Critical vulnerability archive — page 192

Fortinet1 vulnerability on this pageMax CVSS 9.1Priority 97KEV 1

CVE-2026-35616 · Fortinet FortiClientEMS

Fortinet FortiClient EMS Improper Access Control Vulnerability

KEV · due 9 Apr EPSS 94%public exploit SSVC act CVSS 9.1

MervinPraison7 vulnerabilities on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2026-34938 · MervinPraison PraisonAI

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

EPSS 13%public exploit CVSS 10.0

CVE-2026-34935 · MervinPraison PraisonAI

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-34934 · MervinPraison PraisonAI

PraisonAI: Second-Order SQL Injection in `get_all_user_threads`

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-34937 · MervinPraison PraisonAI

PraisonAI: Shell Injection in run_python() via Unescaped $() Substitution

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-34955 · MervinPraison PraisonAI

PraisonAI: Sandbox Escape via shell=True and Bypassable Blocklist in SubprocessSandbox

EPSS 0.4%public exploit CVSS 10.0

CVE-2026-34952 · MervinPraison PraisonAI

PraisonAI: Missing Authentication in WebSocket Gateway

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-34953 · MervinPraison PraisonAI

PraisonAI: Authentication Bypass in OAuthManager.validate_token()

EPSS 0.4%public exploit CVSS 9.1

provectus1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-5562 · provectus kafka-ui

provectus kafka-ui Endpoint testexecutions validateAccess code injection

EPSS 3%public exploit CVSS 9.8

dgraph-io1 vulnerability on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2026-34976 · dgraph-io dgraph

Dgraph Affected by Pre-Auth Database Overwrite + SSRF + File Read via restoreTenant Missing Authorization

EPSS 2%public exploit CVSS 10.0

nico-ftp1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2018-25254 · nico-ftp NICO-FTP

NICO-FTP 3.0.1.19 Buffer Overflow SEH

EPSS 1%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-31059 · mitre

A remote command execution (RCE) vulnerability in the /goform/formDia component of UTT Aggressive HiPER 520W v3v1.7.7-180627 allows attac…

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-31151 · mitre

An issue in the login mechanism of Kaleris YMS v7.2.2.1 allows attackers to bypass login verification to access the application 's resour…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-54328 · mitre

An issue was discovered in SMS in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1…

EPSS 0.5%CVSS 10.0

CVE-2025-58349 · mitre

An issue was discovered in L2 in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 13…

EPSS 0.3%CVSS 9.1

kestra-io1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-34612 · kestra-io kestra

Kestra: Remote Code Execution via SQL Injection

EPSS 0.7%public exploit CVSS 10.0

Zeecka1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-34977 · Zeecka AperiSolve

Aperi'Solve Affected by Unauthenticated RCE via JPSeek Analyzer Command

EPSS 0.8%public exploit CVSS 9.8

nyariv1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-34208 · nyariv SandboxJS

SandboxJS: Sandbox integrity escape

EPSS 0.6%public exploit CVSS 10.0

Piwigo1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-27634 · Piwigo Piwigo

Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter

EPSS 0.7%public exploit CVSS 9.8

scoder1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-34444 · scoder lupa

Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

EPSS 0.6%public exploit CVSS 10.0

Technostrobe4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-5570 · Technostrobe HI-LED-WR120-G2

Technostrobe HI-LED-WR120-G2 LoginCB index_config improper authentication

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-5569 · Technostrobe HI-LED-WR120-G2

Technostrobe HI-LED-WR120-G2 Endpoint access control

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-5573 · Technostrobe HI-LED-WR120-G2

Technostrobe HI-LED-WR120-G2 fs unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-5574 · Technostrobe HI-LED-WR120-G2

Technostrobe HI-LED-WR120-G2 FsBrowseClean deletefile authorization

EPSS 0.6%public exploit CVSS 9.1

glpi-project2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-26263 · glpi-project glpi

GLPI has an Unauthenticated SQL Injection via Search engine

EPSS 8%CVSS 9.8

CVE-2026-26026 · glpi-project glpi

GLPI has a Server-Side Template Injection via Double-Compilation

EPSS 12%CVSS 9.1

bentoml1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-35044 · bentoml BentoML

BentoML has a Server-Side Template Injection via unsandboxed Jinja2 Environment in Dockerfile generation

EPSS 0.4%public exploit CVSS 9.6

Fosowl1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-5584 · Fosowl agenticSeek

Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

EPSS 0.4%public exploit CVSS 9.8

OFFIS1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-5663 · OFFIS DCMTK

OFFIS DCMTK storescp storescp.cc executeOnEndOfStudy os command injection

EPSS 2%CVSS 9.8

ci4-cms-erp2 vulnerabilities on this pageMax CVSS 9.4Priority 45KEV 0

CVE-2026-35035 · ci4-cms-erp ci4ms

CI4MS Company Information Public-Facing Page Full Platform Compromise & Full Account Takeover for All Roles & Privilege-Escalation via System Settings Company Information Stored DOM XSS

EPSS 0.5%public exploit CVSS 9.0

CVE-2026-34989 · ci4-cms-erp ci4ms

CI4MS affected by Profile & User Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.4

oobabooga1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-35050 · oobabooga text-generation-webui

text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".

EPSS 0.4%public exploit CVSS 9.1

Belden3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2018-25237 · Belden Hirschmann HiSecOS Classic Firewall (EAGLE, EAGLE One)

Hirschmann HiSecOS Buffer Overflow via HTTPS Login

EPSS 0.8%CVSS 9.8

CVE-2017-20234 · Belden GarrettCom Magnum 6K and 10K Managed Switches

GarrettCom Magnum 6K and 10K Authentication Bypass via Hardcoded String

EPSS 0.5%CVSS 9.8

CVE-2021-4477 · Belden Hirschmann HiLCOS OpenBAT

Hirschmann HiLCOS OpenBAT BAT450 IPv6 IPsec Firewall Bypass

EPSS 0.3%CVSS 9.3

nearform2 vulnerabilities on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-34950 · nearform fast-jwt

fast-jwt has an incomplete fix for CVE-2023-48223: JWT Algorithm Confusion via Whitespace-Prefixed RSA Public Key

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-35039 · nearform fast-jwt

fast-jwt Affected by Cache Confusion via cacheKeyBuilder Collisions Can Return Claims From a Different Token (Identity/Authorization Mixup)

EPSS 0.2%CVSS 9.1

kedro-org1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-35171 · kedro-org kedro

Arbitrary Code Execution via Malicious Logging Configuration in Kedro

EPSS 0.7%CVSS 9.8

man-group1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-35052 · man-group dtale

D-Tale affected by Remote Code Execution through redis/shelf storage

EPSS 0.6%CVSS 9.8

Ajax301 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-35047 · Ajax30 BraveCMS-2.0

Brave CMS has Unrestricted File Upload in BraveCMS via CKEditor Endpoint

EPSS 0.6%CVSS 9.8

Linux1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-31405 · Linux Linux

media: dvb-net: fix OOB access in ULE extension header tables

EPSS 0.6%CVSS 9.8

Amazon2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-35561 · Amazon Amazon Athena ODBC driver

Insufficient authentication security controls in browser-based authentication components in Amazon Athena ODBC driver

EPSS 0.5%CVSS 9.8

CVE-2026-35560 · Amazon Amazon Athena ODBC driver

Improper certificate validation in identity provider connection components in Amazon Athena ODBC driver

EPSS 0.3%CVSS 9.1

BerriAI1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-35030 · BerriAI litellm

LiteLLM has an authentication bypass via OIDC userinfo cache key collision

EPSS 0.6%CVSS 9.4

xenocrat1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-35174 · xenocrat chyrp-lite

Chyrp Lite has a Path Traversal to Remote Code Execution

EPSS 0.6%CVSS 9.1

Gardyn2 vulnerabilities on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-28766 · Gardyn Cloud API

Gardyn Cloud API Missing Authentication for Critical Function

EPSS 0.4%CVSS 9.3

CVE-2026-25197 · Gardyn Cloud API

Gardyn Cloud API Authorization Bypass Through User-Controlled Key

EPSS 0.3%CVSS 9.3

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-5526 · Tenda 4G03 Pro

Tenda 4G03 Pro httpd access control

EPSS 0.4%CVSS 9.8

electron1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-34775 · electron electron

Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes

EPSS 0.3%CVSS 9.8

usebruno1 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-34841 · usebruno bruno

Axios npm Supply Chain Incident Impacting @usebruno/cli

EPSS 0.2%CVSS 9.8

The archive.