Critical vulnerability archive — page 229

JFROG1 vulnerability on this pageMax CVSS 9.9Priority 59KEV 0

CVE-2026-1470 · JFROG

Authenticated users can bypass the Expression sandbox mechanism to achieve full remote code execution on n8n’s main node.

EPSS 20%public exploit CVSS 9.9

OpenSSL1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-15467 · OpenSSL OpenSSL

Stack buffer overflow in CMS (Auth)EnvelopedData parsing

EPSS 75%public exploit CVSS 9.8

Gila CMS1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2021-47900 · Gila CMS Gila CMS

Gila CMS < 2.0.0 - Remote Code Execution

EPSS 0.7%public exploit CVSS 9.8

VestaCP1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-36948 · VestaCP VestaCP

VestaCP 0.9.8-26 - 'LoginAs' Insufficient Session Validation

EPSS 0.6%public exploit CVSS 9.8

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-1443 · code-projects Online Music Site

code-projects Online Music Site AdminDeleteUser.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-1422 · code-projects Online Examination System

code-projects Online Examination System Login Page index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-1423 · code-projects Online Examination System

code-projects Online Examination System admin_pic.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

guelfoweb1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-36941 · guelfoweb knock

Knockpy 4.1.1 - CSV Injection

EPSS 0.6%public exploit CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-69565 · mitre

code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-69559 · mitre

code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.

EPSS 0.6%CVSS 9.8

CVE-2025-69562 · mitre

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter.

EPSS 0.5%CVSS 9.8

CVE-2025-69563 · mitre

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter.

EPSS 0.5%CVSS 9.8

CVE-2025-69564 · mitre

code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserNam…

EPSS 0.5%CVSS 9.8

zhblue1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-24479 · zhblue hustoj

HUSTOJ has Arbitrary File Write (Zip Slip) in Problem Import Modules that leads to RCE

EPSS 8%CVSS 9.8

maurosoria1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-47901 · maurosoria dirsearch

dirsearch 0.4.1 - CSV Injection

EPSS 0.5%public exploit CVSS 9.8

azerothcore1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-24793 · azerothcore azerothcore-wotlk

A heap-based buffer over-read or buffer overflow vulnerability in azerothcore/azerothcore-wotlk

EPSS 0.3%public exploit CVSS 10.0

neutrinolabs1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-68670 · neutrinolabs xrdp

xrdp improperly checks bounds of domain string length, which leads to Stack-based Buffer Overflow

EPSS 1%CVSS 9.8

patriksimek1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-22709 · patriksimek vm2

vm2 has a Sandbox Escape

EPSS 1%CVSS 10.0

Tucows1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2020-36940 · Tucows Easy CD & DVD Cover Creator

Easy CD & DVD Cover Creator 4.13 - Denial of Service

EPSS 0.3%public exploit CVSS 9.8

dormakaba5 vulnerabilities on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2025-59090 · dormakaba Kaba exos 9300

Unauthenticated SOAP API in dormakaba Kaba exos 9300

EPSS 1%CVSS 9.3

CVE-2025-59091 · dormakaba Kaba exos 9300

Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300

EPSS 0.9%CVSS 9.3

CVE-2025-59097 · dormakaba Access Manager 92xx-k5

Unauthenticated SOAP API in dormakaba access manager

EPSS 0.7%CVSS 9.3

CVE-2025-59108 · dormakaba Access Manager 92xx-k5

Weak Default Passwords in dormakaba access manager

EPSS 0.4%CVSS 9.2

CVE-2025-59103 · dormakaba Access Manager 92xx-k5

Weak Default Passwords for SSH Access in dormakaba access manager

EPSS 0.4%CVSS 9.2

Phala-Network1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-22696 · Phala-Network dcap-qvl

dcap-qvl has Missing Verification for QE Identity

EPSS 0.2%public exploit CVSS 9.3

Delta Electronics1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-1361 · Delta Electronics ASDA-Soft

ASDA-Soft Stack-based Buffer Overflow Vulnerability

EPSS 0.6%CVSS 9.8

Shenzhen Tenda Technology Co., Ltd.2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-24436 · Shenzhen Tenda Technology Co., Ltd. W30E V2

Tenda W30E V2 Lacks Rate Limiting on Authentication

EPSS 0.5%CVSS 9.8

CVE-2026-24429 · Shenzhen Tenda Technology Co., Ltd. W30E V2

Tenda W30E V2 Hardcoded Default Password for Built-in Account

EPSS 0.4%CVSS 9.8

assertj1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-24400 · assertj assertj

AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

EPSS 0.6%CVSS 9.1

datavane2 vulnerabilities on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-24815 · datavane tis

A XStream Security Vulnerability in XML Deserialization in datavane/tis

EPSS 0.4%CVSS 10.0

CVE-2026-24816 · datavane tis

Cookie Security Vulnerabilities in datavane/tis

EPSS 0.3%CVSS 10.0

FASTSHIFT1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-24823 · FASTSHIFT X-TRACK

A heap-based buffer over-read or buffer overflow vulnerability in FASTSHIFT/X-TRACK

EPSS 0.4%CVSS 10.0

ttttupup1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2026-24822 · ttttupup wxhelper

a heap-based buffer overflow vulnerability in ttttupup/wxhelper via src/mongoose.

EPSS 0.4%CVSS 10.0

cadaver1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-24826 · cadaver turso3d

Out-of-bounds write in turso3d

EPSS 0.3%CVSS 10.0

ixray-team1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24832 · ixray-team ixray-1.6-stcop

Out-of-bounds write in ixray-1.6-stcop

EPSS 0.3%CVSS 9.8

pilgrimage2331 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-24871 · pilgrimage233 Minecraft-Rcon-Manage

Code injection in Minecraft-Rcon-Manage

EPSS 0.3%CVSS 10.0

ProjectSkyfire1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24872 · ProjectSkyfire SkyFire_548

Pointer arithmetic error in SkyFire_548

EPSS 0.3%CVSS 9.8

Ralim1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24830 · Ralim IronOS

Integer Overflow or Wraparound in IronOS

EPSS 0.3%CVSS 9.8

rethinkdb1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-24810 · rethinkdb rethinkdb

A buffer overflow in rethinkdb/rethinkdb

EPSS 0.3%CVSS 10.0

root-project2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-24811 · root-project root

An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c

EPSS 0.4%CVSS 9.8

CVE-2026-24812 · root-project root

An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c

EPSS 0.3%CVSS 9.3

swoole1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-24814 · swoole swoole-src

A integer overflow in swoole/swoole-src

EPSS 0.3%CVSS 10.0

tildearrow1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-24800 · tildearrow furnace

A heap-based buffer over-read or buffer overflow in tildearrow/furnace

EPSS 0.3%CVSS 10.0

turanszkij1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-24821 · turanszkij WickedEngine

A heap-based buffer over-read that might affect a system that compiles untrusted Lua code in turanszkij/WickedEngine.

EPSS 0.4%CVSS 9.3

GaijinEntertainment1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-24798 · GaijinEntertainment DagorEngine

An Uninitialized stack variable vulnerability in GaijinEntertainment/DagorEngine

EPSS 0.3%CVSS 9.3

CardboardPowered1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-24794 · CardboardPowered cardboard

Chunk Unloading Security Vulnerability in CardboardPowered/cardboard

EPSS 0.3%CVSS 9.2

coolsnowwolf2 vulnerabilities on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-24803 · coolsnowwolf lede

A possible infinite loop vulnerability in coolsnowwolf/lede

EPSS 0.3%CVSS 9.2

CVE-2026-24804 · coolsnowwolf lede

A infinite loop vulnerability in coolsnowwolf/lede

EPSS 0.3%CVSS 9.2

themrdemonized1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-24874 · themrdemonized xray-monolith

Type confusion in xray-monolith

EPSS 0.3%CVSS 9.1

EZCast1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-24346 · EZCast EZCast Pro II

Use of well-known default credentials in EZCast Pro II Dongle

EPSS 0.3%CVSS 9.1

The archive.