Critical vulnerability archive — page 204

D-Link20 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-4197 · D-Link DNS-120

D-Link DNS-1550-04 download_mgr.cgi RSS_Item_List command injection

EPSS 19%public exploit CVSS 9.8

CVE-2026-4194 · D-Link DNS-120

D-Link DNS-1550-04 system_mgr.cgi cgi_set_wto access control

EPSS 5%public exploit CVSS 9.8

CVE-2026-4195 · D-Link DNS-120

D-Link DNS-1550-04 wizard_mgr.cgi command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4196 · D-Link DNS-120

D-Link DNS-1550-04 remote_backup.cgi cgi_set_rsync_server command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4203 · D-Link DNS-120

D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4204 · D-Link DNS-120

D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4205 · D-Link DNS-120

D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4206 · D-Link DNS-120

D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection

EPSS 5%public exploit CVSS 9.8

CVE-2026-4207 · D-Link DNS-120

D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection

EPSS 6%public exploit CVSS 9.8

CVE-2026-4209 · D-Link DNS-120

D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection

EPSS 7%public exploit CVSS 9.8

CVE-2026-4210 · D-Link DNS-120

D-Link DNS-1550-04 time_machine.cgi cgi_tm_set_share command injection

EPSS 4%public exploit CVSS 9.8

CVE-2026-4180 · D-Link DIR-816

D-Link DIR-816 goahead redirect.asp access control

EPSS 1%public exploit CVSS 9.8

CVE-2026-4181 · D-Link DIR-816

D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2026-4182 · D-Link DIR-816

D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2026-4183 · D-Link DIR-816

D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2026-4184 · D-Link DIR-816

D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2026-4211 · D-Link DNS-120

D-Link DNS-1550-04 local_backup_mgr.cgi Local_Backup_Info stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-4212 · D-Link DNS-120

D-Link DNS-1550-04 download_mgr.cgi Downloads_Schedule_Info stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-4213 · D-Link DNS-120

D-Link DNS-1550-04 gui_mgr.cgi cgi_myfavorite_verify stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-4214 · D-Link DNS-120

D-Link DNS-1550-04 app_mgr.cgi UPnP_AV_Server_Path_Setting stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

GNU1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-32746 · GNU inetutils

telnetd in GNU inetutils through 2.7 allows an out-of-bounds write in the LINEMODE SLC (Set Local Characters) suboption handler because a…

EPSS 45%public exploit CVSS 9.8

Wavlink2 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-4163 · Wavlink WL-WN579A3

Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-4164 · Wavlink WL-WN578W2

Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection

EPSS 2%CVSS 9.8

OneUptime1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-32306 · OneUptime oneuptime

OneUptime ClickHouse SQL Injection via Aggregate Query Parameters

EPSS 0.7%public exploit CVSS 10.0

locutusjs1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-32304 · locutusjs locutus

Locutus: RCE via unsanitized input in create_function()

EPSS 0.6%public exploit CVSS 9.8

nyariv1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-26954 · nyariv SandboxJS

SandboxJS has a Sandbox Escape

EPSS 0.6%public exploit CVSS 10.0

linknacional1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-3891 · linknacional Pix for WooCommerce

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

EPSS 34%CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-69809 · mitre

A write-what-where condition in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to write arbitrary values to memory, enablin…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-69902 · mitre

A command injection vulnerability in the minimal_wrapper.py component of kubectl-mcp-server v1.2.0 allows attackers to execute arbitrary…

EPSS 2%CVSS 9.8

CVE-2025-69808 · mitre

An out-of-bounds memory access (OOB) in p2r3 Bareiron commit 8e4d40 allows unauthenticated attackers to access sensitive information and…

EPSS 0.4%public exploit CVSS 9.1

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-4223 · itsourcecode Payroll Management System

itsourcecode Payroll Management System manage_employee.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Topsec1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-4170 · Topsec TopACM

Topsec TopACM HTTP Request nmc_sync.php os command injection

EPSS 3%CVSS 9.8

claude-hovercraft1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-15060 · claude-hovercraft claude-hovercraft

claude-hovercraft executeClaudeCode Command Injection Remote Code Execution Vulnerability

EPSS 2%CVSS 9.8

dagu-org1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-31886 · dagu-org dagu

Dagu has a Path Traversal via `dagRunId` in Inline DAG Execution

EPSS 0.5%public exploit CVSS 9.1

FreeRDP4 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-31883 · FreeRDP FreeRDP

FreeRDP has a `size_t` underflow in ADPCM decoder leads to heap-buffer-overflow write

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-31885 · FreeRDP FreeRDP

FreeRDP has an out-of-bounds read in ADPCM decoders due to missing predictor/step_index bounds checks

EPSS 0.3%public exploit CVSS 9.4

CVE-2026-31897 · FreeRDP FreeRDP

FreeRDP has an out-of-bounds read in `freerdp_bitmap_decompress_planar`

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-31806 · FreeRDP FreeRDP

FreeRDP has a Heap Buffer Overflow in nsc_process_message() via Unchecked SURFACE_BITS_COMMAND Bitmap Dimensions

EPSS 0.7%CVSS 9.8

centrifugal1 vulnerability on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2026-32301 · centrifugal centrifugo

Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL

EPSS 0.3%public exploit CVSS 9.3

TP-Link Systems Inc.1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-1668 · TP-Link Systems Inc. SG2008P 3.2x

Input Validation Vulnerability on Multiple Omada Switches

EPSS 1%CVSS 9.8

Mintplex-Labs1 vulnerability on this pageMax CVSS 9.7Priority 41KEV 0

CVE-2026-32626 · Mintplex-Labs anything-llm

AnythingLLM has a Streaming Phase XSS to RCE via LLM Response Injection

EPSS 0.8%CVSS 9.7

@apollo1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-32621 · @apollo federation-internals

Apollo Federation has prototype pollution via incomplete key sanitization

EPSS 0.6%CVSS 9.9

danthedeckie1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-32640 · danthedeckie simpleeval

(SimpleEval) Objects (including modules) can leak dangerous modules through to direct access inside the sandbox.

EPSS 0.6%CVSS 9.8

Samsung Mobile2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-20998 · Samsung Mobile Smart Switch

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.

EPSS 0.6%CVSS 9.8

CVE-2026-20997 · Samsung Mobile Smart Switch

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass…

EPSS 0.3%CVSS 9.8

Erlang1 vulnerability on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2026-23941 · Erlang OTP

Request smuggling via first-wins Content-Length parsing in inets httpd

EPSS 0.5%CVSS 9.4

@angular1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2026-32635 · @angular compiler

Angular has XSS in i18n attribute bindings

EPSS 0.5%CVSS 9.0

Voltronic Power1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-22192 · Voltronic Power SNMP Web Pro

Voltronic Power SNMP Web Pro 1.1 Authentication Bypass via localStorage

EPSS 0.3%CVSS 9.9

Yannick Lefebvre1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-32367 · Yannick Lefebvre Modal Dialog

WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability

EPSS 0.5%CVSS 9.1

gVectors1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-22193 · gVectors wpDiscuz

wpDiscuz before 7.6.47 - SQL Injection in getAllSubscriptions()

EPSS 0.3%CVSS 9.2

The archive.