Critical vulnerability archive — page 202

BMC Software, Inc.1 vulnerability on this pageMax CVSS 9.1Priority 57KEV 0

CVE-2025-71257 · BMC Software, Inc. FootPrints

BMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass

EPSS 45%public exploit CVSS 9.1

openemr1 vulnerability on this pageMax CVSS 9.1Priority 54KEV 0

CVE-2026-32238 · openemr openemr

OpenEMR has Remote Code Execution in backup functionality

EPSS 2%public exploit CVSS 9.1

Xerte1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-32985 · Xerte Xerte Online Toolkits

Xerte Online Toolkits <= 3.14 Unauthenticated Template Import Arbitrary File Upload Leading to Remote Code Execution

EPSS 2%public exploit CVSS 9.8

ormar-orm1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-27953 · ormar-orm ormar

ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor

EPSS 1%public exploit CVSS 9.8

filebrowser1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-32760 · filebrowser filebrowser

File Browser Self Registration Grants Any User Admin Access When Default Permissions Include Admin

EPSS 0.7%public exploit CVSS 10.0

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-30402 · mitre

An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection function

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-30694 · mitre

An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter component

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-67113 · mitre

OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@230…

EPSS 1%CVSS 9.8

CVE-2025-67114 · mitre

Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware…

EPSS 0.5%CVSS 9.8

CVE-2024-44722 · mitre

SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.

EPSS 0.5%CVSS 9.8

CVE-2025-67112 · mitre

Use of a hard-coded AES-256-CBC key in the configuration backup/restore implementation of Small Cell Sercomm SCE4255W (FreedomFi Englewoo…

EPSS 0.4%CVSS 9.8

Ubiquiti Inc1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-22557 · Ubiquiti Inc UniFi Network Application

A malicious actor with access to the network could exploit a Path Traversal vulnerability found in the UniFi Network Application to acces…

EPSS 29%CVSS 10.0

mlflow1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2025-15031 · mlflow mlflow/mlflow

Path Traversal Vulnerability in mlflow/mlflow

EPSS 0.8%public exploit CVSS 9.1

siyuan-note3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-32751 · siyuan-note siyuan

SiYuan Vulnerable to Remote Code Execution via Stored XSS in Notebook Name - Mobile Interface

EPSS 0.8%public exploit CVSS 9.0

CVE-2026-32767 · siyuan-note siyuan

SiYuan: Authorization Bypass Allows Arbitrary SQL Execution via Search API

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-32749 · siyuan-note siyuan

SiYuan importSY/importZipMd: Path Traversal via multipart filename enables arbitrary file write

EPSS 0.5%public exploit CVSS 9.1

GNU1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-69720 · GNU ncurses

The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyze_string in progs/infocmp.c.

EPSS 0.5%public exploit CVSS 9.8

freescout-help-desk1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-32754 · freescout-help-desk freescout

FreeScout: Stored XSS via Unescaped Email Template Rendering ({!! $thread->body !!})

EPSS 0.6%public exploit CVSS 9.3

openwrt2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-30872 · openwrt openwrt

OpenWrt Project has a Stack-based Buffer Overflow vulnerability via IPv6 reverse DNS lookup

EPSS 2%CVSS 9.8

CVE-2026-30871 · openwrt openwrt

OpenWrt Project has Stack-based Buffer Overflow in DNS PTR Query

EPSS 1%CVSS 9.8

Rymera Web Co Pty Ltd.2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-27542 · Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture

WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Privilege Escalation vulnerability

EPSS 2%CVSS 9.8

CVE-2026-27540 · Rymera Web Co Pty Ltd. Woocommerce Wholesale Lead Capture

WordPress Woocommerce Wholesale Lead Capture plugin <= 2.0.3.1 - Arbitrary File Upload vulnerability

EPSS 3%CVSS 9.0

Microsoft6 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-32194 · Microsoft Microsoft Bing Images

Microsoft Bing Images Remote Code Execution Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-23658 · Microsoft Azure DevOps: msazure

Azure DevOps: msazure Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-32191 · Microsoft Microsoft Bing Images

Microsoft Bing Images Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.8

CVE-2026-26138 · Microsoft Microsoft Purview

Microsoft Purview Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 10.0

CVE-2026-32169 · Microsoft Azure Cloud Shell

Azure Cloud Shell Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 10.0

CVE-2026-26137 · Microsoft Microsoft Exchange Online

Microsoft Exchange Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 9.9

ctfer-io3 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-32771 · ctfer-io monitoring

Monitoring is vulnerable to Archive Slip due to missing checks in sanitization

EPSS 0.7%CVSS 9.8

CVE-2026-32769 · ctfer-io fullchain

Fullchain's Invalid NetworkPolicy enables a malicious actor to pivot into another namespace

EPSS 0.5%CVSS 9.8

CVE-2026-32737 · ctfer-io romeo

Romeo's invalid NetworkPolicy enables a malicious actor to pivot into another namespace

EPSS 0.4%CVSS 10.0

SuiteCRM2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-33289 · SuiteCRM SuiteCRM

SuiterCRM has LDAP Filter Injection in Authentication Module

EPSS 0.7%CVSS 9.8

CVE-2026-29103 · SuiteCRM SuiteCRM

SuiteCRM Vulnerable to Remote Code Execution via Module Loader Package Scanner Bypass

EPSS 0.5%CVSS 9.1

Themeton2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-60237 · Themeton Finag

WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

CVE-2025-60233 · Themeton Zuut

WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerability

EPSS 0.4%CVSS 9.8

wofSSL1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-3549 · wofSSL wolfSSL

ECH parsing heap buffer overflow

EPSS 0.5%CVSS 9.8

wolfSSL2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-3548 · wolfSSL wolfSSL

Buffer overflow in CRL number parsing in wolfSSL

EPSS 0.5%CVSS 9.8

CVE-2026-4395 · wolfSSL wolfssl

Heap-based buffer overflow in wc_ecc_import_x963_ex KCAPI path

EPSS 0.4%CVSS 9.8

wolfSSL Inc.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-3849 · wolfSSL Inc. wolfSSL

Buffer Overflow in HPKE via Oversized ECH Config

EPSS 0.5%CVSS 9.8

VMware1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-22732 · VMware Spring Security

Under Some Conditions Spring Security HTTP Headers Are not Written

EPSS 0.5%CVSS 9.1

Cozmoslabs1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-27413 · Cozmoslabs Profile Builder Pro

WordPress Profile Builder Pro plugin < 3.14.0 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-2369 · Red Hat Red Hat Enterprise Linux 10

Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources

EPSS 0.4%CVSS 9.1

smallstep1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-30836 · smallstep certificates

Step CA: Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)

EPSS 0.3%CVSS 10.0

ThimPress1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-27065 · ThimPress BuilderPress

WordPress BuilderPress plugin <= 2.0.1 - Local File Inclusion vulnerability

EPSS 0.3%CVSS 9.8

OPEXUS2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-32865 · OPEXUS eComplaint

OPEXUS eComplaint and eCase insecure password reset

EPSS 0.3%CVSS 9.8

CVE-2026-32867 · OPEXUS eComplaint

OPEXUS eComplaint unauthenticated file upload

EPSS 0.2%CVSS 9.8

autobrr1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-30924 · autobrr qui

qui CORS Misconfiguration: Arbitrary Origins Trusted

EPSS 0.3%CVSS 9.6

OpenClaw1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-32038 · OpenClaw OpenClaw

OpenClaw - Sandbox Network Isolation Bypass via docker.network=container Parameter

EPSS 0.3%CVSS 9.8

Syarif1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-27067 · Syarif Mobile App Editor

WordPress Mobile App Editor plugin <= 1.3.1 - Arbitrary File Upload vulnerability

EPSS 0.3%CVSS 9.1

AWS1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-4428 · AWS AWS-LC

CRL Distribution Point Scope Check Logic Error in AWS-LC

EPSS 0.3%CVSS 9.1

The archive.