Critical vulnerability archive — page 57

WAVLINK Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-89010 · WAVLINK Technology WN535M1

WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server

EPSS 3%public exploit CVSS 9.8

CVE-2026-89009 · WAVLINK Technology WN535M1

WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server

EPSS 1%public exploit CVSS 9.1

SPIP2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-72710 · SPIP SPIP

SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection

EPSS 1%public exploit CVSS 9.8

CVE-2026-72709 · SPIP SPIP

SPIP < 4.4.18 Missing Authorization via ecrire/action/

EPSS 0.7%public exploit CVSS 9.8

SGLang1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-86793 · SGLang SGLang

CVE-2026-86793

EPSS 0.8%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-79396 · mitre

Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account crede…

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-79395 · mitre

An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xion…

EPSS 0.8%CVSS 9.8

CVE-2026-52630 · mitre

SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and t…

EPSS 0.7%CVSS 9.8

CVE-2026-71644 · mitre

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe…

EPSS 0.6%CVSS 9.8

authorizerdev1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-54072 · authorizerdev authorizer

Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL

EPSS 0.5%public exploit CVSS 9.3

Progress Software1 vulnerability on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2026-80462 · Progress Software Chef Automate

Privilege Escalation in Progress Chef Automate

EPSS 2%CVSS 10.0

WWBN6 vulnerabilities on this pageMax CVSS 9.3Priority 44KEV 0

mulika1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-8778 · mulika MIPL Grouped Checkout Fields for WooCommerce. Customize & Organize Checkout Fields.

MIPL Grouped Checkout Fields for WooCommerce <= 1.2.2 - Unauthenticated Arbitrary File Upload

EPSS 1%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-82617 · Apache Software Foundation Apache OpenNLP

Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns

EPSS 0.8%CVSS 10.0

IBM6 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-81204 · IBM Langflow OSS

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

EPSS 0.9%CVSS 9.8

CVE-2026-79724 · IBM Langflow OSS

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

EPSS 0.7%CVSS 9.8

CVE-2026-78573 · IBM ContextForge MCP Gateway

IBM ContextForge MCP Gateway is affected by use of default credentials

EPSS 0.6%CVSS 9.8

CVE-2026-82100 · IBM DataStage on Cloud Pak for Data

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

EPSS 0.6%CVSS 9.6

CVE-2026-19646 · IBM Common Licensing

Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent

EPSS 0.5%CVSS 9.1

CVE-2026-80424 · IBM DataStage on Cloud Pak for Data

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

EPSS 0.5%CVSS 9.1

Unknown3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-14560 · Unknown teddy-bear-customize-addon

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Arbitrary File Upload

EPSS 0.8%CVSS 10.0

CVE-2026-14559 · Unknown teddy-bear-customize-addon

Teddy Bear Customize Addon <= 1.0.5 - Unauthenticated Account Takeover

EPSS 0.5%CVSS 9.8

CVE-2026-14563 · Unknown advanced-customized-prompts

Advanced Customized Prompts <= 1.0.1 - Unauthenticated Account Takeover

EPSS 0.5%CVSS 9.8

Linux5 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

GetSimpleCMS-CE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-53952 · GetSimpleCMS-CE GetSimpleCMS-CE

GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw

EPSS 0.6%CVSS 9.8

gohugoio2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-89259 · gohugoio hugo

Hugo before v0.165.0 Insufficient Permission Restriction via TailwindCSS

EPSS 0.6%CVSS 9.8

CVE-2026-89258 · gohugoio hugo

Hugo before v0.165.0 Symlink Confinement Bypass via resources.Get

EPSS 0.5%CVSS 9.3

mistralai6 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-87985 · mistralai mistral-vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using ANSI-C quoted argu…

EPSS 0.6%CVSS 10.0

CVE-2026-87986 · mistralai mistral-vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using shell constructs i…

EPSS 0.6%CVSS 10.0

CVE-2026-87987 · mistralai mistral-vibe

An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variab…

EPSS 0.6%CVSS 10.0

CVE-2026-87983 · mistralai mistral-vibe

An arbitrary file read vulnerability in Mistral Vibe, introduced in version 2.6.0, allows an attacker to bypass workspace restrictions us…

EPSS 0.6%CVSS 9.2

CVE-2026-87988 · mistralai mistral-vibe

An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as…

EPSS 0.4%CVSS 10.0

CVE-2026-87984 · mistralai mistral-vibe

An arbitrary file write vulnerability in Mistral Vibe, introduced in version 1.3.4, allows an attacker to create or overwrite files outsi…

EPSS 0.5%CVSS 9.3

ThemeRex1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-62105 · ThemeRex ThemeREX Addons

WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

wpeverest1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-62103 · wpeverest Everest Forms

WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

Fortinet1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-84390 · Fortinet FortiMonitorOnSight

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSigh…

EPSS 0.5%CVSS 9.6

Schneider Electric1 vulnerability on this pageMax CVSS 9.2Priority 37KEV 0

CVE-2026-3869 · Schneider Electric Modicon M580

CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity a…

EPSS 0.5%CVSS 9.2

Perforce1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-89212 · Perforce Akana

XML External Entity in Akana API Platform

EPSS 0.4%CVSS 9.2

Cloud Foundry Foundation1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-47839 · Cloud Foundry Foundation UAA

Federated OIDC Users Can Bypass externalGroupsWhitelist to Gain uaa.admin

EPSS 0.3%CVSS 9.2

LaciSynchroni1 vulnerability on this pageMax CVSS 9.2Priority 32KEV 0

CVE-2026-54047 · LaciSynchroni server

Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation

EPSS 0.3%CVSS 9.2

ST Engineering iDirect1 vulnerability on this pageMax CVSS 9.4Priority 29KEV 0

CVE-2026-38056 · ST Engineering iDirect Evolution iQ‑Series terminals

ST Engineering iDirect iQ-Series Terminals Missing Authorization

EPSS 0.2%CVSS 9.4

The archive.