Critical vulnerability archive — page 37

Netcore8 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-101001 · Netcore NBR200V2

Netcore NBR200V2 Web Management network_tools eval os command injection

EPSS 3%public exploit CVSS 10.0

CVE-2026-101072 · Netcore NR289-GE

Netcore NR289-GE CGI ap_ip.cgi system os command injection

EPSS 2%public exploit CVSS 10.0

CVE-2026-101075 · Netcore NR289-GE

Netcore NR289-GE Location Time location_time.cgi system os command injection

EPSS 2%public exploit CVSS 10.0

CVE-2026-101076 · Netcore NR289-GE

Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection

EPSS 2%public exploit CVSS 10.0

CVE-2026-101002 · Netcore NBR200V2

Netcore NBR200V2 Tools Ping network_tools system os command injection

EPSS 2%public exploit CVSS 9.9

CVE-2026-101074 · Netcore NR289-GE

Netcore NR289-GE Authentication boa password-check stack-based overflow

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-101077 · Netcore NR289-GE

Netcore NR289-GE boa_temp process_request missing authentication

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-101000 · Netcore NBR100V2

Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization

EPSS 0.5%public exploit CVSS 10.0

TOTOLINK1 vulnerability on this pageMax CVSS 9.9Priority 56KEV 0

CVE-2026-100896 · TOTOLINK N150RT

TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection

EPSS 2%public exploit CVSS 9.9

aaPanel3 vulnerabilities on this pageMax CVSS 9.4Priority 55KEV 0

CVE-2026-101008 · aaPanel BaoTa

aaPanel BaoTa File Merge files.py merge_split_file command injection

EPSS 2%public exploit CVSS 9.4

CVE-2026-101007 · aaPanel BaoTa

aaPanel BaoTa Database Backup database.py InputSql os command injection

EPSS 2%public exploit CVSS 9.3

CVE-2026-101009 · aaPanel BaoTa

aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection

EPSS 2%public exploit CVSS 9.3

Ziroom2 vulnerabilities on this pageMax CVSS 9.4Priority 55KEV 0

CVE-2026-101187 · Ziroom ZHOME A0101

Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection

EPSS 2%public exploit CVSS 9.4

CVE-2026-101260 · Ziroom ZHOME A0101

Ziroom ZHOME A0101 firstLogin command injection

EPSS 2%public exploit CVSS 9.4

Seetong1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-100886 · Seetong T8108

Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

EPSS 1%public exploit CVSS 10.0

FAST3 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-101039 · FAST FAC1900R

FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-101037 · FAST FAC1200R

FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow

EPSS 0.5%public exploit CVSS 9.9

CVE-2026-101038 · FAST FAC1200R

FAST FAC1200R MmtAtePrase stack-based overflow

EPSS 0.4%public exploit CVSS 9.9

Canonical3 vulnerabilities on this pageMax CVSS 9.9Priority 49KEV 0

CVE-2026-85526 · Canonical LXD

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

EPSS 0.5%public exploit CVSS 9.9

CVE-2026-85185 · Canonical LXD

Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

EPSS 0.4%public exploit CVSS 9.6

CVE-2026-87799 · Canonical LXD

Arbitrary file write on LXD host via symlink in migration stream

EPSS 0.4%CVSS 9.9

D-Link1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-101081 · D-Link DI-8400

D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

EPSS 0.5%public exploit CVSS 9.4

nezhahq1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-101090 · nezhahq nezha

Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

EPSS 0.4%public exploit CVSS 9.8

WatchGuard2 vulnerabilities on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2026-86102 · WatchGuard WatchGuard AP

WatchGuard AP Command Injection in Internal Management API Allows Command Execution

EPSS 2%CVSS 9.3

CVE-2026-101891 · WatchGuard WatchGuard AP

WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access

EPSS 0.3%CVSS 9.3

obot-platform2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-101084 · obot-platform obot

obot before v0.21.1 Authorization Bypass via /mcp-connect

EPSS 0.3%public exploit CVSS 9.6

CVE-2026-101065 · obot-platform obot

Obot Quickstart Docker Deployment Unauthenticated Admin Access

EPSS 0.4%CVSS 9.8

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-82384 · Apache Software Foundation Apache Roller

Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint

EPSS 1.0%CVSS 9.8

CVE-2026-82377 · Apache Software Foundation Apache Roller

Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers

EPSS 0.4%CVSS 9.9

CVE-2026-82378 · Apache Software Foundation Apache Roller

Apache Roller: OAuth authorization endpoint trusts request-supplied identity

EPSS 0.4%CVSS 9.0

Citrix NetScaler3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-88775 · Citrix NetScaler ADC

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

EPSS 0.7%CVSS 9.8

CVE-2026-88776 · Citrix NetScaler ADC

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

EPSS 0.7%CVSS 9.8

CVE-2026-88777 · Citrix NetScaler ADC

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

EPSS 0.7%CVSS 9.8

jpadilla3 vulnerabilities on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-102266 · jpadilla pyjwt

PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation

EPSS 0.2%public exploit CVSS 9.1

CVE-2026-102268 · jpadilla pyjwt

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

EPSS 0.2%public exploit CVSS 9.1

CVE-2026-102267 · jpadilla pyjwt

PyJWT: PyJWKClient follows redirects when fetching JWKS

EPSS 0.2%CVSS 9.1

XhmikosR1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-101894 · XhmikosR decompress

@xhmikosr/decompress: Path traversal via symlink chain

EPSS 0.8%CVSS 9.1

Authlib1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-96760 · Authlib Authlib

Authlib library contains a signature‑verification bypass vulnerability

EPSS 0.4%CVSS 9.8

Dayforce2 vulnerabilities on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-73642 · Dayforce ESS Excelity

Path Traversal in Dayforce ESS Excelity

EPSS 0.4%CVSS 9.2

CVE-2026-73640 · Dayforce ESS Excelity

Time-based SQL Injection in Dayforce ESS Excelity

EPSS 0.3%CVSS 9.3

NginxProxyManager1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-102334 · NginxProxyManager nginx-proxy-manager

Nginx Proxy Manager through 2.16.0 Missing Brute-Force Protection

EPSS 0.5%CVSS 9.1

SUSE1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-88804 · SUSE Rancher

Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher

EPSS 0.4%CVSS 9.6

Google Cloud2 vulnerabilities on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-81867 · Google Cloud Application Integration

Deserialization of Untrusted Data in Application Integration allows Remote Code Execution

EPSS 0.4%CVSS 9.4

CVE-2026-19759 · Google Cloud Application Integration

Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution

EPSS 0.2%CVSS 9.4

ordasoft.com3 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2026-100752 · ordasoft.com Real Estate Manager (Free) extension for Joomla

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9

EPSS 0.3%CVSS 9.8

CVE-2026-101108 · ordasoft.com Vehicle Manager (Free) extension for Joomla

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8

EPSS 0.3%CVSS 9.8

CVE-2026-101110 · ordasoft.com Book Library (Free) extension for Joomla

Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6

EPSS 0.3%CVSS 9.8

Innotim Software, Telecommunications and Consultancy Trade Ltd. Co.1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-90924 · Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM

Default Admin Credentials in Innotim Software's Logsign SIEM

EPSS 0.3%CVSS 9.8

dannymcc1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-49994 · dannymcc bluehood

Bluehood: Missing authentication on Bluehood API routes when web auth is enabled

EPSS 0.3%CVSS 9.1

SailPoint Technologies1 vulnerability on this pageMax CVSS 9.6Priority 31KEV 0

CVE-2026-12342 · SailPoint Technologies IdentityIQ

SailPoint IdentityIQ Improper Form Validation Vulnerability

EPSS 0.2%CVSS 9.6

The archive.