The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

38,974 matching vulnerabilities · Page 236 of 780

danny-avila1 vulnerability on this pageMax CVSS 9.9Priority 58KEV 0

CVE-2026-22252 · danny-avila LibreChat

LibreChat MCP Stdio Remote Command Execution

EPSS 4%public exploit CVSS 9.9

Sangfor2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-15502 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System session SessionController os command injection

EPSS 6%public exploit CVSS 9.8

CVE-2025-15503 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System common.jsp unrestricted upload

EPSS 2%public exploit CVSS 9.8

mindsdb1 vulnerability on this pageMax CVSS 9.1Priority 57KEV 0

CVE-2025-68472 · mindsdb mindsdb

MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

EPSS 20%public exploit CVSS 9.1

Vivotek1 vulnerability on this pageMax CVSS 9.3Priority 57KEV 0

CVE-2026-22755 · Vivotek Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB9365, IB93587LPR, IB9371,IB9381, IB9387, IB9389, IB939,IP9165,IP9171, IP9172, IP9181, IP9191, IT9389, MA9321, MA9322, MS9321, MS9390, TB9330

Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi

EPSS 14%public exploit CVSS 9.3

Tencent1 vulnerability on this pageMax CVSS 10.0Priority 56KEV 0

CVE-2026-22688 · Tencent WeKnora

WeKnora has Command Injection in MCP stdio test

EPSS 2%public exploit CVSS 10.0

Advantech1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2025-52694 · Advantech IoTSuite and IoT Edge Products

Execution of arbitrary SQL commands

EPSS 40%CVSS 10.0

anomalyco1 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2026-22813 · anomalyco opencode

Malicious website can execute commands on the local system through XSS in the OpenCode web UI

EPSS 0.9%public exploit CVSS 9.4

emlog1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2026-22799 · emlog emlog

emlog Arbitrary File Upload Vulnerability

EPSS 0.7%public exploit CVSS 9.3

ServiceNow1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-12420 · ServiceNow Now Assist AI Agents

Unauthenticated Privilege Escalation in ServiceNow AI Platform

EPSS 53%CVSS 9.8

mitre13 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2025-67146 · mitre

Multiple SQL Injection vulnerabilities exist in AbhishekMali21 GYM-MANAGEMENT-SYSTEM 1.0 via the 'name' parameter in (1) member_search.ph…

EPSS 0.6%public exploit CVSS 9.4

CVE-2025-65552 · mitre

D3D Wi-Fi Home Security System ZX-G12 v2.1.1 is vulnerable to RF replay attacks on the 433 MHz sensor communication channel.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-67147 · mitre

Multiple SQL Injection vulnerabilities exist in amansuryawanshi Gym-Management-System-PHP 1.0 via the 'name', 'email', and 'comment' para…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-69990 · mitre

phpgurukul News Portal Project V4.1 has an Arbitrary File Deletion Vulnerability in remove_file.php.

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-51567 · mitre

A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execu…

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-29329 · mitre

Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execu…

EPSS 1.0%CVSS 9.8

CVE-2025-66802 · mitre

Sourcecodester Covid-19 Contact Tracing System 1.0 is vulnerable to RCE (Remote Code Execution).

EPSS 0.9%CVSS 9.8

CVE-2025-69992 · mitre

phpgurukul News Portal Project V4.1 has File Upload Vulnerability via upload.php, which enables the upload of files of any format to the…

EPSS 0.6%CVSS 9.8

CVE-2025-46070 · mitre

An issue in Automai BotManager v.25.2.0 allows a remote attacker to execute arbitrary code via the BotManager.exe component

EPSS 0.5%CVSS 9.8

CVE-2025-65783 · mitre

An arbitrary file upload vulnerability in the /utils/uploadFile component of Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows a…

EPSS 0.5%CVSS 9.8

CVE-2025-69991 · mitre

phpgurukul News Portal Project V4.1 is vulnerable to SQL Injection in check_availablity.php.

EPSS 0.5%CVSS 9.8

CVE-2025-46066 · mitre

An issue in Automai Director v.25.2.0 allows a remote attacker to escalate privileges

EPSS 0.3%CVSS 9.9

CVE-2025-63314 · mitre

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset…

EPSS 0.3%CVSS 10.0

quickjs-ng1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-0821 · quickjs-ng quickjs

quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow

EPSS 0.5%public exploit CVSS 9.8

RIOT2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-22214 · RIOT RIOT OS

RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in ethos Serial Frame Parser

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-22213 · RIOT RIOT OS

RIOT OS <= 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility

EPSS 0.4%public exploit CVSS 9.8

maximmasiutin1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-22781 · maximmasiutin TinyWeb

TinyWeb CGI Command Injection

EPSS 2%CVSS 10.0

appsmithorg1 vulnerability on this pageMax CVSS 9.7Priority 46KEV 0

CVE-2026-22794 · appsmithorg appsmith

Account Takeover Vulnerability in Appsmith

EPSS 0.4%public exploit CVSS 9.7

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-0851 · code-projects Online Music Site

code-projects Online Music Site AdminAddUser.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-0852 · code-projects Online Music Site

code-projects Online Music Site AdminUpdateUser.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Unknown2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-10915 · Unknown Dreamer Blog

Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-14829 · Unknown E-xact | Hosted Payment |

e-xact-hosted-payment <= 2.0 - Unauthenticated Arbitrary File Deletion

EPSS 0.3%public exploit CVSS 9.1

Zohocorp1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2025-11250 · Zohocorp ManageEngine ADSelfService Plus

Authentication Bypass

EPSS 2%CVSS 9.1

Broadcom2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-69269 · Broadcom DX NetOps Spectrum

Spectrum command injection in NCM service

EPSS 0.9%CVSS 9.8

CVE-2025-69270 · Broadcom DX NetOps Spectrum

Spectrum session token in URL

EPSS 0.3%CVSS 9.8

orval-labs1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-22785 · orval-labs orval

orval MCP client is vulnerable to a code injection attack.

EPSS 0.8%CVSS 9.8

Linux2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-68794 · Linux Linux

iomap: adjust read range correctly for non-block-aligned positions

EPSS 0.7%CVSS 9.8

CVE-2025-68775 · Linux Linux

net/handshake: duplicate handshake cancellations leak socket

EPSS 0.5%CVSS 9.8

Siemens1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-40805 · Siemens Industrial Edge Cloud Device (IECD)

Affected devices do not properly enforce user authentication on specific API endpoints.

EPSS 0.7%CVSS 10.0

DevToys-app1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-22685 · DevToys-app DevToys

DevToys Path Traversal (“Zip Slip”) Vulnerability in DevToys Extension Installation

EPSS 0.5%CVSS 9.8

Mozilla4 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-0879 · Mozilla Firefox

Sandbox escape due to incorrect boundary conditions in the Graphics component

EPSS 0.5%CVSS 9.8

CVE-2026-0884 · Mozilla Firefox

Use-after-free in the JavaScript Engine component

EPSS 0.5%CVSS 9.8

CVE-2026-0892 · Mozilla Firefox

Memory safety bugs fixed in Firefox 147 and Thunderbird 147

EPSS 0.4%CVSS 9.8

CVE-2026-0881 · Mozilla Firefox

Sandbox escape in the Messaging System component

EPSS 0.3%CVSS 10.0

SAP_SE4 vulnerabilities on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-0501 · SAP_SE SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)

SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)

EPSS 0.5%CVSS 9.9

CVE-2026-0491 · SAP_SE SAP Landscape Transformation

Code Injection vulnerability in SAP Landscape Transformation

EPSS 0.5%CVSS 9.1

CVE-2026-0498 · SAP_SE SAP S/4HANA (Private Cloud and On-Premise)

Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)

EPSS 0.5%CVSS 9.1

CVE-2026-0500 · SAP_SE SAP Wily Introscope Enterprise Manager (WorkStation)

Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)

EPSS 0.4%CVSS 9.6

dfir-iris1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-22783 · dfir-iris iris-web

Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management

EPSS 0.4%CVSS 9.6

Imaster1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-41006 · Imaster MEMS Events CRM

Multiple vulnerabilities in Imaster products Open configuration options

EPSS 0.3%CVSS 9.3