Critical vulnerability archive — page 44

Totolink4 vulnerabilities on this pageMax CVSS 10.0Priority 52KEV 0

CVE-2026-93740 · Totolink A3002MU

Totolink A3002MU formWlEncrypt buffer overflow

EPSS 0.9%public exploit CVSS 10.0

CVE-2026-93738 · Totolink A3002MU

Totolink A3002MU formSchedule buffer overflow

EPSS 0.9%public exploit CVSS 9.9

CVE-2026-93739 · Totolink A3002MU

Totolink A3002MU formWlAc buffer overflow

EPSS 0.9%public exploit CVSS 9.9

CVE-2026-93741 · Totolink A3002MU

Totolink A3002MU formWlWds buffer overflow

EPSS 0.7%public exploit CVSS 10.0

ModelTC1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-93839 · ModelTC LightLLM

LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint

EPSS 0.8%public exploit CVSS 9.8

patriksimek2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-93606 · patriksimek vm2

vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-93605 · patriksimek vm2

vm2 NodeVM before 3.12.1 Remote Code Execution via child_process

EPSS 0.5%CVSS 10.0

Hongjing1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-54399 · Hongjing e-HR

Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree

EPSS 0.7%public exploit CVSS 9.8

strukturag1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-84383 · strukturag libheif

libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items

EPSS 0.7%public exploit CVSS 9.8

Cotonti1 vulnerability on this pageMax CVSS 9.2Priority 49KEV 0

CVE-2026-93868 · Cotonti Cotonti

Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG

EPSS 0.7%public exploit CVSS 9.2

ArnasDon1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-77240 · ArnasDon wacrm

WACRM: Database-layer authorization bypasses

EPSS 0.5%public exploit CVSS 9.9

CPANSec1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2026-93019 · CPANSec

Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read

EPSS 0.7%public exploit CVSS 9.1

Gravity Forms1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-84434 · Gravity Forms Gravity Forms

Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field

EPSS 4%CVSS 9.8

1Panel-dev1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-63647 · 1Panel-dev CordysCRM

CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`

EPSS 0.5%public exploit CVSS 9.3

xwiki1 vulnerability on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2025-53837 · xwiki xwiki-rendering

org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue

EPSS 2%CVSS 9.9

InternLM1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-66455 · InternLM lmdeploy

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

EPSS 1%CVSS 9.8

AxDSan1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-59163 · AxDSan mnemosyne

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

EPSS 0.3%public exploit CVSS 9.1

IBM17 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-10747 · IBM MQ Appliance

IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing

EPSS 0.9%CVSS 10.0

CVE-2026-10027 · IBM MQ

IBM MQ queue manager is vulnerable to unauthenticated remote code execution

EPSS 0.8%CVSS 9.8

CVE-2026-81657 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.8%CVSS 9.8

CVE-2026-80442 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.9

CVE-2026-82340 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.7%CVSS 9.8

CVE-2026-82967 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.8%CVSS 9.8

CVE-2026-84064 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.9

CVE-2026-84082 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.7%CVSS 9.8

CVE-2026-10858 · IBM MQ for HPE NonStop

IBM MQ for HPE NonStop is vulnerable to a denial of service attack

EPSS 0.6%CVSS 9.9

CVE-2026-80441 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.8

CVE-2026-82832 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.6

CVE-2026-84075 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.9

CVE-2026-75878 · IBM Sterling File Gateway

IBM Sterling File Gateway is Vulnerable to Authentication Bypass

EPSS 0.6%CVSS 9.1

CVE-2026-84078 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.5%CVSS 9.9

CVE-2026-84031 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.6%CVSS 9.0

CVE-2026-84073 · IBM Guardium Data Protection

IBM Guardium Data Protection is affected by multiple vulnerabilities.

EPSS 0.4%CVSS 9.1

CVE-2025-15399 · IBM Common Licensing

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

EPSS 0.3%CVSS 10.0

pgpartman1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-61781 · pgpartman pg_partman

pg_partman has privilege escalation through SQL injection in create_partition_time()

EPSS 0.8%CVSS 9.9

ultravioletrs2 vulnerabilities on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-92702 · ultravioletrs cocos

Cocos AI: Intra-handshake attested TLS implementation can accept Evidence with nil, empty, or omitted reportData in the AMD SEV-SNP path

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-92701 · ultravioletrs cocos

Cocos AI: Intra-handshake attested TLS implementation is vulnerable to session-misbinding attacks for Intel TDX verifier path

EPSS 0.2%public exploit CVSS 9.1

Icinga1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-61550 · Icinga icinga2

Icinga 2: Improper access control for JSON-RPC update certificate messages

EPSS 0.7%CVSS 9.8

Interchange1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-75031 · Interchange Interchange

In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin fea…

EPSS 0.7%CVSS 9.8

FluidSynth1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-58264 · FluidSynth fluidsynth

FluidSynth: Heap-based buffer overrun

EPSS 0.6%CVSS 9.8

MongoDB Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-93762 · MongoDB Inc. Mongoid

Data deletion and attribute disclosure via field-name method injection in in-memory queries

EPSS 0.6%CVSS 9.8

CVE-2026-93765 · MongoDB Inc. Mongoid

Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation

EPSS 0.5%CVSS 9.1

Red Hat1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-75885 · Red Hat Red Hat OpenShift Container Platform 4.12

Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint

EPSS 0.7%CVSS 9.3

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-86591 · Unknown Botiga Pro

Botiga Pro < 1.6.5 - Unauthenticated Arbitrary Blog Options Update via Templates Builder REST Route

EPSS 0.5%CVSS 9.8

brechtvds1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-89274 · brechtvds WP Recipe Maker

WP Recipe Maker <= 10.8.1 - Unauthenticated Arbitrary Shortcode Execution via Recipe Comment Content

EPSS 0.7%CVSS 9.1

wpmudev1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-92229 · wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder

Forminator Forms <= 1.57.2 - Unauthenticated Arbitrary Shortcode Execution via 'current_url' Parameter

EPSS 0.7%CVSS 9.1

kcp-dev1 vulnerability on this pageMax CVSS 9.9Priority 36KEV 0

CVE-2026-61682 · kcp-dev kcp

kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters in any workspace

EPSS 0.4%CVSS 9.9

CareCam2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-81321 · CareCam HMT.CM2507 Firmware

CareCam CM2507 Cleartext Storage of Sensitive Information

EPSS 0.3%CVSS 9.8

CVE-2026-85497 · CareCam HMT.CM2507 Firmware

CareCam CM2507 Use of Password Hash With Insufficient Computational Effort

EPSS 0.3%CVSS 9.8

OISF1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-57228 · OISF suricata

Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder

EPSS 0.4%CVSS 9.1

The archive.