Critical vulnerability archive — page 232

Oracle Corporation2 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-21962 · Oracle Corporation Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability

KEV · due 27 Aug EPSS 73%public exploit SSVC act CVSS 10.0

CVE-2026-21969 · Oracle Corporation Oracle Agile Product Lifecycle Management for Process

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal).

EPSS 0.5%CVSS 9.8

GNU1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-24061 · GNU Inetutils

GNU InetUtils Argument Injection Vulnerability

KEV · due 16 Feb EPSS 99%public exploit SSVC act CVSS 9.8

Cisco1 vulnerability on this pageMax CVSS 9.8Priority 98KEV 1

CVE-2026-20045 · Cisco Cisco Unified Communications Manager

Cisco Unified Communications Products Remote Code Execution Vulnerability

KEV · due 11 Feb EPSS 5%public exploit SSVC act CVSS 9.8

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-56005 · Red Hat Fence Agents Remediation Operator

An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` para…

EPSS 19%public exploit CVSS 9.8

embeDD GmbH1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2021-47854 · embeDD GmbH DD-WRT

DD-WRT 45723 - UPNP Buffer Overflow

EPSS 1%public exploit CVSS 9.8

Hasura1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2021-47748 · Hasura GraphQL

Hasura GraphQL 1.3.3 - Remote Code Execution

EPSS 1%public exploit CVSS 9.8

Yodinfo1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2021-47851 · Yodinfo Mini Mouse

Mini Mouse 9.2.0 - Remote Code Execution

EPSS 1%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-1202 · VulDB

CRMEB LoginController.php appleLogin improper authentication

EPSS 0.9%public exploit CVSS 9.8

birkir1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-1173 · birkir prime

birkir prime GraphQL Array Based Query Batch graphql denial of service

EPSS 0.8%public exploit CVSS 9.8

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-69762 · mitre

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the list parameter, which can cause memory corruption and en…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-69763 · mitre

Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formSetIptv via the vlanId parameter, which can cause memory corruption and…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-69766 · mitre

Tenda AX3 firmware v16.03.12.11 contains a stack-based buffer overflow in the formGetIptv function due to improper handling of the cityta…

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-64087 · mitre

A Server-Side Template Injection (SSTI) vulnerability in the FreeMarker component of opensagres XDocReport v1.0.0 to v2.1.0 allows attack…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-65482 · mitre

An XML External Entity (XXE) vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploa…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-55423 · mitre

A command injection vulnerability exists in the upnp_relay() function in multiple ipTIME router models because the controlURL value used…

EPSS 4%CVSS 9.8

nanbingxyz2 vulnerabilities on this pageMax CVSS 9.7Priority 51KEV 0

CVE-2026-22792 · nanbingxyz 5ire

5ire vulnerable to Remote Code Execution (RCE)

EPSS 0.9%public exploit CVSS 9.7

CVE-2026-22793 · nanbingxyz 5ire

5ire vulnerable to Remote Code Execution (RCE) via ECharts

EPSS 0.7%public exploit CVSS 9.7

Zoom Communications Inc.1 vulnerability on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-22844 · Zoom Communications Inc. Zoom Node

Zoom Node Deployments - Command Injection

EPSS 13%CVSS 9.9

Google3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-0907 · Google Chrome

Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafte…

EPSS 9%CVSS 9.8

CVE-2026-0906 · Google Chrome

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox…

EPSS 0.4%CVSS 9.8

CVE-2026-0905 · Google Chrome

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to p…

EPSS 0.3%CVSS 9.8

GeoGebra1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-47875 · GeoGebra CAS Calculator

GeoGebra CAS Calculator 6.0.631.0 - Denial of Service

EPSS 0.4%public exploit CVSS 9.8

Yonyou3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-1177 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-1178 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter select.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-1179 · Yonyou KSOA

Yonyou KSOA HTTP GET Parameter user_popedom.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-1176 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Cloudflare1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2026-0933 · Cloudflare Wrangler

OS Command Injection in `wrangler pages deploy`

EPSS 2%CVSS 9.9

Quenary1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-23846 · Quenary tugtainer

Tugtainer vulnerable to Password Exposure via URL Query Parameter

EPSS 0.5%public exploit CVSS 9.1

hwk-fr1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-14533 · hwk-fr Advanced Custom Fields: Extended

Advanced Custom Fields: Extended <= 0.9.2.1 - Unauthenticated Privilege Escalation via Insert User Form Action

EPSS 1%CVSS 9.8

nodejs2 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2025-55130 · nodejs node

A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and `--allow-fs-write` restrictions using crafted rela…

EPSS 2%CVSS 9.1

CVE-2026-21636 · nodejs node

A flaw in Node.js's permission model allows Unix Domain Socket (UDS) connections to bypass network restrictions when `--permission` is en…

EPSS 0.9%CVSS 10.0

laravel1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-23524 · laravel reverb

Laravel Redis Horizontal Scaling Insecure Deserialization

EPSS 1.0%CVSS 9.8

vllm-project1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-22807 · vllm-project vllm

vLLM affected by RCE via auto_map dynamic module loading during model initialization

EPSS 1.0%CVSS 9.8

orval-labs1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-23947 · orval-labs orval

Orval MCP client is vulnerable to code injection via unsanitized x-enum-descriptions in enum generation

EPSS 0.8%CVSS 9.8

franklioxygen1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-23837 · franklioxygen MyTube

MyTube has an Authorization Bypass vulnerability

EPSS 0.7%CVSS 9.8

ImageMagick2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-23876 · ImageMagick ImageMagick

Heap buffer overflow with attacker-controlled data in XBM parser

EPSS 0.7%CVSS 9.8

CVE-2026-22770 · ImageMagick ImageMagick

ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails

EPSS 0.4%CVSS 9.8

siyuan-note1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2026-23852 · siyuan-note siyuan

SiYuan vulnerable to Stored XSS / RCE via `setBlockAttrs` icon attribute

EPSS 0.8%CVSS 9.6

MedDream1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2025-53912 · MedDream MedDream PACS Premium

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.

EPSS 0.6%CVSS 9.6

AlchemyCMS1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-23885 · AlchemyCMS alchemy_cms

AlchemyCMS has Authenticated Remote Code Execution (RCE) via eval injection in ResourcesHelper

EPSS 0.5%CVSS 9.9

BROWAN COMMUNICATIONS1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-1221 · BROWAN COMMUNICATIONS PrismX MX100 AP controller

BROWAN COMMUNICATIONS ｜PrismX MX100 AP controller - Use of Hard-coded Credentials

EPSS 0.5%CVSS 9.8

getarcaneapp1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-23944 · getarcaneapp arcane

Arcane allows unauthenticated proxy access to remote environments

EPSS 0.5%CVSS 9.8

kodezen1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-15521 · kodezen Academy LMS – WordPress LMS Plugin for Complete eLearning Solution

Academy LMS – WordPress LMS Plugin for Complete eLearning Solution <= 3.5.0 - Unauthenticated Privilege Escalation via Account Takeover

EPSS 0.4%CVSS 9.8

backstage1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-24046 · backstage backstage

Backstage has a Possible Symlink Path Traversal in Scaffolder Actions

EPSS 0.5%CVSS 9.1

lxsmnsyc1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-23736 · lxsmnsyc seroval

seroval Affected by Prototype Pollution via JSON Deserialization

EPSS 0.3%CVSS 9.8

fleetdm1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-23518 · fleetdm fleet

Fleet has a JWT signature bypass vulnerability in Azure AD MDM enrollment

EPSS 0.3%CVSS 9.8

leepeuker1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-23841 · leepeuker movary

Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param

EPSS 0.3%CVSS 9.3

IBM1 vulnerability on this pageMax CVSS 9.8Priority 31KEV 0

CVE-2025-36418 · IBM ApplinX

Multiple vulnerabilities found in IBM ApplinX.

EPSS 0.2%CVSS 9.8

external-secrets1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-22822 · external-secrets external-secrets

External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function

EPSS 0.2%CVSS 9.3

The archive.