Critical vulnerability archive — page 235

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-20963 · Microsoft Microsoft SharePoint Enterprise Server 2016

Microsoft SharePoint Remote Code Execution Vulnerability

KEV · due 21 Mar EPSS 29%public exploit SSVC act CVSS 9.8

Fortinet3 vulnerabilities on this pageMax CVSS 9.8Priority 97KEV 1

CVE-2025-25249 · Fortinet FortiSwitchManager

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

KEV · due 12 Sep EPSS 4%public exploit SSVC act CVSS 9.8

CVE-2025-64155 · Fortinet FortiSIEM

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0,…

EPSS 44%public exploit CVSS 9.4

CVE-2025-47855 · Fortinet FortiFone

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFon…

EPSS 0.9%CVSS 9.3

Cobbr1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2020-36911 · Cobbr Covenant

Covenant 0.5 - Remote Code Execution (RCE)

EPSS 12%public exploit CVSS 9.8

Extplorer1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-54335 · Extplorer eXtplorer

eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

EPSS 14%public exploit CVSS 9.8

jokkedk1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-54339 · jokkedk Webgrind

Webgrind 1.1 - Remote Command Execution (RCE) via dataFile Parameter

EPSS 2%public exploit CVSS 9.8

Tdarr1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2022-50919 · Tdarr Tdarr

Tdarr 2.00.15 - Command Injection

EPSS 1%public exploit CVSS 9.8

ImpressCMS1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2022-50912 · ImpressCMS ImpressCMS

ImpressCMS 1.4.4 - Unrestricted File Upload

EPSS 1%public exploit CVSS 9.8

Inbit2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-54329 · Inbit Inbit Messenger

Inbit Messenger 4.9.0 - Unauthenticated Remote Command Execution (RCE)

EPSS 1%public exploit CVSS 9.8

CVE-2023-54330 · Inbit Inbit Messenger

Inbit Messenger 4.9.0 - Unauthenticated Remote SEH Overflow

EPSS 0.8%public exploit CVSS 9.8

VIAVIWEB2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2022-50893 · VIAVIWEB VIAVIWEB Wallpaper Admin

VIAVIWEB Wallpaper Admin 1.0 - Code Execution via Image Upload

EPSS 1.0%public exploit CVSS 9.8

CVE-2022-50892 · VIAVIWEB VIAVIWEB Wallpaper Admin

VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page

EPSS 0.7%public exploit CVSS 9.8

agentfront1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-22686 · agentfront enclave

Sandbox Escape via Host Error Prototype Chain in enclave-vm

EPSS 0.8%public exploit CVSS 10.0

FreeRDP2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-22853 · FreeRDP FreeRDP

FreeRDP has a heap-buffer-overflow in ndr_read_uint8Array

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-22852 · FreeRDP FreeRDP

FreeRDP has a heap-buffer-overflow in audin_process_formats

EPSS 0.4%public exploit CVSS 9.8

Beehive Forum1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2022-50910 · Beehive Forum Beehive Forum

Beehive Forum - Account Takeover

EPSS 0.7%public exploit CVSS 9.8

e1071 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2022-50905 · e107 e107 CMS

e107 CMS v3.2.1 - Reflected XSS via Comment Flow

EPSS 0.7%public exploit CVSS 9.8

Modular DS1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-23550 · Modular DS Modular DS

WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

EPSS 21%CVSS 10.0

Explorerplusplus1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-54334 · Explorerplusplus Explorer32++

Explorer32++ 1.3.5.531 - Buffer overflow

EPSS 0.6%public exploit CVSS 9.8

Bluspark Global5 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-22240 · Bluspark Global BLUVOYIX

Plaintext Passwords Vulnerability in BLUVOYIX

EPSS 3%CVSS 10.0

CVE-2026-22238 · Bluspark Global BLUVOYIX

Administrator Account Creation Vulnerability in BLUVOYIX

EPSS 0.7%CVSS 10.0

CVE-2026-22236 · Bluspark Global BLUVOYIX

Improper Authentication Vulnerability in BLUVOYIX

EPSS 0.5%CVSS 10.0

CVE-2026-22237 · Bluspark Global BLUVOYIX

Exposed Internal API Documentation Vulnerability in BLUVOYIX

EPSS 0.5%CVSS 10.0

CVE-2026-22239 · Bluspark Global BLUVOYIX

Email Sending Vulnerability in BLUVOYIX

EPSS 0.3%CVSS 10.0

mitre1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-70968 · mitre

FreeImage 3.18.0 contains a Use After Free in PluginTARGA.cpp;loadRLE().

EPSS 0.5%public exploit CVSS 9.8

Prowise1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2022-50925 · Prowise Prowise Reflect

Prowise Reflect v1.0.9 - Remote Keystroke Injection

EPSS 0.4%public exploit CVSS 9.8

Sysax1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2023-54337 · Sysax Sysax Multi Server

Sysax Multi Server 6.95 - 'Password' Denial of Service (PoC)

EPSS 0.5%public exploit CVSS 9.1

vaghasia31 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-14502 · vaghasia3 News and Blog Designer Bundle

News and Blog Designer Bundle <= 1.1 - Unauthenticated Local File Inclusion

EPSS 2%CVSS 9.8

DataDog1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-22871 · DataDog guarddog

GuardDog Path Traversal Vulnerability Leads to Arbitrary File Overwrite and RCE

EPSS 1%CVSS 9.8

Litexmedia1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-50922 · Litexmedia Audio Conversion Wizard

Audio Conversion Wizard v2.01 - Buffer Overflow

EPSS 1.0%CVSS 9.8

cursor1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-22708 · cursor cursor

Cursor has a Terminal Tool Allowlist Bypass via Environment Variables

EPSS 0.8%CVSS 9.8

Red Hat1 vulnerability on this pageMax CVSS 9.0Priority 41KEV 0

CVE-2025-12548 · Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22

Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

EPSS 1%CVSS 9.0

eigent-ai1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-22869 · eigent-ai eigent

Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow

EPSS 0.6%CVSS 9.8

Hewlett Packard Enterprise (HPE)2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-37184 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Orchestrator

Unauthenticated Bypass Allows Multi-Factor Authentication Circumvention

EPSS 0.6%CVSS 9.8

CVE-2025-37168 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Unauthenticated Arbitrary File Deletion Vulnerability in AOS-8 Operating System

EPSS 0.5%CVSS 9.1

MegaTKC1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2022-50895 · MegaTKC Aero CMS

Aero CMS 0.0.1 - SQL Injection

EPSS 0.7%CVSS 9.8

OpenC31 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-68271 · OpenC3 cosmos

Unauthenticated Remote Code Execution in openc3-api

EPSS 0.6%CVSS 10.0

woosaai1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-14301 · woosaai Integration Opvius AI for WooCommerce

Integration Opvius AI for WooCommerce <= 1.3.0 - Unauthenticated Arbitrary File Deletion/Read via Path Traversal

EPSS 0.7%CVSS 9.8

Wago1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2022-50926 · Wago WAGO 750-8212 PFC200

WAGO 750-8212 PFC200 G2 2ETH RS Privilege Escalation

EPSS 0.5%CVSS 9.8

calcom1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-23478 · calcom cal.com

Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback

EPSS 0.5%CVSS 10.0

Linux7 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-68811 · Linux Linux

svcrdma: use rc_pageoff for memcpy byte offset

EPSS 0.5%CVSS 9.8

CVE-2025-68817 · Linux Linux

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

EPSS 0.4%CVSS 9.8

CVE-2025-68809 · Linux Linux

ksmbd: vfs: fix race on m_flags in vfs_cache

EPSS 0.5%CVSS 9.1

CVE-2025-71068 · Linux Linux

svcrdma: bound check rq_pages index in inline path

EPSS 0.4%CVSS 9.8

CVE-2025-71116 · Linux Linux

libceph: make decode_pool() more resilient against corrupted osdmaps

EPSS 0.5%CVSS 9.1

CVE-2025-71093 · Linux Linux

e1000: fix OOB in e1000_tbi_should_accept()

EPSS 0.3%CVSS 9.1

CVE-2025-71095 · Linux Linux

net: stmmac: fix the crash issue for zero copy XDP_TX action

EPSS 0.3%CVSS 9.1

Telcel1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2022-50935 · Telcel FLAME II MODEM USB

FLAME II MODEM USB - Unquoted Service Path

EPSS 0.4%CVSS 9.8

Imagination Technologies1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2025-25176 · Imagination Technologies Graphics DDK

GPU DDK - GPU Register value contents leaked from secure workloads to non-secure world

EPSS 0.4%CVSS 9.1

The archive.