Critical vulnerability archive — page 45

HappySeaFox2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-54626 · HappySeaFox sail

SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-54627 · HappySeaFox sail

SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)

EPSS 0.8%public exploit CVSS 9.8

patriksimek2 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2026-93603 · patriksimek vm2

vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-93605 · patriksimek vm2

vm2 NodeVM before 3.12.1 Remote Code Execution via child_process

EPSS 0.5%CVSS 10.0

LabRedesCefetRJ2 vulnerabilities on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2026-54670 · LabRedesCefetRJ WeGIA

WeGIA: Unauthenticated Auth Bypass + Local File Inclusion

EPSS 0.8%public exploit CVSS 9.1

CVE-2026-54767 · LabRedesCefetRJ WeGIA

WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php

EPSS 0.8%public exploit CVSS 9.1

netbox-community1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2026-54752 · netbox-community devicetype-library

NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request

EPSS 0.7%public exploit CVSS 9.6

julien0401 vulnerability on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2026-47252 · julien040 anyquery

Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)

EPSS 0.7%public exploit CVSS 9.0

GravitLauncher1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-54617 · GravitLauncher Launcher

GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler

EPSS 3%CVSS 9.8

jimprosser1 vulnerability on this pageMax CVSS 9.4Priority 47KEV 0

CVE-2026-54618 · jimprosser obsidian-web-mcp

Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user

EPSS 0.5%public exploit CVSS 9.4

chamilo2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-45140 · chamilo chamilo-lms

Chamilo LMS CStudio upload flow allows unauthenticated remote code execution

EPSS 1%CVSS 9.8

CVE-2026-45143 · chamilo chamilo-lms

Chamilo LMS: Student-to-admin stored XSS in private messages via v-html

EPSS 0.5%CVSS 9.0

Microsoft12 vulnerabilities on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-69843 · Microsoft Microsoft Fabric

Microsoft Fabric Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 10.0

CVE-2026-69865 · Microsoft Azure Container Registry

Microsoft Container Registry Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-85878 · Microsoft Azure HorizonDB

Azure Database for PostgreSQL Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.9

CVE-2026-85885 · Microsoft Microsoft 365 Copilot

Microsoft 365 Copilot Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.9

CVE-2026-70200 · Microsoft Azure Logic Apps

Azure Logic Apps Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 10.0

CVE-2026-85889 · Microsoft Azure AI Foundry

Azure AI Foundry Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 10.0

CVE-2026-87701 · Microsoft Azure Cosmos DB

Azure Cosmos DB Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.6

CVE-2026-69399 · Microsoft Azure ARC

Azure Arc Elevation of Privilege Vulnerability

EPSS 0.6%CVSS 9.9

CVE-2026-70009 · Microsoft Azure ARC

Azure Arc Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 9.8

CVE-2026-83944 · Microsoft Azure Logic Apps

Azure Logic Apps Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 10.0

CVE-2026-62874 · Microsoft Azure Billing

Azure Billing Elevation of Privilege Vulnerability

EPSS 0.3%CVSS 10.0

CVE-2026-77903 · Microsoft Microsoft Dataverse

Microsoft Dataverse Elevation of Privilege Vulnerability

EPSS 0.4%CVSS 9.0

webrecorder1 vulnerability on this pageMax CVSS 9.4Priority 42KEV 0

CVE-2026-54501 · webrecorder browsertrix

Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors

EPSS 1%CVSS 9.4

HGiga1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-93467 · HGiga OAKlouds-custom_page-2.0

HGiga｜OAKlouds - Insecure Deserialization

EPSS 0.9%CVSS 9.8

open-reception1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-54460 · open-reception appointment-booking-software

OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover

EPSS 0.7%CVSS 9.8

prebid1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-54734 · prebid prebid-server-java

Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction

EPSS 0.6%CVSS 10.0

Synology2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-13639 · Synology DiskStation Manager (DSM)

An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86…

EPSS 0.7%CVSS 9.8

CVE-2026-13684 · Synology DiskStation Manager (DSM)

An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806…

EPSS 0.6%CVSS 9.8

brufdev1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2026-54053 · brufdev many-notes

Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults

EPSS 0.7%CVSS 9.6

Cohesity2 vulnerabilities on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-28197 · Cohesity NetBackup Flex OS

Privilege Escalation via Argument Injection in NetBackup Flex OS Shell

EPSS 0.7%CVSS 9.4

CVE-2026-28198 · Cohesity NetBackup Flex OS

Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell

EPSS 0.3%CVSS 9.4

Unknown1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-84738 · Unknown AF Companion

AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE

EPSS 0.8%CVSS 9.1

wavelog1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-54237 · wavelog wavelog

Wavelog: Unauthenticated Remote Code Execution

EPSS 0.8%CVSS 9.3

CPANSec1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-73639 · CPANSec

Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8

EPSS 0.7%CVSS 9.1

HCL Software5 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-67100 · HCL Software HCL BigFix Service Management

HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.5%CVSS 9.8

CVE-2026-56592 · HCL Software HCL BigFix Service Management

HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.3%CVSS 9.8

CVE-2026-21806 · HCL Software HCL BigFix Service Management

HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)

EPSS 0.2%CVSS 9.8

CVE-2026-56590 · HCL Software HCL BigFix Service Management

HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.2%CVSS 9.8

CVE-2026-67101 · HCL Software HCL BigFix Service Management

HCL BigFix Service Management is affected by multiple security vulnerabilities.

EPSS 0.3%CVSS 9.3

team-alembic1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2026-76949 · team-alembic ash_authentication

Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement

EPSS 0.8%CVSS 9.1

Linux2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-92489 · Linux Linux

xfrm: Fix skb double-free in xfrm_dev_direct_output()

EPSS 0.5%CVSS 9.8

CVE-2026-90414 · Linux Linux

IB/isert: reject PDUs declaring more data than was received

EPSS 0.5%CVSS 9.1

ABB1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2023-5778 · ABB Freelance Controller DCP

Missing Length Check

EPSS 0.5%CVSS 9.2

Google3 vulnerabilities on this pageMax CVSS 9.6Priority 36KEV 0

CVE-2026-93372 · Google Chrome

Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outsid…

EPSS 0.4%CVSS 9.6

CVE-2026-93374 · Google Chrome

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.4%CVSS 9.6

CVE-2026-93373 · Google Chrome

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sand…

EPSS 0.3%CVSS 9.6

MongoDB Inc.1 vulnerability on this pageMax CVSS 9.2Priority 36KEV 0

CVE-2026-93393 · MongoDB Inc. C Driver

Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream

EPSS 0.5%CVSS 9.2

AWS1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-92943 · AWS AWSIoTPythonSDK

Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python

EPSS 0.4%CVSS 9.2

The archive.