Critical vulnerability archive — page 38

Citrix NetScaler3 vulnerabilities on this pageMax CVSS 10.0Priority 99KEV 2

CVE-2026-88771 · Citrix NetScaler ADC

A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

KEV · due 30 Sep EPSS 82%public exploit SSVC act CVSS 9.8

CVE-2026-88772 · Citrix NetScaler ADC

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

KEV · due 30 Sep EPSS 78%public exploit SSVC act CVSS 9.5

CVE-2026-88773 · Citrix NetScaler ADC

HTTP Request Smuggling

EPSS 3%CVSS 10.0

Piwigo2 vulnerabilities on this pageMax CVSS 9.1Priority 51KEV 0

CVE-2026-42322 · Piwigo Piwigo

Piwigo: Authenticated RCE via File Upload in Logo Upload Feature

EPSS 1%public exploit CVSS 9.1

CVE-2026-62262 · Piwigo Piwigo

Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`

EPSS 0.7%public exploit CVSS 9.1

D-Link1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-100740 · D-Link DIR-895L

D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

EPSS 0.6%public exploit CVSS 9.9

froxlor5 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

patriksimek1 vulnerability on this pageMax CVSS 9.5Priority 48KEV 0

CVE-2026-100721 · patriksimek vm2

vm2 before 3.12.2 Authorization Bypass via Custom Resolver

EPSS 0.6%public exploit CVSS 9.5

themefic1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-82901 · themefic Ultra Addons for Contact Form 7

Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field

EPSS 4%CVSS 9.8

Addify1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-18143 · Addify Request a Quote for WooCommerce

Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler

EPSS 2%CVSS 9.8

FlowiseAI2 vulnerabilities on this pageMax CVSS 9.2Priority 46KEV 0

CVE-2026-100606 · FlowiseAI Flowise

Flowise through 3.1.4 Authentication Bypass via SSO Email Match

EPSS 0.5%public exploit CVSS 9.2

CVE-2026-100607 · FlowiseAI Flowise

Flowise through 3.1.4 Authentication Bypass via Email-Only SSO

EPSS 0.4%public exploit CVSS 9.2

budibase1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2026-100684 · budibase server

Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC

EPSS 0.4%public exploit CVSS 9.2

InvoicePlane1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-39353 · InvoicePlane InvoicePlane

InvoicePlane: Remote Code Execution via Writable Templates Directory

EPSS 0.4%public exploit CVSS 9.1

Progressive Robot Ltd1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-100741 · Progressive Robot Ltd hMailServer

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

EPSS 2%CVSS 9.8

Wikimedia Foundation1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-100382 · Wikimedia Foundation Mediawiki - ExternalData Extension

Unauthenticated remote code execution through wikitext in ExternalData

EPSS 1%CVSS 10.0

101gen1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-14281 · 101gen Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code

Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

EPSS 0.9%CVSS 9.8

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-85984 · cyberlord92 miniOrange OTP Login, Verification and SMS Notifications

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

EPSS 1%CVSS 9.8

lomart.fr4 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-97160 · lomart.fr UP plugin for Joomla

Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

EPSS 1%CVSS 9.4

CVE-2026-97163 · lomart.fr UP plugin for Joomla

Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

EPSS 0.5%CVSS 10.0

CVE-2026-97161 · lomart.fr UP plugin for Joomla

Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

EPSS 0.4%CVSS 9.2

CVE-2026-97162 · lomart.fr UP plugin for Joomla

Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29

EPSS 0.3%CVSS 9.8

yzcheng902 vulnerabilities on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2026-97063 · yzcheng90 X-SpringBoot

X-SpringBoot through 6.0 Authentication Bypass via Login Code

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-97064 · yzcheng90 X-SpringBoot

X-SpringBoot through 6.0 Authentication Bypass via Static Master Code

EPSS 0.3%CVSS 9.3

Zimbra4 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-93643 · Zimbra Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration Suite OnlyOffice Integration Path Traversal Leading to Remote Code Execution via Unauthenticated /downloadas Request

EPSS 1.0%CVSS 9.8

CVE-2026-93641 · Zimbra Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Forged Share Invitation

EPSS 0.3%CVSS 9.3

CVE-2026-93642 · Zimbra Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration Suite Modern Web Client Stored Cross-Site Scripting via Forged Share Invitation

EPSS 0.2%CVSS 9.3

CVE-2026-93647 · Zimbra Zimbra Collaboration Suite (ZCS)

Zimbra Collaboration Suite Classic Web Client Stored Cross-Site Scripting via Crafted Calendar COUNTER Message From Address

EPSS 0.2%CVSS 9.3

kyverno1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-100706 · kyverno kyverno

kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath

EPSS 0.6%CVSS 9.9

acymailing.com1 vulnerability on this pageMax CVSS 9.5Priority 37KEV 0

CVE-2026-94132 · acymailing.com AcyMailing Enterprise extension for Joomla

Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0

EPSS 0.5%CVSS 9.5

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-92609 · Apache Software Foundation Apache Qpid Broker-J

Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication

EPSS 0.5%CVSS 9.8

GestSup1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-100389 · GestSup GestSup

GestSup before 3.2.62 Remote Code Execution via IMAP Attachment

EPSS 0.6%CVSS 9.2

ivole1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-89055 · ivole Customer Reviews for WooCommerce

Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

EPSS 0.6%CVSS 9.1

joomlaboat.com1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-94130 · joomlaboat.com YouTube Gallery extension for Joomla

Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3

EPSS 0.4%CVSS 9.8

ladela1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-93399 · ladela Online Scheduling and Appointment Booking System – Bookly

Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter

EPSS 0.6%CVSS 9.1

Linux1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-100075 · Linux Linux

RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters

EPSS 0.4%CVSS 9.8

rabbitmq1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-67237 · rabbitmq rabbitmq-server

RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint

EPSS 0.5%CVSS 9.3

glpi-project1 vulnerability on this pageMax CVSS 9.4Priority 34KEV 0

CVE-2026-48482 · glpi-project glpi

GLPI: RCE via Form import

EPSS 0.3%CVSS 9.4

FriendsOfFlarum1 vulnerability on this pageMax CVSS 9.8Priority 33KEV 0

CVE-2026-92161 · FriendsOfFlarum oauth

FriendsOfFlarum OAuth: Unauthenticated account takeover via unverified email trust in Discord OAuth provider

EPSS 0.3%CVSS 9.8

zammad1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-84458 · zammad zammad

Zammad: Account takeover via unverified email matching during SSO auto-link

EPSS 0.4%CVSS 9.1

edgelesssys2 vulnerabilities on this pageMax CVSS 9.6Priority 32KEV 0

CVE-2026-100833 · edgelesssys contrast

Contrast before 1.23.1 Image Substitution via Policy Generation

EPSS 0.2%CVSS 9.6

CVE-2026-100835 · edgelesssys contrast

Contrast before 1.16.0 Remote Attestation Relay Attack

EPSS 0.3%CVSS 9.1

tobychui1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-100390 · tobychui zoraxy

Zoraxy 3.2.3 through 3.3.4 Client IP Spoofing via X-Forwarded-For IPv6

EPSS 0.3%CVSS 9.1

Kovid Goyal1 vulnerability on this pageMax CVSS 9.3Priority 29KEV 0

CVE-2026-95832 · Kovid Goyal kitty

Reflected unknown field names in the kitty colour control escape code allow command execution in the user's shell

EPSS 0.2%CVSS 9.3

wolfSSL1 vulnerability on this pageMax CVSS 9.1Priority 29KEV 0

CVE-2026-89134 · wolfSSL wolfSSL

Subject CN name-constraint check bypassed when non-DNS SAN present

EPSS 0.2%CVSS 9.1

OpenClaw1 vulnerability on this pageMax CVSS 9.0Priority 28KEV 0

CVE-2026-100551 · OpenClaw OpenClaw

OpenClaw iOS Control UI TLS Pin Enforcement Bypass

EPSS 0.2%CVSS 9.0

The archive.