Critical vulnerability archive — page 55

GitLab2 vulnerabilities on this pageMax CVSS 10.0Priority 100KEV 1

CVE-2026-85706 · GitLab GitLab

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

KEV · due 14 Sep EPSS 97%public exploit SSVC act CVSS 10.0

CVE-2026-87719 · GitLab GitLab

Deserialization of Untrusted Data in GitLab

EPSS 0.6%CVSS 9.9

Totolink4 vulnerabilities on this pageMax CVSS 9.9Priority 51KEV 0

langbot-app1 vulnerability on this pageMax CVSS 9.2Priority 49KEV 0

CVE-2026-90562 · langbot-app LangBot

LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

EPSS 0.7%public exploit CVSS 9.2

stellarwp2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-78006 · stellarwp The Events Calendar

The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution

EPSS 1%CVSS 9.8

CVE-2026-78159 · stellarwp The Events Calendar

The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation

EPSS 1%CVSS 9.8

D-Link1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-90680 · D-Link DIR-823G

D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow

EPSS 0.9%CVSS 9.9

irontec1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-90558 · irontec sngrep

sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

EPSS 0.9%CVSS 9.8

Unknown8 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-81402 · Unknown DS Ad Rotator

DS Ad Rotator <= 0.8 - Unauthenticated Arbitrary File Upload

EPSS 0.8%CVSS 9.8

CVE-2026-82845 · Unknown Masteriyo LMS

Masteriyo LMS < 3.4.1 - Subscriber+ PHP Object Injection

EPSS 0.6%CVSS 9.9

CVE-2026-84171 · Unknown WP images upload on piclect

WP Images Upload on Piclect <= 1.0 - Unauthenticated Arbitrary File Upload

EPSS 0.7%CVSS 9.8

CVE-2026-75800 · Unknown Frontegg SAML SSO

Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse

EPSS 0.6%CVSS 9.8

CVE-2026-81648 · Unknown CryptoPayment Gateway

CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

EPSS 0.5%CVSS 10.0

CVE-2026-85681 · Unknown WP Component

WP Component <= 2.2.4 - Unauthenticated Privilege Escalation via Arbitrary Blog Option Update

EPSS 0.5%CVSS 9.8

CVE-2026-77005 · Unknown CODE MONKEYS PROPOSALS

Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

EPSS 0.4%CVSS 9.6

CVE-2026-77006 · Unknown WebTotem Backups

WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal

EPSS 0.2%CVSS 9.6

Contec Co., Ltd.1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-82787 · Contec Co., Ltd. CPSL-08P1EN

Missing authentication for critical function vulnerability exists in CPSL-08P1EN.

EPSS 0.7%CVSS 9.8

Linux25 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-89654 · Linux Linux

ceph: fix UAF in check_new_map() on session freed during unlock

EPSS 0.7%CVSS 9.8

CVE-2026-89655 · Linux Linux

ceph: fix UAF in __kick_flushing_caps() on cf entry freed during unlock

EPSS 0.7%CVSS 9.8

CVE-2026-89662 · Linux Linux

NFSD: Prevent lock owner use-after-free during client teardown

EPSS 0.7%CVSS 9.8

CVE-2026-89669 · Linux Linux

nfsd: initialize copy-notify stateid before publishing it

EPSS 0.7%CVSS 9.8

CVE-2026-89686 · Linux Linux

nfsd: fix BUG_ON in nfsd4_alloc_layout_stateid on racing delegation revoke

EPSS 0.7%CVSS 9.8

CVE-2026-89688 · Linux Linux

nfsd: drop the stateid, not the stateowner, on seqid_op replay retry

EPSS 0.7%CVSS 9.8

CVE-2026-89712 · Linux Linux

NFSD: restart ssc_expire_umount walk after dropping nfsd_ssc_lock

EPSS 0.7%CVSS 9.8

CVE-2026-89658 · Linux Linux

NFSD: Prevent client use-after-free during NFSv4.0 revoked-state cleanup

EPSS 0.6%CVSS 9.8

CVE-2026-89660 · Linux Linux

NFSD: Prevent client use-after-free during admin state revocation

EPSS 0.6%CVSS 9.8

CVE-2026-89677 · Linux Linux

nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()

EPSS 0.6%CVSS 9.8

CVE-2026-89681 · Linux Linux

nfsd: fix layout fence worker double-reference race

EPSS 0.6%CVSS 9.8

CVE-2026-89689 · Linux Linux

nfsd: don't free session slots that are still in use

EPSS 0.6%CVSS 9.8

CVE-2026-89703 · Linux Linux

nfsd: set SC_STATUS_FREED in nfsd4_drop_revoked_stid for delegations

EPSS 0.6%CVSS 9.8

CVE-2026-89653 · Linux Linux

ceph: reject export_targets ranks >= CEPH_MAX_MDS in mdsmap decode

EPSS 0.5%CVSS 9.8

CVE-2026-89656 · Linux Linux

libceph: reject buckets with mismatched CRUSH ids

EPSS 0.5%CVSS 9.8

CVE-2026-89659 · Linux Linux

NFSD: Prevent client use-after-free during delegation revoke

EPSS 0.5%CVSS 9.8

CVE-2026-89674 · Linux Linux

nfsd: fix XDR length calculation in nfsd4_ff_encode_layoutget

EPSS 0.5%CVSS 9.8

CVE-2026-89676 · Linux Linux

nfsd: fix stale s2s_cp_stateids IDR entry for async COPY

EPSS 0.5%CVSS 9.8

CVE-2026-89697 · Linux Linux

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

EPSS 0.7%CVSS 9.1

CVE-2026-89702 · Linux Linux

nfsd: size fh_verify server sockaddr slot by xpt_locallen

EPSS 0.5%CVSS 9.8

CVE-2026-89713 · Linux Linux

NFSD: check truncate permission under inode lock

EPSS 0.7%CVSS 9.1

CVE-2026-89672 · Linux Linux

nfsd: gate nfs2 setacl by argp->mask

EPSS 0.6%CVSS 9.1

CVE-2026-89675 · Linux Linux

nfsd: fix UAF in async copy cancel and shutdown

EPSS 0.4%CVSS 9.8

CVE-2026-89708 · Linux Linux

nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown

EPSS 0.4%CVSS 9.8

CVE-2026-89671 · Linux Linux

nfsd: gate nfs3 setacl by argp->mask

EPSS 0.5%CVSS 9.1

regularlabs.com1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-85192 · regularlabs.com Conditional Content Pro extension for Joomla

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

EPSS 0.7%CVSS 9.4

Tonec1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-90493 · Tonec Internet Download Manager

Tonec Internet Download Manager Kernel Driver idmwfp.sys access control

EPSS 0.2%public exploit CVSS 9.3

strapi1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-90561 · strapi strapi

Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG

EPSS 0.4%CVSS 9.3

CISA1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-90456 · CISA Malcolm

Use of default credentials in Malcolm

EPSS 0.3%CVSS 9.2

Kalkitech1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-90647 · Kalkitech ASE2000 V2 Communication Test Set

ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows contains an improper certificate validation vulnerability in…

EPSS 0.2%CVSS 9.1

The archive.