The archive.

Gigatech1 vulnerability on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-94493 · Gigatech PDV5701

Gigatech PDV5701 WebSocket Service index.html missing authentication

EPSS 0.7%public exploit CVSS 10.0

SGLang1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-93088 · SGLang SGLang

CVE-2026-93088

EPSS 0.7%public exploit CVSS 9.8

fluent1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-61674 · fluent fluent-bit

Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

EPSS 0.7%public exploit CVSS 9.2

Zohocorp1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-74849 · Zohocorp ManageEngine ADSelfService Plus

Remote code execution vulnerability

EPSS 5%CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-88414 · mitre

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88416 · mitre

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-88624 · mitre

Missing path validation in the Worktree.remove component of openCode v1.18.26 allows attackers to execute arbitrary recursive directory d…

EPSS 0.5%CVSS 9.1

CVE-2026-79313 · mitre

webpy web.py 0.76 is vulnerable to Insufficient Session Expiration.

OpenStack2 vulnerabilities on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-94572 · OpenStack Octavia

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control char…

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-94571 · OpenStack Octavia

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redir…

EPSS 0.5%CVSS 9.4

laurent221 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-46649 · laurent22 joplin

Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint

EPSS 0.5%public exploit CVSS 9.1

LANTRONIX1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2026-80143 · LANTRONIX SLC8000

Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read

EPSS 2%CVSS 9.9

NVIDIA5 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-65130 · NVIDIA Infrastructure Controller

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection.

EPSS 2%CVSS 9.8

CVE-2026-65113 · NVIDIA Infrastructure Controller

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of hard-coded credentials.

EPSS 0.7%CVSS 9.8

CVE-2026-65114 · NVIDIA Infrastructure Controller

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause missing authentication for a critical f…

CVE-2026-65121 · NVIDIA Infrastructure Controller

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue.

CVE-2026-65118 · NVIDIA Infrastructure Controller

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper certificate validation.

EPSS 0.2%CVSS 9.8

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2025-12999 · Eclipse Foundation Eclipse Open VSX

UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forw…

EPSS 0.3%public exploit CVSS 9.1

ajenti1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-79920 · ajenti ajenti

Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task

EPSS 0.6%CVSS 9.9

BioStar4 vulnerabilities on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-94128 · BioStar VIVID LED DJ

BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94129 · BioStar VALKYRIE AURORA

BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94142 · BioStar Temperature Monitor Utility

BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94146 · BioStar BIOS Update Utility

BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

LiquidWeb1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-19658 · LiquidWeb Give Tributes

Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter

EPSS 0.7%CVSS 9.8

CPANSec3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-93012 · CPANSec

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendmail_pipe

EPSS 0.6%CVSS 9.8

CVE-2026-87078 · CPANSec

Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode

CVE-2026-87080 · CPANSec

Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode

Mailu1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-85751 · Mailu Mailu

Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

EPSS 0.6%CVSS 9.8

Meta Box1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-13355 · Meta Box Meta Box Frontend Submission

Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter

EPSS 0.6%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-82187 · Unknown Web to Print Online Designer

WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload

EPSS 0.5%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-86473 · Apache Software Foundation Apache Airflow

Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

EPSS 0.7%CVSS 9.1

CVE-2026-94301 · Apache Software Foundation Apache MINA

Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232

Karel Electronic Industry and Trade Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-12718 · Karel Electronic Industry and Trade Inc. KarelIPS

SQLi in Karel Electronics' KarelIPS

EPSS 0.5%CVSS 9.8

Qualcomm, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-25254 · Qualcomm, Inc. Snapdragon

Improper authorization in Qualcomm Software Center

EPSS 0.5%CVSS 9.8

Erlang1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-89422 · Erlang OTP

TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension

EPSS 0.5%CVSS 9.3

warp-tech1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-58491 · warp-tech warpgate

Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

EPSS 0.5%CVSS 9.3

Kompini1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-93556 · Kompini Tankuam Places

Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini

EPSS 0.4%CVSS 9.3

Fortinet1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-84388 · Fortinet FortiPAM Chrome Extension

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chr…

ColorFul1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-94403 · ColorFul iGameCenter

ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

Moore Threads2 vulnerabilities on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-94424 · Moore Threads MTT S80 Driver Package

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

CVE-2026-94425 · Moore Threads MTT S80 Driver Package

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management