Critical vulnerability archive — page 208

FlowiseAI2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-30821 · FlowiseAI Flowise

Flowise: Arbitrary File Upload via MIME Spoofing

EPSS 17%public exploit CVSS 9.8

CVE-2026-30824 · FlowiseAI Flowise

Flowise: Missing Authentication on NVIDIA NIM Endpoints

EPSS 37%public exploit CVSS 9.8

nuclio1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-29042 · nuclio nuclio

Nuclio Shell Runtime Command Injection Leading to Privilege Escalation

EPSS 3%public exploit CVSS 9.8

Tencent2 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-30861 · Tencent WeKnora

WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

EPSS 2%public exploit CVSS 10.0

CVE-2026-30860 · Tencent WeKnora

WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

EPSS 0.7%public exploit CVSS 10.0

Totolink1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-3696 · Totolink N300RH

Totolink N300RH CGI cstecgi.cgi setWiFiWpsConfig os command injection

EPSS 2%public exploit CVSS 9.8

middleapi1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-28794 · middleapi orpc

oRPC: Prototype Pollution in `@orpc/client` via `StandardRPCJsonSerializer` Deserialization

EPSS 1%public exploit CVSS 9.8

Wavlink1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-3703 · Wavlink NU516U1

Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write

EPSS 0.9%public exploit CVSS 9.8

WWBN1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-29058 · WWBN AVideo-Encoder

AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php

EPSS 9%CVSS 9.8

zhongyu091 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-28795 · zhongyu09 openchatbi

OpenChatBI: Critical Path Traversal Vulnerability in save_report Tool of OpenChatBI

EPSS 0.5%public exploit CVSS 9.8

Anhui Seeker Electronic Technology Co., LTD.2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-25070 · Anhui Seeker Electronic Technology Co., LTD. XikeStor SKS8310-8X

XikeStor SKS8310-8X PingTestSet Command Injection

EPSS 3%CVSS 9.8

CVE-2026-25072 · Anhui Seeker Electronic Technology Co., LTD. XikeStor SKS8310-8X

XikeStor SKS8310-8X Predictable Session Identifiers

EPSS 0.6%CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-3708 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3723 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System Admindelete.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3744 · code-projects Student Web Portal

code-projects Student Web Portal signup.php valreg_passwdation sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3705 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System Adminsearch.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3709 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System register.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3735 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System SearchResultOneway.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3736 · code-projects Simple Flight Ticket Booking System

code-projects Simple Flight Ticket Booking System SearchResultRoundtrip.php sql injection

EPSS 0.4%public exploit CVSS 9.8

dgtlmoon1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-29065 · dgtlmoon changedetection.io

changedetection.io: Zip Slip vulnerability in the backup restore functionality

EPSS 0.6%public exploit CVSS 9.1

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-3746 · SourceCodester Simple Responsive Tourism Website

SourceCodester Simple Responsive Tourism Website Login Login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-2446 · Unknown PowerPack for LearnDash

Powerpack for LearnDash < 1.3.0 - Unauthenticated Arbitrary Option Update

EPSS 0.4%public exploit CVSS 9.8

vitodeploy1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-29789 · vitodeploy vito

Vito: Cross-project privilege escalation in workflow site-creation actions allows unauthorized server modification

EPSS 0.4%public exploit CVSS 10.0

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-3730 · itsourcecode Free Hotel Reservation System

itsourcecode Free Hotel Reservation System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3740 · itsourcecode University Management System

itsourcecode University Management System admin_search_student.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3747 · itsourcecode University Management System

itsourcecode University Management System add_result.php sql injection

EPSS 0.4%public exploit CVSS 9.8

projectworlds3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-3757 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop pass sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3758 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop adminHome.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-3759 · projectworlds Online Art Gallery Shop

projectworlds Online Art Gallery Shop adminHome.php sql injection

EPSS 0.4%public exploit CVSS 9.8

charmbracelet1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-30832 · charmbracelet soft-serve

Soft Serve: SSRF via unvalidated LFS endpoint in repo import

EPSS 0.4%public exploit CVSS 9.1

immutable-js1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-29063 · immutable-js immutable-js

Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable

EPSS 1.0%CVSS 9.8

OneUptime1 vulnerability on this pageMax CVSS 9.0Priority 42KEV 0

CVE-2026-28787 · OneUptime oneuptime

OneUptime has WebAuthn 2FA bypass: server accepts client-supplied challenge instead of server-stored value, allowing credential replay

EPSS 0.3%public exploit CVSS 9.0

SICK AG2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-2331 · SICK AG SICK Lector85x

CVE-2026-2331

EPSS 1.0%CVSS 9.8

CVE-2026-2330 · SICK AG SICK Lector85x

CVE-2026-2330

EPSS 0.7%CVSS 9.4

backstage1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-29186 · backstage backstage

@backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution

EPSS 0.9%CVSS 9.8

Mobiliti1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-26051 · Mobiliti e-mobi.hu

Mobiliti e-mobi.hu Missing Authentication for Critical Function

EPSS 0.9%CVSS 9.8

Everon1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-26288 · Everon api.everon.io

Everon api.everon.io Missing Authentication for Critical Function

EPSS 0.7%CVSS 9.8

authlib1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-28802 · authlib authlib

Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification

EPSS 0.5%CVSS 9.8

parse-community1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-30863 · parse-community parse-server

Parse Server: JWT audience validation bypass in Google, Apple, and Facebook authentication adapters

EPSS 0.6%CVSS 9.8

RocketChat2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-28514 · RocketChat Rocket.Chat

Rocket.Chat: Users can login with any password via the EE ddp-streamer-service

EPSS 0.6%CVSS 9.8

CVE-2026-30831 · RocketChat Rocket.Chat

Rocket.Chat: 2FA bypass and login of deactivated users via EE ddp-streamer

EPSS 0.4%CVSS 9.8

siyuan-note1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-29183 · siyuan-note siyuan

SiYuan: Unauthenticated reflected SVG XSS in `/api/icon/getDynamicIcon` (`type=8`) enables arbitrary JavaScript execution

EPSS 0.7%CVSS 9.3

TIMLEGGE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-30909 · TIMLEGGE Crypt::NaCl::Sodium

Crypt::NaCl::Sodium versions through 2.002 for Perl has potential integer overflows

EPSS 0.6%CVSS 9.8

mesa1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-29075 · mesa mesa

Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner

EPSS 0.4%CVSS 9.8

zitadel2 vulnerabilities on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-29191 · zitadel zitadel

ZITADEL: 1-Click Account Takeover via XSS in /saml-post Endpoint

EPSS 0.5%CVSS 9.3

CVE-2026-29067 · zitadel zitadel

ZITADEL: Account Takeover Due to Improper Instance Validation in V2 Login

EPSS 0.4%CVSS 9.3

cocoindex-io1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-28438 · cocoindex-io cocoindex

CocoIndex Doris target connector didn't verify table name when constructing ALTER TABLE statements

EPSS 0.3%CVSS 9.8

Wekan3 vulnerabilities on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-30844 · Wekan Wekan

Wekan Vulnerable to SSRF through Lack of Validation or Filtering in Attachment URL Loading

EPSS 0.3%CVSS 9.3

CVE-2026-30847 · Wekan Wekan

Wekan Credential Leak via notificationUsers Publication Exposes Password Hashes and Session Tokens

EPSS 0.3%CVSS 9.3

CVE-2026-30843 · Wekan Wekan

Wekan has Cross-Board IDOR in Custom Fields Update Endpoints

EPSS 0.2%CVSS 9.3

The archive.