Critical vulnerability archive — page 194

MetInfo CMS1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-29014 · MetInfo CMS MetInfo CMS

MetInfo CMS Unauthenticated PHP Code Injection RCE

EPSS 39%public exploit CVSS 9.8

njzjz1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-34243 · njzjz wenxian

wenxian: Command Injection in GitHub Actions Workflow via `issue_comment.body`

EPSS 2%public exploit CVSS 9.8

ggml-org1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-34159 · ggml-org llama.cpp

llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend

EPSS 2%public exploit CVSS 9.8

filebrowser2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-34528 · filebrowser filebrowser

File Browser's Signup Grants Execution Permissions When Default Permissions Includes Execution

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-34529 · filebrowser filebrowser

File Browser is vulnerable to Stored Cross-site Scripting via crafted EPUB file

EPSS 0.3%public exploit CVSS 9.0

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-30643 · mitre

An issue was discovered in DedeCMS 5.7.118 allowing attackers to execute code via crafted setup tag values in a module upload.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-31027 · mitre

TOTOlink A3600R v5.9c.4959 contains a buffer overflow vulnerability in the setAppEasyWizardConfig interface of /lib/cste_modules/app.so.

EPSS 0.6%public exploit CVSS 9.8

CVE-2024-43028 · mitre

A command injection vulnerability in the component /jmreport/show of jeecg boot v3.0.0 to v3.5.3 allows attackers to execute arbitrary co…

EPSS 2%CVSS 9.8

CVE-2024-40489 · mitre

There is an injection vulnerability in jeecg boot versions 3.0.0 to 3.5.3 due to lax character filtering, which allows attackers to execu…

EPSS 0.5%CVSS 9.8

CVE-2026-34875 · mitre

An issue was discovered in Mbed TLS through 3.6.5 and TF-PSA-Crypto 1.0.0.

EPSS 0.4%CVSS 9.8

CVE-2026-34873 · mitre

An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.

EPSS 0.3%CVSS 9.1

CVE-2026-34872 · mitre

An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0.

EPSS 0.2%CVSS 9.1

siyuan-note2 vulnerabilities on this pageMax CVSS 9.7Priority 48KEV 0

CVE-2026-34449 · siyuan-note siyuan

SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection

EPSS 0.5%public exploit CVSS 9.7

CVE-2026-34448 · siyuan-note siyuan

SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary command execution in the desktop client

EPSS 0.5%public exploit CVSS 9.1

APTRS1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-34406 · APTRS APTRS

APTRS: Privilege Escalation via Mass Assignment of is_superuser in User Edit Endpoint

EPSS 0.5%public exploit CVSS 9.4

Canonical1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-4370 · Canonical Juju

Improper TLS Client/Server authentication and certificate verification on Database Cluster

EPSS 0.4%public exploit CVSS 10.0

lodash1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-4800 · lodash lodash

lodash vulnerable to Code Injection via `_.template` imports key names

EPSS 3%CVSS 9.8

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-5256 · code-projects Simple Laundry System

code-projects Simple Laundry System Parameter modify.php sql injection

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-5257 · code-projects Simple Laundry System

code-projects Simple Laundry System Parameter delstaffinfo.php sql injection

EPSS 0.3%public exploit CVSS 9.8

ci4-cms-erp5 vulnerabilities on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-34560 · ci4-cms-erp ci4ms

CI4MS: Logs Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-34559 · ci4-cms-erp ci4ms

CI4MS: Blogs Tags Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-34564 · ci4-cms-erp ci4ms

CI4MS: Menu Management (Pages) Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-34562 · ci4-cms-erp ci4ms

CI4MS: System Settings (Company Information) Full Platform Compromise & Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.0

CVE-2026-34563 · ci4-cms-erp ci4ms

CI4MS: Backup Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM Blind XSS

EPSS 0.3%public exploit CVSS 9.1

hapifhir2 vulnerabilities on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2026-34361 · hapifhir org.hl7.fhir.core

HAPI FHIR: Unauthenticated SSRF via /loadIG Chains with startsWith() Credential Leak for Authentication Token Theft

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-34359 · hapifhir org.hl7.fhir.core

HAPI FHIR: Authentication Credential Leakage via Improper URL Prefix Matching on HTTP Redirect in HAPI FHIR Core

EPSS 0.2%public exploit CVSS 9.1

Cisco2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-20093 · Cisco Cisco Enterprise NFV Infrastructure Software

Cisco Integrated Management Controller Authentication Bypass Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-20160 · Cisco Cisco Smart Software Manager On-Prem

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

EPSS 0.9%CVSS 9.8

PX41 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-1579 · PX4 Autopilot

PX4 Autopilot Missing authentication for critical function

EPSS 1.0%CVSS 9.8

alerta1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-34400 · alerta alerta

alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API

EPSS 0.5%CVSS 9.8

fccview1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-34072 · fccview cronmaster

cronmaster: Middleware authentication bypass enabling unauthorized page access and server-action execution

EPSS 0.5%CVSS 9.8

NVIDIA2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-24164 · NVIDIA BioNeMo Framework

NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.

EPSS 0.5%CVSS 9.8

CVE-2026-24148 · NVIDIA Jetson Xavier Series and Jetson Orin Series

NVIDIA Jetson for JetPack contains a vulnerability in the system initialization logic, where an unprivileged attacker could cause the ini…

EPSS 0.4%CVSS 9.4

reviactyl1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-34456 · reviactyl panel

Reviactyl: OAuth account takeover via auto-linking

EPSS 0.5%CVSS 9.8

mikro-orm1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-34220 · mikro-orm mikro-orm

MikroORM is vulnerable to SQL Injection via specially crafted object

EPSS 0.4%CVSS 9.8

XenForo2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-71279 · XenForo XenForo

XenForo Passkey Security Bypass

EPSS 0.5%CVSS 9.8

CVE-2025-71281 · XenForo XenForo

XenForo Template Method Call Restriction Bypass

EPSS 0.3%CVSS 9.8

aio-libs1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-34520 · aio-libs aiohttp

AIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass

EPSS 0.5%CVSS 9.1

Bytedance Inc.1 vulnerability on this pageMax CVSS 9.6Priority 36KEV 0

CVE-2026-34430 · Bytedance Inc. DeerFlow

ByteDance DeerFlow LocalSandboxProvider Host Bash Escape

EPSS 0.4%CVSS 9.6

IBM1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-4101 · IBM Verify Identity Access Container

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.4%CVSS 9.8

Anritsu1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-3356 · Anritsu Remote Spectrum Monitor MS27100A

Missing Authentication for Critical Function vulnerability in Anritsu Remote Spectrum Monitor

EPSS 0.4%CVSS 9.3

Google3 vulnerabilities on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-5289 · Google Chrome

Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process…

EPSS 0.4%CVSS 9.6

CVE-2026-5288 · Google Chrome

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer…

EPSS 0.3%CVSS 9.6

CVE-2026-5290 · Google Chrome

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process…

EPSS 0.3%CVSS 9.6

pjsip1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-34235 · pjsip pjproject

PJSIP: Heap OOB read in VPX unpacketizer

EPSS 0.4%CVSS 9.1

auth01 vulnerability on this pageMax CVSS 9.8Priority 32KEV 0

CVE-2026-34236 · auth0 auth0-PHP

Auth0 PHP SDK Insufficient Entropy in Cookie Encryption

EPSS 0.2%CVSS 9.8

payloadcms1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-34751 · payloadcms payload

Payload has Unvalidated Input in Password Recovery Endpoints

EPSS 0.3%CVSS 9.1

docker1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-33990 · docker model-runner

Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)

EPSS 0.3%CVSS 9.1

RTI1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-4374 · RTI Connext Professional

Improper Restriction of XML External Entity Reference vulnerability in RTI Connext Professional (Recording Service,Routing Service,Queueing Service,Cloud Discovery Service,Observability Collector) allows Serialized Data External Linking, Data Serializat...

EPSS 0.2%CVSS 9.1

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2025-15484 · Unknown Order Notification for WooCommerce

Order Notification for WooCommerce < 3.6.3 - Unauthenticated WooCommerce REST Permission Bypass

EPSS 0.2%CVSS 9.1

The archive.