Critical vulnerability archive — page 186

Microsoft2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-33824 · Microsoft Windows 10 Version 1607

Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability

KEV · due 21 Aug EPSS 77%public exploit SSVC act CVSS 9.8

CVE-2026-26149 · Microsoft Microsoft Power Apps Desktop Client

Microsoft Power Apps Desktop Client Spoofing Vulnerability

EPSS 0.6%CVSS 9.0

openremote1 vulnerability on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-39842 · openremote openremote

OpenRemote is Vulnerable to Expression Injection

EPSS 0.9%public exploit CVSS 10.0

marcobambini1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-40504 · marcobambini gravity

Creolabs Gravity < 0.9.6 Heap Buffer Overflow via gravity_vm_exec

EPSS 0.6%public exploit CVSS 9.8

Cisco4 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-20147 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Remote Code Execution Vulnerability

EPSS 10%CVSS 9.9

CVE-2026-20180 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability

EPSS 6%CVSS 9.9

CVE-2026-20186 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability

EPSS 6%CVSS 9.9

CVE-2026-20184 · Cisco Cisco Webex Meetings

Cisco Webex Meetings Certificate Validation Vulnerability

EPSS 0.5%CVSS 9.8

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-30993 · mitre

Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-37345 · mitre

SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-37338 · mitre

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.

EPSS 0.3%public exploit CVSS 9.4

CVE-2026-30625 · mitre

Upsonic 0.71.6 contains a remote code execution vulnerability in its MCP server/task creation functionality.

EPSS 1.0%CVSS 9.8

CVE-2026-37347 · mitre

SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-37339 · mitre

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.

EPSS 0.3%CVSS 9.8

CVE-2026-37340 · mitre

SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.

EPSS 0.3%CVSS 9.8

dgraph-io1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-40173 · dgraph-io dgraph

Dgraph: Unauthenticated pprof endpoint leaks admin auth token

EPSS 0.5%public exploit CVSS 9.4

Fortinet1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-39813 · Fortinet FortiSandbox

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow att…

EPSS 22%CVSS 9.1

Adobe6 vulnerabilities on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-27304 · Adobe ColdFusion 2025

ColdFusion | Improper Input Validation (CWE-20)

EPSS 4%CVSS 9.3

CVE-2026-27303 · Adobe Adobe Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

EPSS 0.6%CVSS 9.6

CVE-2026-34615 · Adobe Adobe Connect

Adobe Connect | Deserialization of Untrusted Data (CWE-502)

EPSS 0.6%CVSS 9.3

CVE-2026-27243 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

EPSS 0.3%CVSS 9.3

CVE-2026-27245 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

EPSS 0.3%CVSS 9.3

CVE-2026-27246 · Adobe Adobe Connect

Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79)

EPSS 0.3%CVSS 9.3

fastify2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-33808 · fastify @fastify/express

@fastify/express vulnerable to middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-33807 · fastify @fastify/express

@fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes

EPSS 0.4%public exploit CVSS 9.1

HGiga1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-6349 · HGiga iSherlock-base-4.5

HGiga｜iSherlock - OS Command Injection

EPSS 2%CVSS 9.8

@fastify/reply-from1 vulnerability on this pageMax CVSS 9.0Priority 45KEV 0

CVE-2026-33805 · @fastify/reply-from @fastify/reply-from

@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers

EPSS 0.4%public exploit CVSS 9.0

Owen1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-1555 · Owen WebStack

WebStack <= 1.2024 - Unauthenticated Arbitrary File Upload

EPSS 1.0%CVSS 9.8

jellyfin2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-35031 · jellyfin jellyfin

Jellyfin: Potential RCE via subtitle upload path traversal + .strm chain

EPSS 0.8%CVSS 10.0

CVE-2026-35033 · jellyfin jellyfin

Jellyfin: Potential SSRF + Arbitrary file read via stream argument injection

EPSS 0.3%CVSS 9.3

Openfind1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-6350 · Openfind MailGates

Openfind｜MailGates/MailAudit - Stack-based Buffer Overflow

EPSS 0.8%CVSS 9.8

Unisys2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-39906 · Unisys WebPerfect Image Suite

Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via .NET Remoting

EPSS 0.7%CVSS 10.0

CVE-2026-39907 · Unisys WebPerfect Image Suite

Unisys WebPerfect Image Suite 3.0 NTLMv2 Hash Leakage via WCF SOAP

EPSS 0.6%CVSS 10.0

HKUDS1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-35589 · HKUDS nanobot

nanobot: Cross-Site WebSocket Hijacking in WhatsApp Bridge (CVE-2026-2577 Fix Update)

EPSS 0.2%public exploit CVSS 9.3

Google1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-6296 · Google Chrome

Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape…

EPSS 0.6%CVSS 9.6

NuGet1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-39399 · NuGet NuGetGallery

NuGet Gallery: Arbitrary Blob Overwrite via Nuspec Confusion and URI Fragment Truncation

EPSS 0.5%CVSS 9.6

Sonatype1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-5189 · Sonatype Nexus Repository

Nexus Repository 3 - Hardcoded Credential in Internal Database Component

EPSS 0.5%CVSS 9.8

ukrsolution1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-4880 · ukrsolution Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale)

Barcode Scanner (+Mobile App) <= 1.11.0 - Unauthenticated Privilege Escalation via Insecure Token Authentication

EPSS 0.5%CVSS 9.8

visaacceptancesolutions1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-3461 · visaacceptancesolutions Visa Acceptance Solutions

Visa Acceptance Solutions <= 2.1.0 - Unauthenticated Authentication Bypass via Billing Email

EPSS 0.5%CVSS 9.8

oauth2-proxy1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-34457 · oauth2-proxy oauth2-proxy

OAuth2 Proxy: Health Check User-Agent Matching Bypasses Authentication in auth_request Mode

EPSS 0.5%CVSS 9.1

AVEVA1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-5387 · AVEVA Pipeline Simulation 2025

AVEVA Pipeline Simulation Missing Authorization

EPSS 0.4%CVSS 9.3

Grafana1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-41118 · Grafana Pyroscope

Sensitive COS `SecretKey` exposed in plaintext via configuration API due to missing type protection

EPSS 0.4%CVSS 9.1

Legion of the Bouncy Castle Inc.1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-14813 · Legion of the Bouncy Castle Inc. BC-JAVA

GOSTCTR implementation unable to process more than 255 blocks correctly

EPSS 0.3%CVSS 9.3

OpenText, Inc1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-15610 · OpenText, Inc RightFax

The .NET Remoting framework used by OpenText Fax (RightFax) includes known security vulnerabilities that could be exploited if the servic…

EPSS 0.3%CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-6388 · Red Hat Red Hat OpenShift GitOps

Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation

EPSS 0.4%CVSS 9.1

Cohere1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-5752 · Cohere cohere-terrarium

CVE-2026-5752

EPSS 0.2%CVSS 9.3

FFmpeg1 vulnerability on this pageMax CVSS 9.8Priority 30KEV 0

CVE-2026-40962 · FFmpeg FFmpeg

FFmpeg before 8.1 has an integer overflow and resultant out-of-bounds write via CENC (Common Encryption) subsample data to libavformat/mo…

EPSS 0.1%CVSS 9.8

Luanti1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-40959 · Luanti Luanti

Luanti 5 before 5.15.2, when LuaJIT is used, allows a Lua sandbox escape via a crafted mod.

EPSS 0.2%CVSS 9.3

Rapid71 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-6290 · Rapid7 Velociraptor

Velociraptor Query() Plugin Misapplies Permissions To Orgs

EPSS 0.2%CVSS 9.1

Simopro Technology1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2026-6348 · Simopro Technology WinMatrix

Simopro Technology｜WinMatrix - Missing Authentication

EPSS 0.2%CVSS 9.3

The archive.