · mitre

Improper access control in Doorman v0.1.0 and v1.0.2 allows any authenticated user to update their own account role to a non-admin privil…

EPSS 0.3%public exploit CVSS 9.9

CVE-2026-39109 · mitre

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username paramet…

EPSS 0.3%public exploit CVSS 9.4

CVE-2026-29649 · mitre

NEMU contains an implementation flaw in its RISC-V Hypervisor CSR handling where henvcfg[7:4] (CBIE/CBCFE/CBZE-related fields) is incorre…

EPSS 0.4%CVSS 9.8

CVE-2026-29646 · mitre

In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor int…

EPSS 0.4%CVSS 9.8

ChurchCRM2 vulnerabilities on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2026-40484 · ChurchCRM CRM

ChurchCRM: Authenticated Remote Code Execution via Unrestricted PHP File Write in Database Restore Function

EPSS 0.9%public exploit CVSS 9.1

CVE-2026-40582 · ChurchCRM CRM

ChurchCRM: Authentication Bypass in `/api/public/user/login` Allows Bypass of 2FA and Account Lockout

EPSS 0.5%public exploit CVSS 9.1

HappySeaFox3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-40492 · HappySeaFox sail

SAIL has heap buffer overflow in XWD decoder — bits_per_pixel vs pixmap_depth type confusion in byte-swap

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-40493 · HappySeaFox sail

SAIL has heap buffer overflow in PSD decoder — bpp mismatch in LAB 16-bit mode

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-40494 · HappySeaFox sail

SAIL has heap buffer overflow in TGA RLE decoder — raw packet path missing bounds check

EPSS 0.3%public exploit CVSS 9.8

@fastify/middie2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-6270 · @fastify/middie @fastify/middie

@fastify/middie vulnerable to middleware authentication bypass in child plugin scopes

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-33804 · @fastify/middie @fastify/middie

@fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option

EPSS 0.3%CVSS 9.1

dataease2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-33122 · dataease dataease

DataEase has SQL Injection via Datasource Management

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-33082 · dataease dataease

DataEase: SQL Injection in v2 Dataset Export

EPSS 0.3%public exploit CVSS 9.8

goodoneuz1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-31843 · goodoneuz pay-uz

goodoneuz/pay-uz Unauthenticated PHP File Overwrite via /payment/api/editable/update Leading to Remote Code Execution

EPSS 1%CVSS 10.0

bytedance1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-40518 · bytedance deer-flow

ByteDance DeerFlow Path Traversal and Arbitrary File Write via Bootstrap Mode

EPSS 0.4%public exploit CVSS 9.1

siyuan-note1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-40322 · siyuan-note siyuan

SiYuan: Mermaid `javascript:` Link Injection Leads to Stored XSS and Electron RCE

EPSS 0.3%public exploit CVSS 9.1

FirebirdSQL1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-40342 · FirebirdSQL firebird

Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution

EPSS 0.7%CVSS 10.0

imprintnext1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-3596 · imprintnext Riaxe Product Customizer

Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action

EPSS 0.8%CVSS 9.8

MinecAnton2092 vulnerabilities on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-40317 · MinecAnton209 NovumOS

NovumOS has Privilege Escalation in the Syscall Interface

EPSS 0.2%public exploit CVSS 9.4

CVE-2026-40572 · MinecAnton209 NovumOS

NovumOS has Arbitrary Memory Mapping via Syscall 15 (MemoryMapRange)

EPSS 0.2%public exploit CVSS 9.0

thymeleaf2 vulnerabilities on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-40478 · thymeleaf thymeleaf

Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf

EPSS 1%CVSS 9.1

CVE-2026-40477 · thymeleaf thymeleaf

Improper restriction of the scope of accessible objects in Thymeleaf expressions

EPSS 0.9%CVSS 9.1

Digital Knowledge1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-5426 · Digital Knowledge KnowledgeDeliver

KnowledgeDeliver deployments before February 24, 2026 use a static ASP.NET/IIS machineKey value

EPSS 1%CVSS 9.1

gitroomhq1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2026-40487 · gitroomhq postiz-app

Postiz Has Unrestricted File Upload via MIME Type Spoofing that Leads to Stored XSS

EPSS 0.2%public exploit CVSS 9.0

Anviz1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-35546 · Anviz Anviz CX7 Firmware

Anviz Products Missing Authentication for Critical Function

EPSS 0.6%CVSS 9.8

ChilliCream1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-40324 · ChilliCream graphql-platform

Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents

EPSS 0.9%CVSS 9.1

ruby1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-27820 · ruby zlib

zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

EPSS 0.6%CVSS 9.8

essentialplugin1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-6443 · essentialplugin Accordion and Accordion Slider

Essentialplugin Plugins (Various Versions) - Injected Backdoor

EPSS 0.5%CVSS 9.8

miniupnp project1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-5720 · miniupnp project miniupnpd

miniupnpd Integer Underflow SOAPAction Header Parsing

EPSS 0.7%CVSS 9.1

silex technology, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-32956 · silex technology, Inc. SD-330AC

SD-330AC and AMC Manager provided by silex technology, Inc.

EPSS 0.5%CVSS 9.8

Sparx Systems Pty Ltd.3 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-15625 · Sparx Systems Pty Ltd. Sparx Pro Cloud Server

Unauthenticated execution of arbitrary SQL queries in Sparx Pro Cloud Server

EPSS 0.4%CVSS 9.8

CVE-2025-15624 · Sparx Systems Pty Ltd. Sparx Pro Cloud Server

Plaintext Storage of a Password in Sparx Pro Cloud Server.

EPSS 0.4%CVSS 9.3

CVE-2025-15623 · Sparx Systems Pty Ltd. Sparx Pro Cloud Server

Sparx Pro Cloud Server reveals sensitive information to an unauthenticated user

EPSS 0.3%CVSS 9.3

volcengine1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-40525 · volcengine OpenViking

OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI

EPSS 0.6%CVSS 9.1

Horner Automation1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-6284 · Horner Automation Cscape

Horner Automation Cscape and XL4, XL7 PLC Weak password requirements

EPSS 0.4%CVSS 9.3

neutrinolabs3 vulnerabilities on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-33689 · neutrinolabs xrdp

xrdp: Pre-authentication out-of-bounds reads in channel parsers

EPSS 0.5%CVSS 9.1

CVE-2026-33516 · neutrinolabs xrdp

xrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsers

EPSS 0.4%CVSS 9.1

CVE-2026-32105 · neutrinolabs xrdp

xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

EPSS 0.2%CVSS 9.3

Eaton1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-22619 · Eaton IPP software

Eaton Intelligent Power Protector (IPP) is affected by insecure library loading in its executable, which could lead to arbitrary code exe…

EPSS 0.3%CVSS 9.9

gramps-project1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-40258 · gramps-project gramps-web-api

Gramps Web API has Zip Slip Path Traversal in Media Archive Import

EPSS 0.4%CVSS 9.1

libcoap1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-29013 · libcoap libcoap

libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling

EPSS 0.3%CVSS 9.8

WSO21 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2024-2374 · WSO2 WSO2 API Manager

XML External Entity Injection in Multiple WSO2 Products Allows Arbitrary file read and Denial of Service

EPSS 0.4%CVSS 9.1

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-41153 · JetBrains Junie

In JetBrains Junie before 252.549.29 command execution was possible via malicious project file

EPSS 0.3%CVSS 9.8

CubeCart Limited1 vulnerability on this pageMax CVSS 9.8Priority 31KEV 0

CVE-2026-34018 · CubeCart Limited CubeCart

An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on th…

EPSS 0.2%CVSS 9.8

The archive.