The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,974 matching vulnerabilities · Page 221 of 780

milvus-io1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-26190 · milvus-io milvus

Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

EPSS 39%public exploit CVSS 9.8

ASTPP1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2020-37153 · ASTPP ASTPP

ASTPP VoIP 4.0.1 - Remote Code Execution

EPSS 5%public exploit CVSS 9.8

jm33-m01 vulnerability on this pageMax CVSS 9.9Priority 58KEV 0

CVE-2026-26068 · jm33-m0 emp3r0r

emp3r0r Agent-Controlled Metadata to Operator RCE (tmux Command Injection)

EPSS 4%public exploit CVSS 9.9

Chevere SpA1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2020-37186 · Chevere SpA Chevereto

Chevereto 3.13.4 Core - Remote Code Execution

EPSS 1%public exploit CVSS 9.8

idno1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-26273 · idno known

Known affected by Account Takeover via Password Reset Token Leakage

EPSS 1.0%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2025-69770 · mitre

A zip slip vulnerability in the /DesignTools/SkinList.aspx endpoint of MojoPortal CMS v2.9.0.1 allows attackers to execute arbitrary comm…

EPSS 0.7%public exploit CVSS 10.0

CVE-2025-70314 · mitre

webfsd 1.21 is vulnerable to a Buffer Overflow via a crafted request.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-69633 · mitre

A SQL Injection vulnerability in the Advanced Popup Creator (advancedpopupcreator) module for PrestaShop 1.1.26 through 1.2.6 (Fixed in v…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-70981 · mitre

CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-69634 · mitre

Cross Site Request Forgery vulnerability in Dolibarr ERP & CRM v.22.0.9 allows a remote attacker to escalate privileges via the notes fie…

EPSS 0.2%CVSS 9.0

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-2521 · VulDB

Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption

EPSS 0.8%public exploit CVSS 9.8

zyddnys1 vulnerability on this pageMax CVSS 9.3Priority 51KEV 0

CVE-2026-26215 · zyddnys manga-image-translator

manga-image-translator Shared API Unsafe Deserialization RCE

EPSS 1%public exploit CVSS 9.3

AVideo1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37172 · AVideo AVideo Platform

AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)

EPSS 0.8%public exploit CVSS 9.8

inspektor-gadget1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-25996 · inspektor-gadget inspektor-gadget

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

EPSS 0.6%public exploit CVSS 9.8

JUNG1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-26366 · JUNG eNet SMART HOME server

JUNG eNet SMART HOME server 2.2.1/2.3.1 Use of Default Credentials

EPSS 0.7%public exploit CVSS 9.8

ahdinosaur1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-26021 · ahdinosaur set-in

Prototype pollution in set-in

EPSS 0.6%public exploit CVSS 9.8

ros-navigation1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-26011 · ros-navigation navigation2

Critical Heap Out-of-bounds Access in `pf_cluster_stats()` via Malicious /initialpose Covariance -- Potential Remote Code Execution

EPSS 0.6%public exploit CVSS 9.8

unclecode2 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-26216 · unclecode Crawl4AI

Crawl4AI < 0.8.0 Docker API Unauthenticated Remote Code Execution via Hooks Parameter

EPSS 6%CVSS 10.0

CVE-2026-26217 · unclecode Crawl4AI

Crawl4AI < 0.8.0 Docker API Local File Inclusion via file URL Handling

EPSS 2%CVSS 9.2

adminkov1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1306 · adminkov midi-Synth

midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload via 'export' AJAX Action

EPSS 5%CVSS 9.8

Allok Soft2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2020-37183 · Allok Soft Allok RM RMVB to AVI MPEG DVD Converter

Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 - Stack Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

CVE-2020-37184 · Allok Soft Allok Video Converter

Allok Video Converter 4.6.1217 - Stack Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

TorrentRockYou2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2020-37176 · Torrentrockyou Torrent 3GP Converter

Torrent 3GP Converter 1.51 - Stack Overflow (SEH)

EPSS 0.5%public exploit CVSS 9.8

CVE-2020-37181 · TorrentRockYou Torrent FLV Converter

Torrent FLV Converter 1.51 Build 117 - Stack Oveflow (SEH partial overwrite)

EPSS 0.5%public exploit CVSS 9.8

Calero2 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-26335 · Calero VeraSMART

Calero VeraSMART < 2022 R1 Static IIS Machine Keys Enable ViewState RCE

EPSS 3%CVSS 9.8

CVE-2026-26333 · Calero VeraSMART

Calero VeraSMART < 2022 R1 .NET Remoting Arbitrary File Read Leading to ViewState RCE

EPSS 1%CVSS 10.0

pjsip1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-25994 · pjsip pjproject

PJSIP has a heap buffer overflow in ICE with long username

EPSS 2%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14892 · Unknown Prime Listing Manager

Prime Listing Manager <= 1.1 - Unauthenticated Privilege Escalation

EPSS 0.4%public exploit CVSS 9.8

Hyland1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-26221 · Hyland OnBase Workflow Timer Service

Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE

EPSS 1%CVSS 9.8

Airleader GmbH1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-1358 · Airleader GmbH Airleader Master

Airleader Master Unrestricted Upload of File with Dangerous Type

EPSS 1%CVSS 9.8

cleantalk1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-1490 · cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk

Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation

EPSS 1%CVSS 9.8

SolaX Power1 vulnerability on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2025-15573 · SolaX Power Pocket WiFi 3.0

Missing Certificate Validation for Solax Power Pocket WiFi models MQTT Cloud Connection

EPSS 0.2%public exploit CVSS 9.4

cursor1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-26268 · cursor cursor

Cursor sandbox escape via Git hooks

EPSS 0.7%CVSS 9.9

php1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-24895 · php frankenphp

FrankenPHP affected by Path Confusion via Unicode casing in CGI path splitting allows execution of arbitrary files

EPSS 0.6%CVSS 9.8

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-1729 · scriptsbundle AdForest

AdForest <= 6.0.12 - Authentication Bypass

EPSS 0.6%CVSS 9.8

ZLAN Information Technology Co.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-24789 · ZLAN Information Technology Co. ZLAN5143D

ZLAN Information Technology ZLAN5143D Missing Authentication for Critical Function

EPSS 0.7%CVSS 9.8

goauthentik1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-25227 · goauthentik authentik

authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint

EPSS 0.9%CVSS 9.1

Xiaomi Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-26214 · Xiaomi Technology Co., Ltd. Galaxy FDS Android SDK

Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM

EPSS 0.2%public exploit CVSS 9.1

dreamstechnologies1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-8572 · dreamstechnologies Truelysell Core

Truelysell Core <= 1.8.7 - Unauthenticated Privilege Escalation via Registration

EPSS 0.5%CVSS 9.8

Linux1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-23112 · Linux Linux

nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

EPSS 0.5%CVSS 9.8

Significant-Gravitas1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-26020 · Significant-Gravitas AutoGPT

AutoGPT Affected by Remote Code Execution via Dynamic Module Import in Block Loading (import)

EPSS 0.6%CVSS 9.4

newbee-ltd2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-26218 · newbee-ltd newbee-mall

newbee-mall Default Seeded Administrator Credentials Allow Account Takeover

EPSS 0.4%CVSS 9.8

CVE-2026-26219 · newbee-ltd newbee-mall

newbee-mall Unsalted MD5 Password Hashing Enables Offline Credential Cracking

EPSS 0.2%CVSS 9.3

NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co.1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-14014 · NTN Information Processing Services Computer Software Hardware Industry and Trade Ltd. Co. Smart Panel

Insecure File Upload in NTN Informatics' Smart Panel

EPSS 0.4%CVSS 9.8

Farktor Software E-Commerce Services Inc.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-10969 · Farktor Software E-Commerce Services Inc. E-Commerce Package

SQLi in Farktor Software's E-Commerce Package

EPSS 0.4%CVSS 9.8

caido1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24853 · caido caido

Caido has an insufficient patch for DNS rebind leading to RCE

EPSS 0.3%CVSS 9.8

element-hq1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-24044 · element-hq ess-helm

ESS Community Helm Chart has a weak server key generation method

EPSS 0.3%CVSS 9.2

thecfu1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-26069 · thecfu scraparr

Scraparr Readarr Integration exposes sensitive values as metric labels.

EPSS 0.4%CVSS 9.1

Apple1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-20677 · Apple iOS and iPadOS

A race condition was addressed with improved handling of symbolic links.

EPSS 0.3%CVSS 9.0

Bosch1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2025-32058 · Bosch Infotainment system ECU

Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU

EPSS 0.2%CVSS 9.3