Critical vulnerability archive — page 30

Atlassian1 vulnerability on this pageMax CVSS 9.3Priority 98KEV 1

CVE-2026-21589 · Atlassian Bamboo Data Center

Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability

KEV · due 18 Oct EPSS 99%public exploit SSVC act CVSS 9.3

langflow-ai2 vulnerabilities on this pageMax CVSS 9.9Priority 53KEV 0

CVE-2026-105740 · langflow-ai langflow

Langflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server

EPSS 1%public exploit CVSS 9.9

CVE-2026-105697 · langflow-ai langflow

Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration

EPSS 0.9%CVSS 9.9

TOTOLINK3 vulnerabilities on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-105284 · Totolink A3002MU

Totolink A3002MU Authentication Check boa sub_40FCFC improper authorization

EPSS 0.8%public exploit CVSS 10.0

CVE-2026-105285 · Totolink A3002MU

Totolink A3002MU QoS Rule formIpQoS stack-based overflow

EPSS 0.6%public exploit CVSS 10.0

CVE-2026-105484 · TOTOLINK X6000R

TOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection

EPSS 2%CVSS 10.0

Camunda1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-77226 · Camunda Camunda 7

Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint

EPSS 0.7%public exploit CVSS 9.2

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-88393 · mitre

WookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project/task/export.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-71383 · mitre

Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api…

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88391 · mitre

Northstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but its auth interceptor only covers /norths…

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88395 · mitre

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88424 · mitre

FineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order parameter at ButtonService.GetListByFilter().

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-37719 · mitre

An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component.

EPSS 0.7%CVSS 9.8

CVE-2026-77178 · mitre

Oracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the host OS in pcnetReceiveNoSync in DevPCNet.…

EPSS 0.3%CVSS 9.1

penpot1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-105691 · penpot penpot

Penpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color

EPSS 0.5%public exploit CVSS 9.9

Tenda1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-105778 · Tenda AC5

Tenda AC5 Wifi setWifi stack-based overflow

EPSS 0.5%public exploit CVSS 9.9

makeplane6 vulnerabilities on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2026-105636 · makeplane plane

Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-105641 · makeplane plane

Plane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-105637 · makeplane plane

Plane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)

EPSS 0.3%public exploit CVSS 9.6

CVE-2026-105638 · makeplane plane

Plane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute force

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-105640 · makeplane plane

Plane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-105639 · makeplane plane

Plane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane

EPSS 0.4%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-104711 · Apache Software Foundation Apache Struts

Apache Struts: OGNL injection in the legacy RESTful action mapper

EPSS 1%CVSS 9.8

WWBN2 vulnerabilities on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2026-105086 · WWBN AVideo

WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-105089 · WWBN AVideo

WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates

EPSS 0.3%public exploit CVSS 9.3

JMAPlugins1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-32568 · JMAPlugins WooCommerce Designer Pro

WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

EPSS 0.7%CVSS 9.9

Viewsonic1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-82989 · Viewsonic vCast

CVE-2026-82989

EPSS 0.7%CVSS 9.8

ordasoft.com1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-102428 · ordasoft.com OrdaSoft Joomla CCK

Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16

EPSS 0.5%CVSS 9.8

Perfoce1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-100103 · Perfoce P4 (Helix Core)

Authentication bypass via default auth token in P4Search

EPSS 0.4%CVSS 10.0

Murrelektronik1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-94293 · Murrelektronik Software AAS Edge Client all versions

Missing authentication for critical function in the aas-edge-client REST API

EPSS 0.4%CVSS 9.8

Liquid Web / StellarWP1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-97283 · Liquid Web / StellarWP Advanced Post Manager

WordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability

EPSS 0.3%CVSS 9.8

Perforce2 vulnerabilities on this pageMax CVSS 9.5Priority 35KEV 0

CVE-2026-103510 · Perforce P4 (Helix Core)

Authentication bypass via blank auth token in P4Search

EPSS 0.4%CVSS 9.5

CVE-2026-100102 · Perforce P4 (Helix Core)

RCE via exposed JDWP debug agent in P4Search

EPSS 0.4%CVSS 9.5

BookingWP1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-32557 · BookingWP WooCommerce Appointments

WordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

joomlafry.com1 vulnerability on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-102780 · joomlafry.com TF Content for Joomla

Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4

EPSS 0.3%CVSS 9.8

Legcord2 vulnerabilities on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-105293 · Legcord Legcord

Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers

EPSS 0.4%CVSS 9.2

CVE-2026-105294 · Legcord Legcord

Legcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig

EPSS 0.2%CVSS 9.1

Schmooze1 vulnerability on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-85153 · Schmooze Schmooze dating mobile Application

Information Disclosure Vulnerability in Schmooze dating mobile Application

EPSS 0.4%CVSS 9.3

CPANSec1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2017-20285 · CPANSec

YAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes

EPSS 0.3%CVSS 9.1

twentyhq1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-105763 · twentyhq twenty

Twenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL

EPSS 0.3%CVSS 9.6

zitadel2 vulnerabilities on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-105211 · zitadel zitadel

ZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode

EPSS 0.3%CVSS 9.2

CVE-2026-105215 · zitadel zitadel

ZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback

EPSS 0.3%CVSS 9.3

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-79820 · Hewlett Packard Enterprise (HPE) HPE Integrated Lights-Out (iLO) 7

A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.

EPSS 0.3%CVSS 9.0

OS4ED1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-91107 · OS4ED openSIS-Classic

openSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)

EPSS 0.2%CVSS 9.3

WP BASE1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-103352 · WP BASE WP BASE Booking

WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

defunkt1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-105221 · defunkt gist

Gist RubyGem before 6.1.0 Disabled TLS Certificate Verification

EPSS 0.2%CVSS 9.1

alexpechkarev1 vulnerability on this pageMax CVSS 9.1Priority 29KEV 0

CVE-2026-105222 · alexpechkarev google-maps

alexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer

EPSS 0.2%CVSS 9.1

maclof1 vulnerability on this pageMax CVSS 9.1Priority 29KEV 0

CVE-2026-105223 · maclof kubernetes-client

maclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification

EPSS 0.2%CVSS 9.1

micro1 vulnerability on this pageMax CVSS 9.1Priority 29KEV 0

CVE-2026-105216 · micro go-micro

go-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helper

EPSS 0.2%CVSS 9.1

go-pay1 vulnerability on this pageMax CVSS 9.1Priority 28KEV 0

CVE-2026-105218 · go-pay gopay

gopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client

EPSS 0.2%CVSS 9.1

The archive.