Critical vulnerability archive — page 27

LMCache3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-107204 · LMCache LMCache

LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-107206 · LMCache LMCache

LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

EPSS 0.6%public exploit CVSS 9.4

CVE-2026-105192 · LMCache LMCache

LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

EPSS 1%CVSS 9.8

sipcapture2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-62252 · sipcapture homer

Homer: Hardcoded Default Admin Password 'sipcapture' With No Forced Change on First Login

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-62253 · sipcapture homer

Homer: Complete Authentication Bypass When coordinator.jwt.secret Is Empty (Default)

EPSS 0.5%public exploit CVSS 9.8

IBM3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-93674 · IBM Langflow OSS

Langflow OSS is affected by multiple vulnerabilities

EPSS 15%CVSS 9.8

CVE-2026-104334 · IBM Langflow OSS

Langflow OSS is affected by multiple vulnerabilities

EPSS 0.7%CVSS 9.8

CVE-2026-93675 · IBM Langflow OSS

Langflow OSS is affected by multiple vulnerabilities

EPSS 0.6%CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-70518 · mitre

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.

EPSS 0.6%public exploit CVSS 10.0

CVE-2025-70520 · mitre

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless u…

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-70521 · mitre

The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not handle user supplied input securely.

EPSS 0.4%CVSS 9.8

CVE-2025-70516 · mitre

The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper authentication restrictions against sessionless u…

EPSS 0.3%CVSS 9.1

Cisco16 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-76455 · Cisco Cisco NX-OS Software

Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities

EPSS 4%CVSS 9.8

CVE-2026-76485 · Cisco Cisco NX-OS Software

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-76486 · Cisco Cisco NX-OS Software

Cisco Nexus 3000 and 9000 Series Switches VXLAN OAM (NGOAM) Remote Code Execution Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-76471 · Cisco Cisco NX-OS Software

Cisco NX-OS Software NX-API Remote Code Execution Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-76501 · Cisco Cisco NX-OS Software

Cisco Nexus 9000 Series Switches SRv6 OAM (NGOAM) Remote Code Execution Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-76454 · Cisco Cisco License On-Prem

Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

EPSS 0.6%CVSS 9.1

CVE-2026-76465 · Cisco Cisco NX-OS Software

Cisco Nexus 3000 and 9000 Series Switches MPLS OAM Remote Code Execution Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-20328 · Cisco Cisco License On-Prem

Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability

EPSS 0.5%CVSS 9.1

CVE-2026-76480 · Cisco Cisco License On-Prem

Cisco License On-Prem Security Hardening Release

EPSS 0.4%CVSS 9.8

CVE-2026-76500 · Cisco Cisco Application Policy Infrastructure Controller (APIC)

Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities

EPSS 0.3%CVSS 9.8

CVE-2026-76459 · Cisco Cisco NX-OS Software

Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

EPSS 0.3%CVSS 9.8

CVE-2026-76498 · Cisco Cisco Application Policy Infrastructure Controller (APIC)

Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities

EPSS 0.3%CVSS 9.8

CVE-2026-76499 · Cisco Cisco Application Policy Infrastructure Controller (APIC)

Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities

EPSS 0.3%CVSS 9.8

CVE-2026-76482 · Cisco Cisco License On-Prem

Cisco License On-Prem Security Hardening Release

EPSS 0.2%CVSS 10.0

CVE-2026-76464 · Cisco Cisco Campus Gateway Software

Cisco Meraki Hardening Release October 2026 - Buffer Management Vulnerabilities

EPSS 0.2%CVSS 9.6

CVE-2026-76483 · Cisco Cisco License On-Prem

Cisco License On-Prem Security Hardening Release

EPSS 0.2%CVSS 9.1

Veeam1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2025-64393 · Veeam Backup and Replication

This vulnerability in Veeam Backup & Replication allows a Backup Viewer to execute arbitrary code as SYSTEM on the backup server.

EPSS 5%CVSS 9.4

MervinPraison1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-62176 · MervinPraison PraisonAI

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

EPSS 0.5%public exploit CVSS 9.1

SonicWall1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-102255 · SonicWall SMA1000

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path.

EPSS 1.0%CVSS 10.0

ordasoft.com1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-102782 · ordasoft.com OrdaSoft Simple Membership extension for Joomla

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Simple Membership < 7.4.0

EPSS 0.9%CVSS 9.3

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-92414 · Apache Software Foundation Apache Jackrabbit

Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens

EPSS 0.7%CVSS 9.3

CVE-2026-97720 · Apache Software Foundation Apache Impala

Apache Impala: Impala Executor Webserver Auth Bypass

EPSS 0.3%CVSS 9.1

jonssonyan1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-107202 · jonssonyan h-ui

CVE-2026-107202

EPSS 0.8%CVSS 9.1

ASUSTOR Inc.1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-105324 · ASUSTOR Inc. ADM

An HTTP header injection vulnerability was found in the ADM

EPSS 0.7%CVSS 9.2

Flexera1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-19572 · Flexera FlexNet Publisher

FlexNet Publisher lmadmin SOAP Authentication Bypass Vulnerability

EPSS 0.4%CVSS 9.3

ggml-org1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-107183 · ggml-org llama.cpp

llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser

EPSS 0.4%CVSS 9.2

Manacle Technologies3 vulnerabilities on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-107104 · Manacle Technologies Multi-tenant ERP System

Unsafe Deserialization Vulnerability in Manacle Technologies ERP System

EPSS 0.4%CVSS 9.3

CVE-2026-107103 · Manacle Technologies Multi-tenant ERP System

SQL Injection Vulnerability in Manacle Technologies ERP System

EPSS 0.3%CVSS 9.3

CVE-2026-107102 · Manacle Technologies Multi-tenant ERP System

Account Takeover Vulnerability in Manacle Technologies ERP System

EPSS 0.3%CVSS 9.3

Six Apart Ltd.1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-96408 · Six Apart Ltd. Movable Type Cloud Edition

A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an ar…

EPSS 0.4%CVSS 9.4

Sungrow1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-107194 · Sungrow iSolarCloud

Sungrow iSolarCloud before 2026-08-25 allows authentication bypass and account takeover via "login_type":"5" in a login request, potentia…

EPSS 0.4%CVSS 9.2

VMware1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-59346 · VMware VMware Workstation

VMware Workstation and Fusion VMXNET3 integer-overflow vulnerability

EPSS 0.4%CVSS 9.3

ASUS2 vulnerabilities on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-14911 · ASUS Router

Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a remote attacker to r…

EPSS 0.3%CVSS 9.3

CVE-2026-19386 · ASUS Router

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted conf…

EPSS 0.2%CVSS 9.3

wolfSSL Inc.2 vulnerabilities on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-81535 · wolfSSL Inc. wolfSSH

wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

EPSS 0.3%CVSS 9.1

CVE-2026-16516 · wolfSSL Inc. wolfSSH

wolfSSH ECDSA host key curve not validated against negotiated algorithm

EPSS 0.2%CVSS 9.0

Passionate Programmer Peter1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-95605 · Passionate Programmer Peter WP Data Access

WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-103416 · Eclipse Foundation Eclipse ThreadX - NetX Duo

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake messa…

EPSS 0.2%CVSS 9.3

The archive.