Critical vulnerability archive — page 22

TRENDnet1 vulnerability on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-108804 · TRENDnet TEW-751DR

TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection

EPSS 2%public exploit CVSS 10.0

Edimax4 vulnerabilities on this pageMax CVSS 10.0Priority 56KEV 0

Linksys5 vulnerabilities on this pageMax CVSS 10.0Priority 56KEV 0

AnyDesk1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-109390 · AnyDesk AnyDesk

AnyDesk before 8.0.3 allows unauthenticated remote attackers to execute arbitrary code via a heap-based buffer overflow, as demonstrated…

EPSS 2%public exploit CVSS 9.8

OpenSpug1 vulnerability on this pageMax CVSS 9.9Priority 55KEV 0

CVE-2026-108540 · OpenSpug Spug

OpenSpug File Transfer transfer os command injection

EPSS 2%public exploit CVSS 9.9

Netcore1 vulnerability on this pageMax CVSS 10.0Priority 54KEV 0

CVE-2026-108907 · Netcore NR268

Netcore NR268 CGI Execution user_ok improper authentication

EPSS 1%public exploit CVSS 10.0

TOZED1 vulnerability on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-108576 · TOZED X300

TOZED X300 IPPingDiagnostics process_ping os command injection

EPSS 4%CVSS 10.0

librenms1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-109357 · librenms librenms

LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization Header

EPSS 0.6%public exploit CVSS 9.2

MervinPraison1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-57118 · MervinPraison PraisonAI

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

EPSS 0.4%public exploit CVSS 9.8

agnaistic1 vulnerability on this pageMax CVSS 9.4Priority 46KEV 0

CVE-2026-108753 · agnaistic agnai

Agnaistic agnai through 1.0.555 Hard-Coded Credentials in self-host Docker Compose

EPSS 0.4%public exploit CVSS 9.4

thirty bees1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-109394 · thirty bees thirty bees

Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout

EPSS 0.4%public exploit CVSS 9.1

Progress Software Corporation5 vulnerabilities on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-85955 · Progress Software Corporation MarkLogic Server

Improper privilege management in Progress MarkLogic Server xdmp:eval-in

EPSS 0.6%CVSS 9.9

CVE-2026-85947 · Progress Software Corporation MarkLogic Server

Improper privilege management in Progress MarkLogic Server forest operations

EPSS 0.4%CVSS 9.9

CVE-2026-85948 · Progress Software Corporation MarkLogic Server

Improper privilege management in Progress MarkLogic Server Management API

EPSS 0.4%CVSS 9.9

CVE-2026-85956 · Progress Software Corporation MarkLogic Server

Improper privilege management in Progress MarkLogic Server backup and restore operations

EPSS 0.4%CVSS 9.6

CVE-2026-9191 · Progress Software Corporation MarkLogic Server

Insufficient isolation of user-supplied code in Progress MarkLogic Server

EPSS 0.3%CVSS 9.6

Turboderp-org1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-84286 · Turboderp-org ExLlamaV3

OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table

EPSS 0.6%CVSS 9.8

NetEase1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-109422 · NetEase NetEase Cloud Music for Windows

NetEase Cloud Music RCE via os.navigateExternal IPC

EPSS 0.5%CVSS 9.2

SciSharp1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-108860 · SciSharp BotSharp

BotSharp through 5.2.0 Authentication Bypass via Hard-Coded JWT Signing Key

EPSS 0.5%CVSS 9.3

Square1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-109391 · Square Squash

Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API

EPSS 0.5%CVSS 9.2

getgrav1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-109321 · getgrav grav-plugin-login-oauth

Grav Login OAuth Plugin before 1.4.3 Predictable Local Credentials Authentication Bypass

EPSS 0.4%CVSS 9.3

HAProxy1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-109575 · HAProxy Data Plane API EE

In HAProxy Data Plane API 2.2.0 through 3.4.3 (and corresponding Enterprise Edition releases), Server.ConfigureAPI() has process-global a…

EPSS 0.4%CVSS 9.8

IBM1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-96012 · IBM Db2 Mirror for i

IBM Db2 Mirror for i Privilege Escalation

EPSS 0.3%CVSS 9.9

OTRS GmbH (former OTRS AG)2 vulnerabilities on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-93582 · OTRS GmbH (former OTRS AG) OTRS

Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication

EPSS 0.4%CVSS 9.4

CVE-2026-78357 · OTRS GmbH (former OTRS AG) OTRS

Insufficient Session Revocation for JWT Authentication

EPSS 0.3%CVSS 9.1

Unknown9 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-84734 · Unknown Mindstien Quick Login

Mindstien Quick Login <= 1.0 - Unauthenticated Administrator Account Takeover via 'mql_pass' Parameter

EPSS 0.3%CVSS 9.8

CVE-2026-84737 · Unknown Freeton WP

Freeton WP <= 1.0.0 - Unauthenticated Account Takeover via 'secod' Parameter

EPSS 0.3%CVSS 9.8

CVE-2026-85118 · Unknown AI Content Generator Marketing

AI Content Generator Marketing <= 1.0.0 - Unauthenticated Privilege Escalation via Arbitrary Option Update and Deletion

EPSS 0.3%CVSS 9.8

CVE-2026-85121 · Unknown Insurify

Insurify <= 1.0 - Unauthenticated Arbitrary Option Creation and Overwrite via saveemailtemplatedesign

EPSS 0.3%CVSS 9.1

CVE-2026-86706 · Unknown Quick quotes

Quick quotes <= 1.0.0 - Unauthenticated Integer-Value Option Update

EPSS 0.3%CVSS 9.1

CVE-2026-86717 · Unknown Insurify

Insurify <= 1.0 - Unauthenticated Arbitrary Option Deletion via removeimg_popup

EPSS 0.3%CVSS 9.1

CVE-2026-84252 · Unknown click5 CRM add-on to WPForms

click5 CRM add-on to WPForms <= 1.0.3 - Unauthenticated Arbitrary Options Update

EPSS 0.2%CVSS 9.8

CVE-2026-84253 · Unknown click5 CRM add-on to Gravity Forms

click5 CRM add-on to Gravity Forms <= 1.0.3 - Unauthenticated Arbitrary Options Update

EPSS 0.2%CVSS 9.8

CVE-2026-84254 · Unknown click5 CRM add-on to Contact Form 7

click5 CRM add-on to Contact Form 7 <= 1.0.4 - Unauthenticated Arbitrary Options Update

EPSS 0.2%CVSS 9.8

zitadel2 vulnerabilities on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-109373 · zitadel zitadel

ZITADEL 3.0.0 before 4.19.2 Account Takeover via Unsigned Login V2 Session Cookie

EPSS 0.4%CVSS 9.2

CVE-2026-109372 · zitadel zitadel

ZITADEL 3.0.0 before 4.19.2 Account Takeover via SAML Identity-Provider Confusion

EPSS 0.4%CVSS 9.3

Neo4j1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-92681 · Neo4j @neo4j/graphql

@neo4j/graphql: schema-level and type-level @authentication not enforced on top-level @cypher fields

EPSS 0.4%CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-87744 · Red Hat Red Hat build of Quarkus 3.27.6.redhat

Io.quarkus:quarkus-hibernate-orm-rest-data-panache: missing authorization in quarkus rest data panache via dropped security annotations

EPSS 0.4%CVSS 9.1

The-40-Thieves1 vulnerability on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-77366 · The-40-Thieves obsidian-tc

obsidian-tc tokens can access arbitrary configured vaults

EPSS 0.3%CVSS 9.9

unclecode1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-109238 · unclecode crawl4ai

Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder

EPSS 0.3%CVSS 9.2

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-85499 · Apache Software Foundation Apache SkyWalking BanyanDB

Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy

EPSS 0.3%CVSS 9.1

sbabic1 vulnerability on this pageMax CVSS 9.2Priority 30KEV 0

CVE-2026-109399 · sbabic swupdate

SWUpdate through 2026.05.1 CMS Signature Verification Bypass via Embedded Intermediates

EPSS 0.2%CVSS 9.2

Privasys1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-108362 · Privasys ra-tls-clients

Privasys attested TLS accepted evidence from any unrevoked TEE platform (diversion attack)

EPSS 0.2%CVSS 9.1

The archive.