Critical vulnerability archive — page 40

Fast1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-96257 · Fast FAC1203R Gigabit Edition

Fast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow

EPSS 1%public exploit CVSS 10.0

OpenC31 vulnerability on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-77602 · OpenC3 cosmos

OpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)

EPSS 0.7%public exploit CVSS 9.9

orval-labs6 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-96757 · orval-labs orval

orval before 8.29.0 Code Injection via unescaped OpenAPI media-type

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-96758 · orval-labs orval

orval @orval/core before 8.28.0 Code Injection via Form-Data

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-96754 · orval-labs orval

orval @orval/hono before 8.29.0 Code Injection via OpenAPI Path

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-96759 · orval-labs orval

orval before 8.29.0 Code Injection via operationId

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-96755 · orval-labs orval

orval @orval/effect 8.14.0 through 8.28.1 Code Injection

EPSS 0.8%CVSS 9.8

CVE-2026-96756 · orval-labs orval

orval before 8.30.0 Code Injection via Factory Generation

EPSS 0.9%CVSS 9.2

JiHong881 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-59167 · JiHong88 suneditor

SunEditor: Critical XSS vulnerability - sanitizer bypass

EPSS 0.5%public exploit CVSS 10.0

LTSecurity1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-47116 · LTSecurity LTK3500SF

LTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH

EPSS 0.5%public exploit CVSS 9.8

Zohocorp2 vulnerabilities on this pageMax CVSS 10.0Priority 48KEV 0

CVE-2026-19599 · Zohocorp ManageEngine OpManager

Remote Code Execution vulnerability

EPSS 5%CVSS 9.9

CVE-2026-86708 · Zohocorp ManageEngine Applications Manager

Sensitive data exposure

EPSS 3%CVSS 10.0

moquette-io2 vulnerabilities on this pageMax CVSS 9.6Priority 45KEV 0

CVE-2026-95848 · moquette-io moquette

Moquette fails open when configured authentication or authorization classes cannot load

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-85724 · moquette-io moquette

Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass

EPSS 0.3%public exploit CVSS 9.6

ModelTC1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-96560 · ModelTC LightLLM

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

EPSS 1%CVSS 9.8

GitHub1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-77987 · GitHub Enterprise Server

GitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery

EPSS 0.9%CVSS 9.8

IBM9 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-18162 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.9%CVSS 9.8

CVE-2026-18163 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.8%CVSS 9.8

CVE-2026-18169 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.8%CVSS 9.9

CVE-2026-16346 · IBM DataStage on Cloud Pak for Data

DataStage on Cloud Pak for Data has several vulnerabilities

EPSS 0.6%CVSS 9.9

CVE-2026-17472 · IBM Concert

Multiple Vulnerabilities in IBM Concert Software

EPSS 0.4%CVSS 9.6

CVE-2026-17635 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.5%CVSS 9.1

CVE-2026-17618 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.2%CVSS 9.8

CVE-2026-17645 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.3%CVSS 9.1

CVE-2026-18872 · IBM Financial Transaction Manager (FTM) for RedHat OpenShift

IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities

EPSS 0.3%CVSS 9.3

lwIP1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-87121 · lwIP TCP/IP Stack MQTT

Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

EPSS 0.8%CVSS 9.8

Red Hat5 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-84474 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Automation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisioning-callback host match

EPSS 0.8%CVSS 9.9

CVE-2026-84502 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Automation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod

EPSS 0.6%CVSS 9.9

CVE-2026-84719 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Automation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)

EPSS 0.5%CVSS 9.9

CVE-2026-96276 · Red Hat Red Hat Enterprise Linux 10

Flatpak: flatpak: arbitrary write in host context via flatpak build-init

EPSS 0.4%CVSS 9.8

CVE-2026-75884 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Awx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups

EPSS 0.4%CVSS 9.1

WebPros3 vulnerabilities on this pageMax CVSS 9.4Priority 41KEV 0

CVE-2026-87898 · WebPros Plesk extension "Site Import"

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

EPSS 1%CVSS 9.4

CVE-2026-87900 · WebPros WP Toolkit for cPanel

Argument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated users to read arbitrary files and execut…

EPSS 0.7%CVSS 9.4

CVE-2026-87899 · WebPros cPanel

Execution with unnecessary privileges in cPanel allows remote authenticated users to execute arbitrary code with root privileges.

EPSS 0.6%CVSS 9.4

mitre1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-63564 · mitre

SQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to execute arbitrary code via crafted HTTP…

EPSS 0.7%CVSS 9.8

Apache Software Foundation5 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-76183 · Apache Software Foundation Apache Tomcat

Apache Tomcat: Bypass of security constraints for WebSocket endpoints

EPSS 0.6%CVSS 9.8

CVE-2026-86248 · Apache Software Foundation Apache Tomcat

Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

EPSS 0.5%CVSS 9.8

CVE-2026-82331 · Apache Software Foundation Apache BuildStream

Apache BuildStream: tar source extraction escape

EPSS 0.4%CVSS 9.8

CVE-2026-86350 · Apache Software Foundation Apache Tomcat

Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

EPSS 0.5%CVSS 9.1

CVE-2026-86246 · Apache Software Foundation Apache Tomcat Native

Apache Tomcat Native: Insecure OpenSSL options enabled

EPSS 0.3%CVSS 9.1

Hewlett Packard Enterprise (HPE)1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-76709 · Hewlett Packard Enterprise (HPE) ALE

Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)

EPSS 0.6%CVSS 9.8

openbao1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-63132 · openbao openbao

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

EPSS 0.6%CVSS 9.2

Apache HTTP Server Project1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-89282 · Apache HTTP Server Project Apache Lounge Windows

CVE-2026-89282

EPSS 0.5%CVSS 9.1

Temporal Technologies, Inc.1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-96770 · Temporal Technologies, Inc. s2s-proxy

s2s-proxy accepts untrusted client certificates

EPSS 0.3%CVSS 9.3

Claris2 vulnerabilities on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-86930 · Claris FileMaker Server

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a conta…

EPSS 0.3%CVSS 9.1

CVE-2026-86934 · Claris FileMaker Server

An authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed requests containing an extended privilege hea…

EPSS 0.3%CVSS 9.1

WBW Plugins1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-95601 · WBW Plugins Product Filter by WBW

WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

Unknown2 vulnerabilities on this pageMax CVSS 9.0Priority 31KEV 0

CVE-2026-75799 · Unknown YAHMAN Add-ons

YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache

EPSS 0.3%CVSS 9.0

CVE-2026-82843 · Unknown WP OAuth Server ( Login with WordPress )

WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution

EPSS 0.2%CVSS 9.0

Google1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-19202 · Google mcp-toolbox-sdk-python

Token Cache Reuse in mcp-toolbox-sdk-python

EPSS 0.2%CVSS 9.1

The archive.