Critical vulnerability archive — page 203

craftcms1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-32267 · craftcms cms

Craft CMS Vulnerable to Privilege Escalation/Bypass through UsersController->actionImpersonateWithToken()

EPSS 10%public exploit CVSS 9.8

LB-LINK2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-4228 · LB-LINK BL-WR9000

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

EPSS 13%public exploit CVSS 9.8

CVE-2026-4226 · LB-LINK BL-WR9000

LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow

EPSS 0.7%public exploit CVSS 9.8

wazuh2 vulnerabilities on this pageMax CVSS 9.1Priority 56KEV 0

CVE-2026-25769 · wazuh wazuh

Wazuh Cluster vulnerable to Remote Code Execution via Insecure Deserialization

EPSS 9%public exploit CVSS 9.1

CVE-2026-25770 · wazuh wazuh

Wazuh has Privilege Escalation to Root via Cluster Protocol File Write

EPSS 1%public exploit CVSS 9.1

Tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-4252 · Tenda AC8

Tenda AC8 IPv6 check_is_ipv6 ip address for authentication

EPSS 1%public exploit CVSS 9.8

CVE-2026-4254 · Tenda AC8

Tenda AC8 HTTP Endpoint SysToolChangePwd doSystemCmd stack-based overflow

EPSS 0.9%public exploit CVSS 9.8

Beijing Academy of Artificial Intelligence (BAAI)1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-25873 · Beijing Academy of Artificial Intelligence (BAAI) OmniGen2-RL

OmniGen2-RL Reward Server Unsafe Deserialization RCE

EPSS 1%public exploit CVSS 9.8

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-30703 · mitre

A command injection vulnerability exists in the web management interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02).

EPSS 1%public exploit CVSS 9.8

CVE-2026-29859 · mitre

An arbitrary file upload vulnerability in aaPanel v7.57.0 allows attackers to execute arbitrary code via uploading a crafted file.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-30702 · mitre

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) implements a broken authentication mechanism in its web management interface.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-30701 · mitre

The web interface of the WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) contains hardcoded credential disclosure mechanisms (in t…

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-67830 · mitre

Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.

EPSS 0.3%CVSS 9.8

CVE-2025-67829 · mitre

Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.

EPSS 0.3%CVSS 9.8

CVE-2026-30704 · mitre

The WiFi Extender WDR201A (HW V2.1, FW LFMZX28040922V1.02) exposes an unprotected UART interface through accessible hardware pads on the PCB

EPSS 0.3%CVSS 9.1

apostrophecms1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-32731 · apostrophecms import-export

ApostropheCMS has Arbitrary File Write (Zip Slip / Path Traversal) in Import-Export Gzip Extraction

EPSS 0.5%public exploit CVSS 10.0

authlib2 vulnerabilities on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-27962 · authlib authlib

Authlib JWS JWK Header Injection: Signature Verification Bypass

EPSS 0.6%public exploit CVSS 9.1

CVE-2026-28498 · authlib authlib

Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

EPSS 0.2%public exploit CVSS 9.1

JetKVM1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-32295 · JetKVM JetKVM

JetKVM insufficient login rate limiting

EPSS 0.5%public exploit CVSS 9.3

nicolargo2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-32633 · nicolargo glances

Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-32611 · nicolargo glances

Glances has a SQL Injection in DuckDB Export via Unparameterized DDL Statements

EPSS 0.3%public exploit CVSS 9.1

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-4319 · code-projects Simple Food Order System

code-projects Simple Food Order System add-item.php sql injection

EPSS 0.3%public exploit CVSS 9.8

onnx1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-28500 · onnx onnx

ONNX Untrusted Model Repository Warnings Suppressed by silent=True in onnx.hub.load() — Silent Supply-Chain Attack

EPSS 0.3%public exploit CVSS 9.1

LibreChat1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2026-33265 · LibreChat LibreChat

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

EPSS 0.2%public exploit CVSS 9.0

mdjnelson1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-30884 · mdjnelson moodle-mod_customcert

mdjnelson/moodle-mod_customcert Vulnerable to Authorization Bypass Through User-Controlled Key

EPSS 0.2%public exploit CVSS 9.6

pyca1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-27459 · pyca pyopenssl

pyOpenSSL DTLS cookie callback buffer overflow

EPSS 0.7%CVSS 9.8

samtools3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-31972 · samtools samtools

samtools mpileup has use-after-free leading to an invalid read

EPSS 0.5%CVSS 9.8

CVE-2026-31966 · samtools htslib

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

EPSS 0.5%CVSS 9.1

CVE-2026-31967 · samtools htslib

HTSlib CRAM reader has out-of-bounds read due to improper validation of input

EPSS 0.5%CVSS 9.1

ANGEET2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-32298 · ANGEET ES3 KVM

Angeet ES3 KVM OS command injection

EPSS 0.7%CVSS 9.1

CVE-2026-32297 · ANGEET ES3 KVM

Angeet ES3 KVM unauthenticated arbitrary file write

EPSS 0.6%CVSS 9.3

DrangSoft1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-4312 · DrangSoft GCB/FCB Audit Software

DrangSoft｜GCB/FCB Audit Software - Missing Authentication

EPSS 0.5%CVSS 9.8

EDIMAX Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-32841 · EDIMAX Technology Co., Ltd. Edimax GS-5008PL

Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients

EPSS 0.6%CVSS 9.2

Oracle Corporation1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-21994 · Oracle Corporation Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit

Vulnerability in the Oracle Edge Cloud Infrastructure Designer and Visualisation Toolkit product of Oracle Open Source Projects (componen…

EPSS 0.5%CVSS 9.8

GL-iNet1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-32292 · GL-iNet Comet KVM

GL-iNet Comet (GL-RM1) KVM insufficient login rate-limiting

EPSS 0.6%CVSS 9.3

Raytha1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-69246 · Raytha Raytha

Lack of bruteforce protection in Raytha CMS

EPSS 0.4%CVSS 9.8

chamilo1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-28430 · chamilo chamilo-lms

Chamilo LMS Vulnerable to Unauthenticated SQL Injection in chamiko-lms model.ajax.php

EPSS 0.3%CVSS 9.8

shinetheme1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-25449 · shinetheme Traveler

WordPress Traveler theme < 3.2.8.1 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

TODDR1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-4177 · TODDR YAML::Syck

YAML::Syck versions through 1.36 for Perl has several potential security vulnerabilities including a high-severity heap buffer overflow in the YAML emitter

EPSS 0.5%CVSS 9.1

HCL2 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-62319 · HCL Unica

Boolean-Based SQL Injection in Multiple Unica Components

EPSS 0.3%CVSS 9.8

CVE-2025-52648 · HCL AION

HCL AION is affected by a vulnerability where offering images are not digitally signed.

EPSS 0.1%CVSS 9.8

TIBCO1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-3207 · TIBCO TIBCO BPM Enterprise

TIBCO BPM Enterprise Remote Code Execution (RCE) Vulnerability

EPSS 0.3%CVSS 9.8

ConnectWise1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-3564 · ConnectWise ScreenConnect

ScreenConnect Instance Level Cryptographic Material Exposure

EPSS 0.4%CVSS 9.0

OpenClaw1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-22171 · OpenClaw OpenClaw

OpenClaw < 2026.2.19 - Path Traversal in Feishu Media Temporary File Naming

EPSS 0.4%CVSS 9.1

parallax1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-31938 · parallax jsPDF

jsPDF has HTML Injection in New Window paths

EPSS 0.3%CVSS 9.6

pluginsGLPI1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-23489 · pluginsGLPI fields

Fields GLPI plugin vulnerable to RCE in dropdown generation

EPSS 0.3%CVSS 9.1

io.spinnaker.clouddriver1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-25534 · io.spinnaker.clouddriver clouddriver-artifacts

Spinnaker clouddriver and orca URL validation bypass via underscores in hostnames

EPSS 0.3%CVSS 9.1

opf2 vulnerabilities on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-32698 · opf openproject

OpenProject has a SQL Injection via Custom Field Name that can be chained to Remote Code Execution

EPSS 0.3%CVSS 9.1

CVE-2026-32703 · opf openproject

OpenProject's repository files are served with the MIME type allowing them to be used to bypass Content Security Policy

EPSS 0.2%CVSS 9.1

IBM1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-3856 · IBM Db2 Recovery Expert

IBM Db2 Recovery Expert Missing Integrity Check

EPSS 0.2%CVSS 9.1

The archive.