Critical vulnerability archive — page 237

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-0732 · D-Link DI-8200G

D-Link DI-8200G upgrade_filter.asp command injection

EPSS 12%public exploit CVSS 9.8

Sangfor3 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-15499 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System VersionController.java uploadCN os command injection

EPSS 6%public exploit CVSS 9.8

CVE-2025-15500 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System HTTP POST Request getHis os command injection

EPSS 6%public exploit CVSS 9.8

CVE-2025-15501 · Sangfor Operation and Maintenance Management System

Sangfor Operation and Maintenance Management System getCmd WriterHandle.getCmd os command injection

EPSS 7%public exploit CVSS 9.8

IceWhaleTech1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2026-21891 · IceWhaleTech ZimaOS

ZimaOS has Authentication Bypass via System-Level Username

EPSS 2%public exploit CVSS 9.8

Alibaba1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2025-70974 · Alibaba Fastjson

Fastjson before 1.2.48 mishandles autoType because, when an @type key is in a JSON document, and the value of that key is the name of a J…

EPSS 0.7%public exploit CVSS 10.0

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-67325 · mitre

Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to ach…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-69542 · mitre

A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07.

EPSS 10%CVSS 9.8

CVE-2025-70161 · mitre

EDIMAX BR-6208AC V2_1.02 is vulnerable to Command Injection.

EPSS 27%CVSS 9.8

CVE-2025-68715 · mitre

An issue was discovered in Panda Wireless PWRU0 devices with firmware 2.2.9 that exposes multiple HTTP endpoints (/goform/setWan, /goform…

EPSS 0.7%CVSS 9.1

CVE-2025-68717 · mitre

KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 allow authentication bypass during session validation.

EPSS 0.6%CVSS 9.4

BeeS Software Solutions1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-14598 · BeeS Software Solutions BET ePortal

CVE-2025-14598

EPSS 0.7%public exploit CVSS 9.8

jvoisin1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-22034 · jvoisin snuffleupagus

Snuffleupagus vulnerable to RCE on instances with upload validation enabled but without the VLD package

EPSS 0.7%public exploit CVSS 9.8

ACCESSALLY, INC.1 vulnerability on this pageMax CVSS 9.3Priority 49KEV 0

CVE-2020-36875 · ACCESSALLY, INC. AccessAlly

AccessAlly < 3.3.2 Unauthenticated Arbitrary PHP Code Execution

EPSS 0.8%public exploit CVSS 9.3

n8n-io1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-21877 · n8n-io n8n

n8n is vulnerable to Remote Code Execution via Arbitrary File Write

EPSS 5%CVSS 10.0

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-0700 · code-projects Intern Membership Management System

code-projects Intern Membership Management System check_admin.php sql injection

EPSS 0.4%public exploit CVSS 9.8

coreruleset1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2026-21876 · coreruleset coreruleset

OWASP CRS has multipart bypass using multiple content-type parts

EPSS 17%CVSS 9.3

RainyGao1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-15493 · RainyGao DocSys

RainyGao DocSys ReposAuthMapper.xml sql injection

EPSS 0.4%public exploit CVSS 9.8

remix-run1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-61686 · remix-run react-router

React Router has Path Traversal in File Session Storage

EPSS 17%CVSS 9.1

rustfs1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-22043 · rustfs rustfs

RustFS has IAM deny_only Short-Circuit that Allows Privilege Escalation via Service Account Minting

EPSS 0.4%public exploit CVSS 9.8

Trend Micro, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-69258 · Trend Micro, Inc. Trend Micro Apex Central

A LoadLibraryEX vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to load an attacker-controlled D…

EPSS 4%CVSS 9.8

guchengwuyue1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-15496 · guchengwuyue yshopmall

guchengwuyue yshopmall jobs getPage sql injection

EPSS 0.4%public exploit CVSS 9.8

kanboard1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-21881 · kanboard kanboard

Kanboard is Vulnerable to Reverse Proxy Authentication Bypass

EPSS 0.5%public exploit CVSS 9.1

Tencent1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-22687 · Tencent WeKnora

WeKnora vulnerable to SQL Injection

EPSS 0.4%public exploit CVSS 9.8

RUCKUS Networks2 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2025-69425 · RUCKUS Networks vRIoT IoT Controller

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded Tokens RCE

EPSS 0.9%CVSS 10.0

CVE-2025-69426 · RUCKUS Networks vRIoT IOT Controller

Ruckus vRIoT IoT Controller < 3.0.0.0 Hardcoded SSH Credentials RCE

EPSS 0.4%CVSS 10.0

Veeam4 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-55125 · Veeam Backup And Recovery

This vulnerability allows a Backup or Tape Operator to perform remote code execution (RCE) as root by creating a malicious backup config…

EPSS 1.0%CVSS 9.8

CVE-2025-59470 · Veeam Backup and Recovery

This vulnerability allows a Backup Operator to perform remote code execution (RCE) as the postgres user by sending a malicious interval o…

EPSS 2%CVSS 9.0

CVE-2025-59468 · Veeam Backup and Recovery

This vulnerability allows a Backup Administrator to perform remote code execution (RCE) as the postgres user by sending a malicious pass…

EPSS 1%CVSS 9.1

CVE-2025-59469 · Veeam Backup and Recovery

This vulnerability allows a Backup or Tape Operator to write files as root.

EPSS 0.7%CVSS 9.0

fedora1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-69194 · fedora

Wget2: arbitrary file write via metalink path traversal in gnu wget2

EPSS 0.8%CVSS 9.8

Zenitel2 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-64093 · Zenitel ICX500

Unauthenticated Remote Code Execution via the device hostname

EPSS 0.8%CVSS 10.0

CVE-2025-64090 · Zenitel TCIS-3+

Authenticated Remote Code Execution in device hostname

EPSS 0.4%CVSS 10.0

GitLab1 vulnerability on this pageMax CVSS 9.6Priority 40KEV 0

CVE-2025-13761 · GitLab GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

EPSS 0.7%CVSS 9.6

shabti2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-14736 · shabti Frontend Admin by DynamiApps

Frontend Admin by DynamiApps <= 3.28.29 - Unauthenticated Privilege Escalation to Administrator via Role Form Field

EPSS 0.7%CVSS 9.8

CVE-2025-14741 · shabti Frontend Admin by DynamiApps

Frontend Admin by DynamiApps <= 3.28.25 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via 'delete post' Form Element

EPSS 0.4%CVSS 9.1

RiceTheme2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-23504 · RiceTheme Felan Framework

WordPress Felan Framework plugin <= 1.1.3 - Account Takeover vulnerability

EPSS 0.5%CVSS 9.8

CVE-2025-23993 · RiceTheme Felan Framework

WordPress Felan Framework plugin <= 1.1.3 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

SUSE1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-62877 · SUSE harvester

Harvest may expose OS default ssh login password via SUSE Virtualization Interactive Installer

EPSS 0.5%CVSS 9.8

KAON1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-7072 · KAON CG3000T

Hardcoded credentials in KAON CG3000T/CG3000CT routers

EPSS 0.6%CVSS 9.3

OPEXUS1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-22234 · OPEXUS eCase Portal

OPEXUS eCasePortal unauthenticated IDOR

EPSS 0.4%CVSS 9.8

Salesforce1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-22584 · Salesforce Uni2TS

Improper Control of Generation of Code ('Code Injection') vulnerability in Salesforce Uni2TS on MacOS, Windows, Linux allows Leverage Exe…

EPSS 0.4%CVSS 9.8

Tribulant Software1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-67911 · Tribulant Software Newsletters

WordPress Newsletters plugin <= 4.11 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

Vivotek1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-66050 · Vivotek IP7137

No password set for administrative account in Vivotek IP7137 cameras

EPSS 0.4%CVSS 9.8

zozothemes1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2025-67924 · zozothemes Corpkit

WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.9

Samsung Mobile1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-20973 · Samsung Mobile Samsung Mobile Devices

Out-of-bounds read in libimagecodec.quram.so prior to SMR Jan-2026 Release 1 allows remote attacker to access out-of-bounds memory.

EPSS 0.5%CVSS 9.1

xwiki-contrib1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2025-65091 · xwiki-contrib macro-fullcalendar

XWiki Full Calendar Macro vulnerable to SQL injection through Calendar.JSONService

EPSS 0.3%CVSS 10.0

contentstudio1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2025-67910 · contentstudio Contentstudio

WordPress Contentstudio plugin <= 1.3.7 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.1

themesuite1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2025-67928 · themesuite Automotive Listings

WordPress Automotive Listings plugin <= 18.6 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

opf1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-22600 · opf openproject

OpenProject is Vulnerable to Arbitrary File Read via ImageMagick SVG Coder

EPSS 0.3%CVSS 9.1

The archive.