Critical vulnerability archive — page 47

Cisco20 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-76460 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Authentication Bypass Vulnerability

KEV · due 19 Sep EPSS 76%public exploit SSVC act CVSS 10.0

CVE-2026-20242 · Cisco Cisco Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

EPSS 0.9%CVSS 9.8

CVE-2026-20324 · Cisco Cisco Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability

EPSS 0.6%CVSS 9.9

CVE-2026-76423 · Cisco Cisco Identity Services Engine Software

Cisco ISE API Authentication Bypass Vulnerability

EPSS 0.6%CVSS 10.0

CVE-2026-20130 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities

EPSS 0.5%CVSS 10.0

CVE-2026-20176 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.1

CVE-2026-20211 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.1

CVE-2026-20326 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function

EPSS 0.6%CVSS 9.8

CVE-2026-20192 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities

EPSS 0.5%CVSS 10.0

CVE-2026-20325 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command

EPSS 0.5%CVSS 9.9

CVE-2026-20329 · Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities

EPSS 0.5%CVSS 9.9

CVE-2026-20330 · Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities

EPSS 0.5%CVSS 9.9

CVE-2026-20234 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities

EPSS 0.4%CVSS 9.9

CVE-2026-20322 · Cisco Cisco Nexus Dashboard

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control

EPSS 0.4%CVSS 9.9

CVE-2026-20332 · Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities

EPSS 0.4%CVSS 9.9

CVE-2026-20341 · Cisco Cisco Secure Firewall Management Center (FMC)

Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability

EPSS 0.6%CVSS 9.1

CVE-2026-20194 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities

EPSS 0.5%CVSS 9.1

CVE-2026-20237 · Cisco Cisco Identity Services Engine Software

Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities

EPSS 0.5%CVSS 9.1

CVE-2026-20284 · Cisco Cisco Identity Services Engine Software

Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability

EPSS 0.5%CVSS 9.1

CVE-2026-20331 · Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software

Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Protection Mechanism Failure Vulnerabilities

EPSS 0.3%CVSS 9.6

feast-dev1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-92787 · feast-dev feast

Feast through 0.66.0 Authentication Bypass via Unverified Token

EPSS 0.7%public exploit CVSS 9.8

Angel-ML1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-92785 · Angel-ML angel

Angel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes

EPSS 0.6%public exploit CVSS 9.2

chaitin1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-92749 · chaitin SafeLine

SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

EPSS 0.7%public exploit CVSS 9.2

WWBN1 vulnerability on this pageMax CVSS 9.2Priority 48KEV 0

CVE-2026-92578 · WWBN AVideo

WWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash

EPSS 0.6%public exploit CVSS 9.2

decaporg1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-92812 · decaporg decap-cms

Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching

EPSS 0.4%public exploit CVSS 9.8

cobbr1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-92717 · cobbr Covenant

Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub

EPSS 0.5%public exploit CVSS 9.3

Shuffle1 vulnerability on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-92716 · Shuffle Shuffle

Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation

EPSS 0.4%public exploit CVSS 9.6

HKUDS1 vulnerability on this pageMax CVSS 9.2Priority 45KEV 0

CVE-2026-92576 · HKUDS nanobot

HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool

EPSS 0.4%public exploit CVSS 9.2

JasperFx1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-75513 · JasperFx marten

Marten: SQL injection in Marten's LINQ provider via unescaped string literals

EPSS 0.5%public exploit CVSS 9.1

sh1zen1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-87796 · sh1zen Multi Uploader for Gravity Forms

Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

EPSS 1%CVSS 9.8

HP Inc.10 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-91097 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2026-91098 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2026-91099 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1.0%CVSS 9.8

CVE-2026-91101 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1.0%CVSS 9.8

CVE-2026-91103 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1.0%CVSS 9.8

CVE-2026-91104 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2026-91105 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2026-91106 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 1%CVSS 9.8

CVE-2026-91102 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 0.8%CVSS 9.8

CVE-2026-91100 · HP Inc. HP Linux Imaging and Printing Software (HPLIP)

HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities

EPSS 0.7%CVSS 9.8

Arista Networks1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-73456 · Arista Networks EOS

Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised switch.

EPSS 0.7%CVSS 10.0

uvdesk1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-92805 · uvdesk community-skeleton

UVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard

EPSS 0.6%CVSS 9.8

Altium1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-92808 · Altium Altium Enterprise Server

Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise

EPSS 0.6%CVSS 10.0

HP Inc2 vulnerabilities on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-89082 · HP Inc HP AC Print & Scan

HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

EPSS 0.7%CVSS 9.3

CVE-2026-89083 · HP Inc HP AC Print & Scan

HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

EPSS 0.7%CVSS 9.3

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-68536 · Apache Software Foundation Apache MyFaces

Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability

EPSS 0.5%CVSS 9.8

kubero-dev1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-92720 · kubero-dev kubero

Kubero through 3.1.1 Unauthenticated Notifications API Access

EPSS 0.6%CVSS 9.3

mitre1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-55787 · mitre

In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.

EPSS 0.5%CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-86707 · Unknown Private Feed Key

Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter

EPSS 0.5%CVSS 9.8

djust-org1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-61594 · djust-org djust

djust has an authorization bypass on the WebSocket/SSE mount path

EPSS 0.5%CVSS 9.1

The archive.