Critical vulnerability archive — page 24

0xJacky1 vulnerability on this pageMax CVSS 9.4Priority 48KEV 0

CVE-2026-107806 · 0xJacky nginx-ui

Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

EPSS 0.6%public exploit CVSS 9.4

hotspotbilling2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-108107 · hotspotbilling phpnuxbill

PHPNuxBill through 2025.3.20 Unauthenticated SQL Injection via radius.php

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-108109 · hotspotbilling phpnuxbill

PHPNuxBill through 2025.3.20 Account Takeover via Brute-Forceable Password Reset Code

EPSS 0.4%public exploit CVSS 9.3

wizarrrr1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-108264 · wizarrrr wizarr

Wizarr: Authenticated Server-Side Template Injection (SSTI) in wizard step rendering leads to Remote Code Execution (RCE)

EPSS 0.5%public exploit CVSS 9.1

expivi1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-103889 · expivi 3D Product configurator for WooCommerce

3D Product configurator for WooCommerce <= 2.16.2 - Unauthenticated Remote Code Execution via 'xpv_image' Parameter

EPSS 1%CVSS 9.8

htplugins1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-94589 · htplugins Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection)

Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) <= 3.4.5 - Unauthenticated Arbitrary File Upload via Signature Field File Upload

EPSS 0.7%CVSS 9.8

tinacms1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-108261 · tinacms tinacms

TinaCMS admin preview iframe loads an attacker-controlled origin from the URL fragment

EPSS 0.2%public exploit CVSS 9.3

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-103501 · Apache Software Foundation Apache DataSketches

Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

EPSS 0.6%CVSS 9.8

CVE-2026-103513 · Apache Software Foundation Apache DataSketches

Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch

EPSS 0.4%CVSS 9.8

CVE-2026-103635 · Apache Software Foundation Apache DataSketches

Apache DataSketches: datasketches-cpp: Out-of-bounds read in compact Theta sketch deserialization allows denial of service via a crafted sketch

EPSS 0.4%CVSS 9.1

inilerm1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-104732 · inilerm Advanced IP Blocker

Advanced IP Blocker <= 8.13.13 - Unauthenticated Authentication Bypass via Missing Step-1 Binding to 2FA Login Handler

EPSS 0.5%CVSS 9.8

themeisle1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-104801 · themeisle PPOM – Product Addons & Custom Fields for WooCommerce

PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

EPSS 0.8%CVSS 9.1

iflytek1 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-108263 · iflytek astron-agent

Astron Agent: Unsandboxed code-node leads to cross-tenant RCE

EPSS 0.4%CVSS 9.9

smp461 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-108157 · smp46 pingvin-share-x

Pingvin Share X 0.19.0 before 1.22.0 Account Takeover via OAuth Email Linking

EPSS 0.5%CVSS 9.2

whyun1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-104803 · whyun WPCOM Member

WPCOM Member <= 1.7.27 - Unauthenticated Authentication Bypass via 'uuid' and 'code' Parameters on Social-Login Callback

EPSS 0.4%CVSS 9.8

Savannah1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-15340 · Savannah lwIP SMTP client

Savannah lwIP SMTP client Classic Buffer Overflow

EPSS 0.4%CVSS 9.8

Axiomthemes2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-93927 · Axiomthemes Veto

WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93945 · Axiomthemes Balance

WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

chenhg51 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-108549 · chenhg5 cc-connect

cc-connect through 1.5.0 Missing Authentication via MAX Webhook Sender Spoofing

EPSS 0.5%CVSS 9.2

duty1g1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-107824 · duty1g x64dbg-mcp-server

x64dbg-MCP Server exposes debugger operations to unauthenticated network clients

EPSS 0.4%CVSS 9.3

themefusion1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-97670 · themefusion Avada (Fusion) Builder

Avada (Fusion) Builder <= 7.16.1 - Unauthenticated Arbitrary WordPress Action Invocation via '{action_hook}' Dynamic-Data Token in Form Field

EPSS 0.5%CVSS 9.1

CPANSec1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-107373 · CPANSec

ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument

EPSS 0.4%CVSS 9.1

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-108474 · JetBrains Exposed

In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions

EPSS 0.3%CVSS 9.8

ThemeREX Group17 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-62045 · ThemeREX Group Booklovers

WordPress Booklovers theme <= 2.13.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-62046 · ThemeREX Group Gutentype

WordPress Gutentype theme <= 2.1.12 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93929 · ThemeREX Group Travesia

WordPress Travesia theme <= 1.1.16 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93930 · ThemeREX Group Tantra

WordPress Tantra theme <= 2.9.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93931 · ThemeREX Group Smash

WordPress Smash theme <= 1.12.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93932 · ThemeREX Group Smart Casa

WordPress Smart Casa theme <= 1.0.12 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93933 · ThemeREX Group Rosalinda

WordPress Rosalinda theme <= 1.2.4 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93934 · ThemeREX Group Partiso

WordPress Partiso theme <= 1.1.13 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93935 · ThemeREX Group Let's Play

WordPress Let's Play theme <= 1.1.15 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93936 · ThemeREX Group IPharm

WordPress IPharm theme <= 1.2.4 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93937 · ThemeREX Group Hygia

WordPress Hygia theme <= 1.21.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93938 · ThemeREX Group Hogwords

WordPress Hogwords theme <= 1.2.7 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93940 · ThemeREX Group Greeny

WordPress Greeny theme <= 2.10.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93941 · ThemeREX Group Edema

WordPress Edema theme <= 1.2.2.2 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93942 · ThemeREX Group Dwell

WordPress Dwell theme <= 1.16.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93943 · ThemeREX Group Convex

WordPress Convex theme <= 1.16.0 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

CVE-2026-93944 · ThemeREX Group Camelia

WordPress Camelia theme <= 1.2.15 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

contao1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-107845 · contao contao

Contao: Cross-site scripting in the comments bundle

EPSS 0.3%CVSS 9.3

creativethemeshq1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-107645 · creativethemeshq Blocksy Companion

Blocksy Companion <= 2.1.58 - Unauthenticated Privilege Escalation to 'role' Parameter

EPSS 0.3%CVSS 9.1

Red Lion Controls3 vulnerabilities on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-33367 · Red Lion Controls 700 Series

Red Lion Controls N-Tron 700 Series Missing Authentication for Critical Function

EPSS 0.3%CVSS 9.3

CVE-2026-39460 · Red Lion Controls 700 Series

Red Lion Controls N-Tron 700 Series Insufficiently Protected Credentials

EPSS 0.3%CVSS 9.3

CVE-2026-28745 · Red Lion Controls 700 Series

Red Lion Controls N-Tron 700 Series Storing Passwords in a Recoverable Format

EPSS 0.2%CVSS 9.3

Privasys5 vulnerabilities on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-108265 · Privasys enclave-os-mini

enclave-os-mini: RA-TLS challenge certificates were not bound to the TLS session

EPSS 0.1%CVSS 9.1

CVE-2026-108266 · Privasys rustls

Privasys rustls fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

EPSS 0.1%CVSS 9.1

CVE-2026-108267 · Privasys go

Privasys Go fork: RA-TLS challenge mode did not bind attestation evidence to the TLS session

EPSS 0.1%CVSS 9.1

CVE-2026-108268 · Privasys enclave-os-virtual

enclave-os-virtual: RA-TLS challenge certificates were not bound to the TLS session

EPSS 0.1%CVSS 9.1

CVE-2026-108269 · Privasys ra-tls-clients

ra-tls-clients: RA-TLS challenge verifier accepted quotes not bound to the TLS session

EPSS 0.1%CVSS 9.1

The archive.