Critical vulnerability archive — page 43

Netcore7 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-94095 · Netcore NBR200V2

Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

EPSS 2%public exploit CVSS 9.9

CVE-2026-94096 · Netcore NBR200V2

Netcore NBR200V2 LAN IP Configuration network_tools command injection

EPSS 2%public exploit CVSS 9.9

CVE-2026-94098 · Netcore NBR200V2

Netcore NBR200V2 Firmware Upgrade CGI Endpoint upgrade command injection

EPSS 2%public exploit CVSS 9.4

CVE-2026-94099 · Netcore NBR200V2

Netcore NBR200V2 Backup Restore restore.cgi command injection

EPSS 2%public exploit CVSS 9.9

CVE-2026-94100 · Netcore NBR200V2

Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow

EPSS 0.8%public exploit CVSS 9.9

CVE-2026-94097 · Netcore NBR200V2

Netcore NBR200V2 CGI Diagnostic Endpoint network_tools command injection

EPSS 3%CVSS 10.0

CVE-2026-94101 · Netcore NBR200V2

Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow

EPSS 0.4%public exploit CVSS 9.9

Totolink1 vulnerability on this pageMax CVSS 9.9Priority 56KEV 0

CVE-2026-93742 · Totolink A3002MU

Totolink A3002MU formWsc command injection

EPSS 2%public exploit CVSS 9.9

D-Link2 vulnerabilities on this pageMax CVSS 10.0Priority 55KEV 0

CVE-2026-93958 · D-Link R95

D-Link R95 DHMAPI ssi system os command injection

EPSS 3%public exploit CVSS 9.4

CVE-2026-94089 · D-Link DIR-868L

D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow

EPSS 1.0%public exploit CVSS 10.0

1Panel-dev2 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-77521 · 1Panel-dev MaxKB

MaxKB: Prompt-injectable agent can lead to command execution

EPSS 1%public exploit CVSS 10.0

CVE-2026-79916 · 1Panel-dev MaxKB

MaxKB AWS Bedrock model credential injection leads to remote code execution

EPSS 0.4%CVSS 9.1

Comfast1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-94003 · Comfast CF-N1-S

Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow

EPSS 0.6%public exploit CVSS 10.0

mitre9 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-67827 · mitre

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution (RC…

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-88404 · mitre

A remote code execution (RCE) vulnerability in the UniscriptExecutionService.execute() function (/services/script-execution.service.ts) o…

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-88405 · mitre

A remote code execution (RCE) vulnerability in the RemoteRegisterFunctionService function (/remote/remote-register-function.service.ts) o…

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-78847 · mitre

An issue in gray-matter All versions (verified on 4.0.3) allows the JavaScript engine in lib/engines.js using eval() to parse front matte…

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-88402 · mitre

A SQL injection vulnerability in the checkSQL function of nocobase v2.1.21 allows attackers to access sesntive database information via i…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-88414 · mitre

MCMS 6.1.1 through 6.2.1 contains a SQL injection vulnerability in the PageAction.verify endpoint (GET /ms/mdiy/page/verify.do).

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-88416 · mitre

MCMS 6.1.1 through 6.2.1 has a SQL injection vulnerability in the custom model/form import feature.

EPSS 0.3%public exploit CVSS 9.8

CVE-2026-79313 · mitre

webpy web.py 0.76 is vulnerable to Insufficient Session Expiration.

EPSS 0.4%CVSS 9.8

CVE-2026-36469 · mitre

CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Uplo…

EPSS 0.3%CVSS 9.1

Openpanel-dev1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-93985 · Openpanel-dev openpanel

OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE

EPSS 0.7%public exploit CVSS 9.9

fluent1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-61674 · fluent fluent-bit

Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

EPSS 0.7%public exploit CVSS 9.2

OpenStack2 vulnerabilities on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-94572 · OpenStack Octavia

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not validate the listener and pool tls_ciphers field for control char…

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-94571 · OpenStack Octavia

In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject control characters in the L7 policy redirect_url and redir…

EPSS 0.5%CVSS 9.4

Vanderbilt University1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-90817 · Vanderbilt University REDCap

An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in w…

EPSS 4%CVSS 9.8

laurent221 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-46649 · laurent22 joplin

Joplin: SSO Auth Code Login Missing Rate Limiting — 9-Digit Numeric Code Brute-Forceable via Unprotected Endpoint

EPSS 0.5%public exploit CVSS 9.1

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2025-12999 · Eclipse Foundation Eclipse Open VSX

UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forw…

EPSS 0.3%public exploit CVSS 9.1

ajenti1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-79920 · ajenti ajenti

Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task

EPSS 0.6%CVSS 9.9

BioStar4 vulnerabilities on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-94128 · BioStar VIVID LED DJ

BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94129 · BioStar VALKYRIE AURORA

BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94142 · BioStar Temperature Monitor Utility

BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where

EPSS 0.2%public exploit CVSS 9.3

CVE-2026-94146 · BioStar BIOS Update Utility

BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where

EPSS 0.2%CVSS 9.3

CPANSec2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-93012 · CPANSec

Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendmail_pipe

EPSS 0.6%CVSS 9.8

CVE-2026-78030 · CPANSec

DBI versions before 1.653 for Perl load arbitrary modules via unvalidated dbm_type and dbm_mldbm attributes in DBD::DBM

EPSS 0.4%CVSS 9.8

Mailu1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-85751 · Mailu Mailu

Mailu: Authentication bypass in header-based proxy authentication via spoofable `X-Forwarded-By` trust

EPSS 0.6%CVSS 9.8

OrdaSoft.com3 vulnerabilities on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-88856 · OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

EPSS 0.7%CVSS 9.4

CVE-2026-88857 · OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

EPSS 0.6%CVSS 9.4

CVE-2026-88854 · OrdaSoft.com OrdaSoft Joomla Gallery free extension for Joomla

Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

EPSS 0.4%CVSS 9.3

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-82187 · Unknown Web to Print Online Designer

WooCommerce Online Product Designer 1.7.0 - < 2.15.0 - Unauthenticated Arbitrary File Upload

EPSS 0.5%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-86473 · Apache Software Foundation Apache Airflow

Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

EPSS 0.7%CVSS 9.1

CVE-2026-94301 · Apache Software Foundation Apache MINA

Apache MINA: CVE-2026-47065 resolveProxyClass fix missing from 2.0.X and 2.1.X branches (2.0.30 / 2.1.14) ZDRES-232

EPSS 0.4%CVSS 9.8

nivocart1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-94107 · nivocart nivocart

NivoCart through 2.4.0 Predictable Administrator Password Reset Token

EPSS 0.6%CVSS 9.2

OISF2 vulnerabilities on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2026-94083 · OISF Suricata

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even…

EPSS 0.5%CVSS 9.4

CVE-2026-94084 · OISF Suricata

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header wi…

EPSS 0.5%CVSS 9.4

warp-tech1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-58491 · warp-tech warpgate

Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter

EPSS 0.5%CVSS 9.3

ColorFul1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-94403 · ColorFul iGameCenter

ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference

EPSS 0.2%CVSS 9.3

Moore Threads2 vulnerabilities on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-94424 · Moore Threads MTT S80 Driver Package

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow

EPSS 0.2%CVSS 9.3

CVE-2026-94425 · Moore Threads MTT S80 Driver Package

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management

EPSS 0.2%CVSS 9.3

The archive.