Critical vulnerability archive — page 3

Adobe9 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-104353 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

EPSS 1%CVSS 9.9

CVE-2026-104351 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)

EPSS 0.6%CVSS 9.9

CVE-2026-105781 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

EPSS 0.5%CVSS 10.0

CVE-2026-104350 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)

EPSS 0.6%CVSS 9.3

CVE-2026-105489 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

EPSS 0.5%CVSS 9.9

CVE-2026-105780 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)

EPSS 0.5%CVSS 9.9

CVE-2026-48360 · Adobe Adobe Connect Desktop App

Adobe Connect | Improper Control of Generation of Code ('Code Injection') (CWE-94)

EPSS 0.4%CVSS 9.6

CVE-2026-104354 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

EPSS 0.5%CVSS 9.1

CVE-2026-105779 · Adobe Adobe Campaign Classic

Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

EPSS 0.3%CVSS 9.1

FasterXML1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-110879 · FasterXML jackson-databind

jackson-databind: PolymorphicTypeValidator bypass via generic type arguments and array element types allows arbitrary class instantiation (incomplete fix for CVE-2026-54512)

EPSS 1%CVSS 9.8

Hitachi5 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-82119 · Hitachi HiRDB Server Version 10

OS Command Injection Vulnerability in HiRDB

EPSS 1%CVSS 9.8

CVE-2026-82117 · Hitachi HiRDB Server Version 10

Authentication Bypass by Spoofing Vulnerability in HiRDB

EPSS 0.6%CVSS 9.8

CVE-2026-82116 · Hitachi HiRDB Server Version 10

Missing Authentication for Critical Function Vulnerability in HiRDB

EPSS 0.6%CVSS 9.8

CVE-2026-82118 · Hitachi HiRDB Server Version 10

Stack-based Buffer Overflow Vulnerability in HiRDB

EPSS 0.5%CVSS 9.8

CVE-2026-82120 · Hitachi HiRDB Server Version 10

Heap-based Buffer Overflow Vulnerability in HiRDB

EPSS 0.4%CVSS 9.8

Sunhillo Corporation1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-112352 · Sunhillo Corporation SureLine

Sunhillo SureLine Authentication Bypass via Session Cookie

EPSS 1%CVSS 9.1

mlflow1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-116692 · mlflow mlflow

MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modules

EPSS 0.7%CVSS 9.8

redaxo1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-117532 · redaxo core

REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin

EPSS 0.7%CVSS 9.8

buqiyuan1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-117564 · buqiyuan nest-admin

nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret

EPSS 0.6%CVSS 9.8

NVIDIA1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-65145 · NVIDIA NeMo Agent Toolkit

NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue.

EPSS 0.5%CVSS 10.0

The EPICS Community1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-114595 · The EPICS Community EPICS Base

Integer overflow or wraparound in EPICS Base

EPSS 0.5%CVSS 9.8

JeromeDevome1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-58256 · JeromeDevome GRR

GRR vulnerable to Remote Code Execution Via PHP Code Injection

EPSS 0.6%CVSS 9.1

WatchGuard7 vulnerabilities on this pageMax CVSS 9.5Priority 36KEV 0

CVE-2026-103594 · WatchGuard Fireware OS

Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution

EPSS 0.4%CVSS 9.5

CVE-2026-93857 · WatchGuard Fireware OS

Fireware OS Pre-Authentication Stack Buffer Overflow in SIP Proxy Allows Remote Code Execution

EPSS 0.5%CVSS 9.2

CVE-2026-93865 · WatchGuard Fireware OS

Fireware OS Missing Authentication in FireCluster Sync Daemon Allows Remote Root Action Injection

EPSS 0.5%CVSS 9.2

CVE-2026-112709 · WatchGuard Fireware OS

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

EPSS 0.4%CVSS 9.2

CVE-2026-112710 · WatchGuard Fireware OS

Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution

EPSS 0.4%CVSS 9.2

CVE-2026-93866 · WatchGuard Fireware OS

Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write

EPSS 0.4%CVSS 9.2

CVE-2026-103593 · WatchGuard Fireware OS

Fireware OS Stack Buffer Overflow in Logging Service Allows Remote Code Execution

EPSS 0.1%CVSS 9.1

Google12 vulnerabilities on this pageMax CVSS 9.6Priority 34KEV 0

CVE-2026-118305 · Google Chrome

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code out…

EPSS 0.3%CVSS 9.6

CVE-2026-118306 · Google Chrome

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code o…

EPSS 0.3%CVSS 9.6

CVE-2026-118321 · Google Chrome

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute…

EPSS 0.3%CVSS 9.6

CVE-2026-118340 · Google Chrome

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside…

EPSS 0.3%CVSS 9.6

CVE-2026-118308 · Google Chrome

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the…

EPSS 0.3%CVSS 9.6

CVE-2026-118309 · Google Chrome

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute ar…

EPSS 0.3%CVSS 9.6

CVE-2026-118310 · Google Chrome

Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute…

EPSS 0.3%CVSS 9.6

CVE-2026-118312 · Google Chrome

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outsid…

EPSS 0.3%CVSS 9.6

CVE-2026-118316 · Google Chrome

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code o…

EPSS 0.3%CVSS 9.6

CVE-2026-118332 · Google Chrome

Improper input validation in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitra…

EPSS 0.3%CVSS 9.6

CVE-2026-118342 · Google Chrome

Out of bounds write in Editing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code ou…

EPSS 0.3%CVSS 9.6

CVE-2026-118355 · Google Chrome

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.3%CVSS 9.6

Veeam2 vulnerabilities on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-108142 · Veeam Backup and Replication

A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.

EPSS 0.4%CVSS 9.1

CVE-2026-106076 · Veeam Backup for Microsoft 365

A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Ba…

EPSS 0.4%CVSS 9.0

@fastify/express1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-112362 · @fastify/express @fastify/express

@fastify/express vulnerable to path-scoped middleware bypass via absolute-form request targets

EPSS 0.4%CVSS 9.1

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-115216 · Eclipse Foundation Eclipse ioFog

Eclipse ioFog Operator disables TLS certificate verification when sending Controller and OIDC credentials

EPSS 0.2%CVSS 9.1

spesmilo2 vulnerabilities on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-117603 · spesmilo electrum

Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass

EPSS 0.2%CVSS 9.3

CVE-2026-117601 · spesmilo electrum

Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions

EPSS 0.2%CVSS 9.3

Tribulant Software1 vulnerability on this pageMax CVSS 9.6Priority 30KEV 0

CVE-2026-116863 · Tribulant Software Newsletters

WordPress Newsletters plugin <= 4.18.2 - Cross Site Request Forgery (CSRF) vulnerability

EPSS 0.2%CVSS 9.6

HCLSoftware2 vulnerabilities on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-108014 · HCLSoftware Domino Server

eMudhra Compromised Certificate vulnerability impacts HCL Domino Server

EPSS 0.1%CVSS 9.1

CVE-2026-108015 · HCLSoftware Notes Client

eMudhra Compromised Certificate vulnerability impacts HCL Notes Client

EPSS 0.1%CVSS 9.1

The archive.