The archive.

CVE-2026-30877 · baserproject basercms

baserCMS: OS Command Injection in the baserCMS Update Functionality

EPSS 2%CVSS 9.1

CVE-2026-27697 · baserproject basercms

baserCMS: SQL injection vulnerability in blog post

EPSS 0.4%CVSS 9.8

mlflow1 vulnerability on this pageMax CVSS 9.6Priority 53KEV 0

CVE-2026-0596 · mlflow mlflow/mlflow

Command Injection in mlflow/mlflow

EPSS 1%public exploit CVSS 9.6

nektos1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-34041 · nektos act

act: Unrestricted set-env and add-path command processing enables environment injection

EPSS 0.6%public exploit CVSS 9.8

supsysticcom1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-4257 · supsysticcom Contact Form by Supsystic

Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

EPSS 41%CVSS 9.8

Tautulli2 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-28505 · Tautulli Tautulli

Tautulli: RCE via eval() sandbox bypass using lambda nested scope to escape co_names whitelist check

EPSS 0.5%public exploit CVSS 10.0

CVE-2026-32275 · Tautulli Tautulli

Tautulli: Unsanitized JSONP callback parameter allows cross-origin script injection and API key theft

EPSS 0.4%CVSS 9.1

WPEverest1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-3300 · WPEverest Everest Forms Pro

Everest Forms Pro <= 1.9.12 - Unauthenticated Remote Code Execution via Calculation Field

EPSS 39%CVSS 9.8

scitokens1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-32714 · scitokens scitokens

SciTokens vulnerable to SQL Injection in KeyCache

EPSS 0.5%public exploit CVSS 9.8

CrewAI3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-2275 · CrewAI CrewAI

CVE-2026-2275

EPSS 0.5%public exploit CVSS 9.6

CVE-2026-2287 · CrewAI CrewAI

CVE-2026-2287

EPSS 0.8%CVSS 9.8

CVE-2026-2286 · CrewAI CrewAI

CVE-2026-2286

labring1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-34162 · labring FastGPT

FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft

EPSS 0.4%public exploit CVSS 10.0

OpenClaw3 vulnerabilities on this pageMax CVSS 9.9Priority 46KEV 0

CVE-2026-32917 · OpenClaw OpenClaw

OpenClaw < 2026.3.13 - Remote Command Injection via Unsanitized iMessage Attachment Paths in SCP

CVE-2026-33579 · OpenClaw OpenClaw

OpenClaw < 2026.3.28 - Privilege Escalation via Missing Caller Scope Validation in Device Pair Approval

EPSS 0.8%CVSS 9.9

CVE-2026-32916 · OpenClaw OpenClaw

OpenClaw 2026.3.7 < 2026.3.11 - Authorization Bypass in Plugin Subagent Routes via Synthetic Admin Scopes

mitre11 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-30311 · mitre

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mec…

CVE-2026-30312 · mitre

DSAI-Cline's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mech…

CVE-2026-30282 · mitre

An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical inter…

EPSS 0.4%public exploit CVSS 9.0

CVE-2026-30314 · mitre

Ridvay Code's command auto-approval module contains a critical OS command injection vulnerability that renders its whitelist security mec…

EPSS 1%CVSS 9.8

CVE-2026-30276 · mitre

An arbitrary file overwrite vulnerability in DeftPDF Document Translator v54.0 allows attackers to overwrite critical internal files via…

CVE-2026-30281 · mitre

An arbitrary file overwrite vulnerability in MaruNuri LLC v2.0.23 allows attackers to overwrite critical internal files via the file impo…

CVE-2026-30285 · mitre

An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files…

EPSS 0.6%CVSS 9.8

CVE-2026-30286 · mitre

An arbitrary file overwrite vulnerability in Funambol, Inc.

CVE-2026-30278 · mitre

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files…

EPSS 0.6%CVSS 9.8

CVE-2026-30283 · mitre

An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.

CVE-2026-30310 · mitre

In its design for automatic terminal command execution, Sixth offers two options: Execute safe commands and Execute all commands.

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-5121 · Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing

EPSS 1%CVSS 9.8

ci4-cms-erp2 vulnerabilities on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-34557 · ci4-cms-erp ci4ms

CI4MS: Permissions Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-34558 · ci4-cms-erp ci4ms

CI4MS: Methods Management Full Account Takeover for All-Roles & Privilege-Escalation via Stored DOM XSS

EPSS 0.3%public exploit CVSS 9.1

Kyverno1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-4789 · Kyverno Kyverno

CVE-2026-4789

ZcashFoundation1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-34202 · ZcashFoundation zebra

Zebra node crash — V5 transaction hash panic (P2P reachable)

EPSS 0.8%CVSS 9.2

Shopify1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-34060 · Shopify ruby-lsp

Ruby LSP has arbitrary code execution through branch setting