Critical vulnerability archive — page 32

Fortinet1 vulnerability on this pageMax CVSS 9.8Priority 98KEV 1

CVE-2026-104286 · Fortinet FortiMail

Fortinet FortiMail Path Traversal Vulnerability

KEV · due 4 Oct EPSS 5%public exploit SSVC act CVSS 9.8

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-51911 · mitre

vanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna/legacy/base/base.py).

EPSS 1%public exploit CVSS 9.8

CVE-2026-51922 · mitre

agentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding/_shell.py).

EPSS 1%public exploit CVSS 9.8

CVE-2026-51904 · mitre

SuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution controller.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-51918 · mitre

FinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-51906 · mitre

In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to wri…

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-51898 · mitre

sinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.

EPSS 0.3%CVSS 9.8

CVE-2026-51915 · mitre

TransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool controller.

EPSS 0.3%CVSS 9.8

kvcache-ai2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-103764 · kvcache-ai Mooncake

Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-103765 · kvcache-ai Mooncake

Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server

EPSS 0.6%public exploit CVSS 9.4

sgoudelis1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-103244 · sgoudelis ground-station

ground-station before 0.8.0 Authentication Bypass via setup.restore

EPSS 0.6%public exploit CVSS 9.8

GetSimpleCMS-CE3 vulnerabilities on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-56660 · GetSimpleCMS-CE GetSimpleCMS-CE

GetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-53953 · GetSimpleCMS-CE GetSimpleCMS-CE

GetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-56662 · GetSimpleCMS-CE GetSimpleCMS-CE

GetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request

EPSS 0.2%public exploit CVSS 9.6

Authlib1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-104056 · Authlib Authlib

CVE-2026-104056

EPSS 0.2%public exploit CVSS 9.8

dplugins1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-14378 · dplugins DevKit Pro

DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow

EPSS 0.7%CVSS 9.8

Fortra3 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-79898 · Fortra BoKS Manager

Fortra BoKS Manager crlserver command injection vulnerability

EPSS 1.0%CVSS 9.1

CVE-2026-12627 · Fortra Fortra's Core Privileged Access Manager (BoKS)

Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

EPSS 0.4%CVSS 9.8

CVE-2026-79901 · Fortra BoKS Manager boks-server

Predictable Active Directory service-account passwords in BoKS Manager

EPSS 0.3%CVSS 9.9

Webpros2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-93698 · Webpros cPanel

Insufficient validation allows arbitrary commands to be executed via the Multilang adminbin.

EPSS 0.6%CVSS 9.9

CVE-2026-93697 · Webpros cPanel

There is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify Accounts interface.

EPSS 0.5%CVSS 9.0

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-57941 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy

EPSS 0.6%CVSS 9.8

CVE-2026-56154 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}

EPSS 0.5%CVSS 9.8

CVE-2026-59797 · Apache Software Foundation Apache HTTP Server

Apache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function

EPSS 0.5%CVSS 9.8

DiviEngine1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-19660 · DiviEngine Divi Membership

Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter

EPSS 0.6%CVSS 9.8

superdav421 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-75957 · superdav42 Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform

Ultimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter

EPSS 0.6%CVSS 9.8

WAGO1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-41753 · WAGO 0751-9x01

Path traversal in dynamically created BACnet File Objects

EPSS 0.6%CVSS 9.8

WebRehab2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-15896 · WebRehab Super Forms – Drag & Drop Form Builder

Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

EPSS 0.9%CVSS 9.1

CVE-2026-15989 · WebRehab Super Forms – Drag & Drop Form Builder

Super Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter

EPSS 0.5%CVSS 9.8

dhis21 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-55083 · dhis2 dhis2-core

DHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)

EPSS 0.6%CVSS 9.1

Teledyne FLIR3 vulnerabilities on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-55393 · Teledyne FLIR Aware2

Local File Inclusion in Teledyne FLIR Robots running Aware2

EPSS 0.4%CVSS 10.0

CVE-2026-55395 · Teledyne FLIR Aware2

Hardcoded Passwords in Teledyne FLIR Robots running Aware2

EPSS 0.2%CVSS 9.4

CVE-2026-14984 · Teledyne FLIR Aware2

Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware2

EPSS 0.1%CVSS 9.4

Discord1 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-104480 · Discord libdave

Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

EPSS 0.4%CVSS 9.4

foundation501 vulnerability on this pageMax CVSS 9.4Priority 35KEV 0

CVE-2026-94620 · foundation50 classroom50

Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)

EPSS 0.4%CVSS 9.4

MISP1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-103655 · MISP MISP

MISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period

EPSS 0.4%CVSS 9.3

Paul Ryan1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-103752 · Paul Ryan Authorizer

WordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability

EPSS 0.3%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2026-101148 · Unknown BackupSheep WordPress Backup Plugin

BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key

EPSS 0.3%CVSS 10.0

Red Hat2 vulnerabilities on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-86345 · Red Hat Red Hat Directory Server 11

389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result

EPSS 0.4%CVSS 9.0

CVE-2026-96659 · Red Hat Red Hat Satellite 6.16 for RHEL 8

Foreman: excessive permissions for viewer role on preview

EPSS 0.3%CVSS 9.1

Thales1 vulnerability on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-18397 · Thales SConnect

SConnect: Native Host Unauthenticated Remote Code Execution Vulnerability

EPSS 0.3%CVSS 9.4

Eummena1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-102628 · Eummena Cadmos LTI

Cadmos LTI exposure of sensitive information via debug mode

EPSS 0.3%CVSS 9.3

fleetdm1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-103264 · fleetdm fleet

Fleet before 4.87.0 Authentication Bypass via Device Identifiers

EPSS 0.3%CVSS 9.3

ionic-team1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-103922 · ionic-team capacitor

Capacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path

EPSS 0.3%CVSS 9.3

Johnson Controls1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-71449 · Johnson Controls EasyIO FS32

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.

EPSS 0.3%CVSS 9.3

n8n-io2 vulnerabilities on this pageMax CVSS 9.0Priority 32KEV 0

CVE-2026-103248 · n8n-io n8n

n8n before 1.123.80, 2.39.6, and 2.40.1 PostgREST Filter Injection via Supabase

EPSS 0.3%CVSS 9.0

CVE-2026-103255 · n8n-io n8n

n8n before 1.123.80, 2.39.6, and 2.40.1 Path Traversal and Query Injection via Supabase

EPSS 0.3%CVSS 9.0

nickboss1 vulnerability on this pageMax CVSS 9.3Priority 31KEV 0

CVE-2026-62071 · nickboss WordPress File Upload

WordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability

EPSS 0.2%CVSS 9.3

Joyland1 vulnerability on this pageMax CVSS 9.0Priority 29KEV 0

CVE-2026-102667 · Joyland Joyland.ai

Joyland AI WebView command injection

EPSS 0.2%CVSS 9.0

WatchGuard1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2026-13043 · WatchGuard Endpoint Security

WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

EPSS 0.1%CVSS 9.3

The archive.