Critical vulnerability archive — page 39

rejetto2 vulnerabilities on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2026-97359 · rejetto hfs2

HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection

EPSS 6%public exploit CVSS 10.0

CVE-2026-97360 · rejetto hfs2

HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine

EPSS 0.4%public exploit CVSS 10.0

BitterSecurity1 vulnerability on this pageMax CVSS 10.0Priority 55KEV 0

CVE-2026-61732 · BitterSecurity Decepticon

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

EPSS 1%public exploit CVSS 10.0

Dokploy1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-93425 · Dokploy dokploy

Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root

EPSS 0.6%public exploit CVSS 9.9

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-88378 · mitre

QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-88365 · mitre

minimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when parsing the APEv2 tag-size field.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88351 · mitre

An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms.

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-51996 · mitre

An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the src/lib/utils.ts and the g…

EPSS 0.5%CVSS 9.8

CVE-2026-51994 · mitre

mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted fr…

EPSS 0.4%CVSS 9.1

SigNoz1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-97055 · SigNoz signoz

SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret

EPSS 0.5%public exploit CVSS 9.2

visualcomposer1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-12227 · visualcomposer Visual Composer Website Builder

Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

EPSS 3%CVSS 9.8

CPANSec3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-92289 · CPANSec

Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentials does not verify the client secret

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-92288 · CPANSec

Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not verify the client secret of a public Relying Party

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-97230 · CPANSec

IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

EPSS 0.2%CVSS 9.8

Termix-SSH1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-79766 · Termix-SSH Termix

Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

EPSS 0.5%public exploit CVSS 9.1

IBM4 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-6721 · IBM Concert

Multiple Vulnerabilities in IBM Concert Software

EPSS 1%CVSS 9.8

CVE-2026-6928 · IBM Concert

Multiple Vulnerabilities in IBM Concert Software

EPSS 0.5%CVSS 9.8

CVE-2026-6730 · IBM Concert

Multiple Vulnerabilities in IBM Concert Software

EPSS 0.3%CVSS 9.8

CVE-2026-81549 · IBM DataStage on Cloud Pak for Data

DataStage on Cloud Pak for Data has several vulnerabilities

EPSS 0.3%CVSS 9.6

plank1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-93352 · plank laravel-mediable

Laravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload

EPSS 1%CVSS 9.8

Honeywell1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-13249 · Honeywell PD45 Industrial Printer

Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040

EPSS 0.9%CVSS 9.8

WebPros3 vulnerabilities on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-87898 · WebPros Plesk extension "Site Import"

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

EPSS 1%CVSS 9.4

CVE-2026-87900 · WebPros WP Toolkit for cPanel

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execut…

EPSS 0.7%CVSS 9.4

CVE-2026-87899 · WebPros cPanel

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

EPSS 0.6%CVSS 9.4

bytebase1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-61742 · bytebase dbhub

DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

EPSS 0.2%public exploit CVSS 9.3

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-96891 · D-Link DIR-825

D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write

EPSS 0.7%CVSS 9.8

GitLab2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-93577 · GitLab GitLab

Integer Overflow or Wraparound in GitLab

EPSS 0.6%CVSS 9.9

CVE-2026-89078 · GitLab GitLab

Double Free in GitLab

EPSS 0.5%CVSS 9.9

Eufy2 vulnerabilities on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-93289 · Eufy Omni C20

OS command injection in Eufy Omni C20, Omni X10 Pro

EPSS 0.8%CVSS 9.0

CVE-2026-93291 · Eufy Omni C20

Improper certificate validation in Eufy Omni C20

EPSS 0.2%CVSS 9.4

Linux3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-93207 · Linux Linux

SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry

EPSS 0.5%CVSS 9.8

CVE-2026-97413 · Linux Linux

RDMA/rtrs-srv: Fix integer underflow in process_read and process_write

EPSS 0.5%CVSS 9.8

CVE-2026-93228 · Linux Linux

svcrdma: Reject Write/Reply chunks with segcount 0

EPSS 0.5%CVSS 9.1

Red Hat2 vulnerabilities on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-84719 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)

EPSS 0.5%CVSS 9.9

CVE-2026-75884 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups

EPSS 0.4%CVSS 9.1

Rapid71 vulnerability on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-19072 · Rapid7 Velociraptor

Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal

EPSS 0.4%CVSS 9.9

Deltaww2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-78308 · Deltaww DIAEnergie

Authentication Bypass in DIAEnergie

EPSS 0.4%CVSS 9.8

CVE-2026-78312 · Deltaww DIAEnergie

Path Traversal in DIAEnergie

EPSS 0.4%CVSS 9.1

paytiumsupport1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-18467 · paytiumsupport Paytium: Mollie payment forms & donations

Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter

EPSS 0.4%CVSS 9.8

dashbit1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-91187 · dashbit nimble_zta

Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy

EPSS 0.3%CVSS 9.3

MrSteam1 vulnerability on this pageMax CVSS 9.6Priority 33KEV 0

CVE-2026-95699 · MrSteam iSteamX application

MrSteam iSteamX Improper Isolation or Compartmentalization

EPSS 0.3%CVSS 9.6

PortSwigger1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-90481 · PortSwigger Burp Suite DAST

In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternat…

EPSS 0.3%CVSS 9.2

ServiceNow2 vulnerabilities on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-86860 · ServiceNow ServiceNow AI Platform

Unauthenticated Sensitive Data Disclosure in ServiceNow AI Platform

EPSS 0.3%CVSS 9.3

CVE-2026-13016 · ServiceNow ServiceNow AI Platform

Unauthenticated SQL Injection in ServiceNow AI Platform

EPSS 0.3%CVSS 9.3

http4s1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-61741 · http4s http4s-scala-xml

http4s-scala-xml has an XML External Entity (XXE) processing issue

EPSS 0.3%CVSS 9.3

ixofoundation1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-61604 · ixofoundation ixo-blockchain

ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

EPSS 0.3%CVSS 9.3

OpenStack1 vulnerability on this pageMax CVSS 9.2Priority 31KEV 0

CVE-2026-97404 · OpenStack Zaqar

In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header.

EPSS 0.3%CVSS 9.2

rabbitmq2 vulnerabilities on this pageMax CVSS 9.2Priority 30KEV 0

CVE-2026-67231 · rabbitmq rabbitmq-server

RabbitMQ: Trust-store whitelist by Issuer+Serial only

EPSS 0.2%CVSS 9.1

CVE-2026-67404 · rabbitmq rabbitmq-server

RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch

EPSS 0.2%CVSS 9.2

Botslab1 vulnerability on this pageMax CVSS 9.2Priority 29KEV 0

CVE-2026-81630 · Botslab G980H

Botslab G980H Dashcams Insufficient Verification of Data Authenticity

EPSS 0.2%CVSS 9.2

The archive.