Critical vulnerability archive — page 223

Great Developers2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-2184 · Great Developers Certificate Generation System

Great Developers Certificate Generation System csv.php os command injection

EPSS 11%public exploit CVSS 9.8

CVE-2026-2183 · Great Developers Certificate Generation System

Great Developers Certificate Generation System csv.php unrestricted upload

EPSS 0.2%CVSS 9.8

yuan19941 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-2113 · yuan1994 tpadmin

yuan1994 tpadmin WebUploader preview.php deserialization

EPSS 2%public exploit CVSS 9.8

detronetdip2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-2165 · detronetdip E-commerce

detronetdip E-commerce Account Creation Endpoint add_seller.php missing authentication

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-2164 · detronetdip E-commerce

detronetdip E-commerce addadhar.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

code-projects18 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-2174 · code-projects Contact Management System

code-projects Contact Management System CRUD Endpoint improper authentication

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-2133 · code-projects Online Music Site

code-projects Online Music Site AdminUpdateCategory.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-2166 · code-projects Online Reviewer System

code-projects Online Reviewer System Login index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-2171 · code-projects Online Student Management System

code-projects Online Student Management System Login accounts.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2172 · code-projects Online Application System for Admission

code-projects Online Application System for Admission Login Endpoint index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2196 · code-projects Online Reviewer System

code-projects Online Reviewer System exam-update.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2198 · code-projects Online Reviewer System

code-projects Online Reviewer System loaddata.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2083 · code-projects Social Networking Site

code-projects Social Networking Site delete_post.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2132 · code-projects Online Music Site

code-projects Online Music Site AdminUpdateCategory.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2195 · code-projects Online Reviewer System

code-projects Online Reviewer System questions-view.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2197 · code-projects Online Reviewer System

code-projects Online Reviewer System exam-delete.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2199 · code-projects Online Reviewer System

code-projects Online Reviewer System user-delete.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2211 · code-projects Online Music Site

code-projects Online Music Site AdminDeleteCategory.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2212 · code-projects Online Music Site

code-projects Online Music Site AdminEditCategory.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2220 · code-projects Online Reviewer System

code-projects Online Reviewer System btn_functions.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2221 · code-projects Online Reviewer System

code-projects Online Reviewer System Login index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2158 · code-projects Student Web Portal

code-projects Student Web Portal check_user.php sql injection

EPSS 0.4%CVSS 9.8

CVE-2026-2173 · code-projects Online Examination System

code-projects Online Examination System login.php sql injection

EPSS 0.4%CVSS 9.8

macrozheng1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2026-25858 · macrozheng mall

macrozheng mall <= 1.0.3 Unauthenticated Password Reset via OTP Disclosure

EPSS 0.7%public exploit CVSS 9.3

itsourcecode9 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-2116 · itsourcecode Society Management System

itsourcecode Society Management System edit_expenses.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2161 · itsourcecode Directory Management System

itsourcecode Directory Management System forget-password.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2189 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2190 · itsourcecode School Management System

itsourcecode School Management System controller.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2073 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2115 · itsourcecode Society Management System

itsourcecode Society Management System delete_expenses.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2117 · itsourcecode Society Management System

itsourcecode Society Management System edit_activity.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2217 · itsourcecode Event Management System

itsourcecode Event Management System manage_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-2114 · itsourcecode Society Management System

itsourcecode Society Management System edit_admin.php sql injection

EPSS 0.4%CVSS 9.8

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-2088 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System accepted-appointment.php sql injection

EPSS 0.4%public exploit CVSS 9.8

BurtTheCoder1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2130 · BurtTheCoder mcp-maigret

BurtTheCoder mcp-maigret search_username index.ts command injection

EPSS 2%CVSS 9.8

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2136 · projectworlds Online Food Ordering System

projectworlds Online Food Ordering System view-ticket.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-1615 · Red Hat Red Hat Ansible Automation Platform 2.5

Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path…

EPSS 1%CVSS 9.8

WAGO2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-22903 · WAGO 0852-1322

Stack Overflow via SESSIONID Cookie in lighttpd

EPSS 0.8%CVSS 9.8

CVE-2026-22904 · WAGO 0852-1322

Stack Overflow via Oversized Cookie Fields in lighttpd

EPSS 0.6%CVSS 9.8

GitLab1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-1868 · GitLab GitLab AI Gateway

Improper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway

EPSS 0.7%CVSS 9.9

WeKan1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-25560 · WeKan WeKan

WeKan < 8.19 LDAP Authentication Filter Injection

EPSS 0.7%CVSS 9.8

HGiga1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-2234 · HGiga C&Cm@il package olln-base

HGiga｜C&Cm@il - Missing Authentication

EPSS 0.5%CVSS 9.3

jayarsiech1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-15027 · jayarsiech JAY Login & Register

JAY Login & Register <= 2.6.03 - Unauthenticated Privilege Escalation via jay_login_register_ajax_create_final_user

EPSS 0.5%CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-2087 · SourceCodester Online Class Record System

SourceCodester Online Class Record System login.php sql injection

EPSS 0.4%CVSS 9.8

CVE-2026-2089 · SourceCodester Online Class Record System

SourceCodester Online Class Record System controller.php sql injection

EPSS 0.4%CVSS 9.8

CVE-2026-2090 · SourceCodester Online Class Record System

SourceCodester Online Class Record System search.php sql injection

EPSS 0.4%CVSS 9.8

Yokogawa Electric Corporation3 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-66602 · Yokogawa Electric Corporation FAST/TOOLS

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

EPSS 0.4%CVSS 9.8

CVE-2025-66603 · Yokogawa Electric Corporation FAST/TOOLS

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

EPSS 0.3%CVSS 9.8

CVE-2025-66606 · Yokogawa Electric Corporation FAST/TOOLS

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

EPSS 0.3%CVSS 9.6

Xiaopi1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-2122 · Xiaopi Panel

Xiaopi Panel WAF Firewall demo.php sql injection

EPSS 0.3%CVSS 9.8

The archive.