Critical vulnerability archive — page 52

Yonyou2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2023-54398 · Yonyou U8 Cloud

Yonyou U8 Cloud Java Deserialization RCE via FileManageServlet

EPSS 1%public exploit CVSS 9.8

CVE-2024-58385 · Yonyou U8 CRM

Yonyou U8 CRM SQL Injection via fillbacksettingedit.php

EPSS 0.7%public exploit CVSS 9.8

FlowiseAI2 vulnerabilities on this pageMax CVSS 9.0Priority 48KEV 0

CVE-2026-91932 · FlowiseAI Flowise

Flowise before 3.1.4 Remote Code Execution via cwd Parameter

EPSS 0.7%public exploit CVSS 9.0

CVE-2026-91931 · FlowiseAI Flowise

Flowise before 3.1.4 Remote Code Execution via Custom MCP npx

EPSS 0.7%public exploit CVSS 9.0

Issabel Foundation1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-89026 · Issabel Foundation Issabel Framework

Issabel Framework Hard-coded JWT Key RCE via pbxapi/manager/originate

EPSS 3%CVSS 9.8

motioneye-project1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-46488 · motioneye-project motioneye

motionEye: Authentication possible via password hash

EPSS 0.5%public exploit CVSS 9.1

DIRACGrid2 vulnerabilities on this pageMax CVSS 9.9Priority 43KEV 0

CVE-2026-61667 · DIRACGrid DIRAC

DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval

EPSS 1%CVSS 9.9

CVE-2026-45579 · DIRACGrid DIRAC

DIRAC: RCE in RequestManager due to eval on untrusted input

EPSS 0.9%CVSS 9.9

IBM4 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-53710 · IBM mcp-context-forge

MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server

EPSS 1%CVSS 10.0

CVE-2026-12351 · IBM MQ

IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection

EPSS 0.9%CVSS 9.8

CVE-2026-11928 · IBM Verify Identity Access

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.5%CVSS 9.8

CVE-2026-11921 · IBM Verify Identity Access

Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

EPSS 0.4%CVSS 9.1

tornadoweb2 vulnerabilities on this pageMax CVSS 9.0Priority 43KEV 0

CVE-2024-14029 · tornadoweb tornado

Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding

EPSS 0.4%public exploit CVSS 9.0

CVE-2023-54397 · tornadoweb tornado

Tornado before 6.3.3 HTTP Request Smuggling via Content-Length

EPSS 0.4%CVSS 9.0

Hewlett Packard Enterprise (HPE)6 vulnerabilities on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-76674 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

EPSS 1%CVSS 9.8

CVE-2026-76675 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Authenticated Command Injection Vulnerability Leads to Privilege Escalation in EdgeConnect SD-WAN Gateways

EPSS 1%CVSS 9.1

CVE-2026-76672 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Authenticated Sensitive Information Disclosure in HPE Networking EdgeConnect SD-WAN Orchestrator

EPSS 0.5%CVSS 9.9

CVE-2026-76673 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Authentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator

EPSS 0.6%CVSS 9.8

CVE-2026-76669 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

EPSS 0.5%CVSS 9.9

CVE-2026-76670 · Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

EPSS 0.5%CVSS 9.9

Artifex Software1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-39919 · Artifex Software Ghostscript

Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter

EPSS 0.8%CVSS 9.8

OpenIdentityPlatform1 vulnerability on this pageMax CVSS 9.2Priority 41KEV 0

CVE-2026-46495 · OpenIdentityPlatform OpenDJ

OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI

EPSS 1%CVSS 9.2

equinor1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-55211 · equinor surfio

surfio IRAP header size fields cause out-of-bounds reads

EPSS 0.7%CVSS 9.8

libwebsockets1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-19773 · libwebsockets libwebsockets

libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

EPSS 0.6%CVSS 9.8

maziggy1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-53459 · maziggy bambuddy

Bambuddy's authentication fails open on database errors, allowing unauthenticated access to all endpoints

EPSS 0.8%CVSS 9.3

Mozilla6 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

wktk1 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2026-55158 · wktk conflibot

Conflibot: Command injection via crafted pull request branch names under pull_request_target

EPSS 0.8%CVSS 9.1

Dell6 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-63695 · Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.

EPSS 0.5%CVSS 9.8

CVE-2026-81236 · Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

EPSS 0.4%CVSS 9.8

CVE-2026-81239 · Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

EPSS 0.4%CVSS 9.8

CVE-2026-81240 · Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Unrestricted Upload of File with Dangerous Type vulnerability.

EPSS 0.4%CVSS 9.8

CVE-2026-63696 · Dell SmartFabric OS10 Software

Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Download of Code Without Integrity Check vulnerability.

EPSS 0.3%CVSS 9.1

CVE-2026-81238 · Dell Wyse Management Suite

Dell Wyse Management Suite, versions prior to 2605.0.3.683, contain a Missing Authentication for Critical Function vulnerability.

EPSS 0.3%CVSS 9.1

designcomputer1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-59971 · designcomputer mysql_mcp_server

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / Direct Exposure)

EPSS 0.4%CVSS 10.0

FreeRDP1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-91949 · FreeRDP FreeRDP

FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

EPSS 0.6%CVSS 9.3

Google2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-55366 · Google Android

In IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the code.

EPSS 0.5%CVSS 9.8

CVE-2026-56960 · Google Android

In multiple locations, there is a possible use-after-free due to a logic error in the code.

EPSS 0.4%CVSS 9.8

http4s1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-69204 · http4s http4s

Http4s: Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)

EPSS 0.6%CVSS 9.2

Arista Networks1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-73458 · Arista Networks EOS

On affected platforms running Arista EOS with authenticated Bidirectional Forwarding Detection (BFD) sessions configured, a specially crafted packet can cause the BFD session(s) to go down. This may result in undesirable network changes because various rou

EPSS 0.4%CVSS 9.2

bookstackapp1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-89022 · bookstackapp bookstack

BookStack < 26.05.5 Authentication Bypass via Social Login Provider Confusion

EPSS 0.5%CVSS 9.1

Slab2 vulnerabilities on this pageMax CVSS 9.0Priority 35KEV 0

CVE-2026-77866 · Slab safeurl

SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts

EPSS 0.5%CVSS 9.0

CVE-2026-77972 · Slab safeurl

safeurl validated address is not bound to the request, allowing DNS rebinding

EPSS 0.3%CVSS 9.0

dep0we1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-91988 · dep0we atomic-agents-stack

atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP

EPSS 0.3%CVSS 9.2

woodpecker-ci1 vulnerability on this pageMax CVSS 9.0Priority 31KEV 0

CVE-2026-61549 · woodpecker-ci woodpecker

Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

EPSS 0.3%CVSS 9.0

Docker1 vulnerability on this pageMax CVSS 9.4Priority 30KEV 0

CVE-2026-77179 · Docker Docker Sandboxes

Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

EPSS 0.2%CVSS 9.4

The archive.