Critical vulnerability archive — page 61

checkpoint2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-85102 · checkpoint Quantum Security Gateway

Improper Certificate Validation in Quantum Security Gateway

KEV · due 25 Sep EPSS 54%public exploit SSVC act CVSS 9.8

CVE-2026-85103 · checkpoint Quantum Security Gateway

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

EPSS 4%CVSS 9.8

Dell3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-79689 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutr…

EPSS 5%CVSS 9.8

CVE-2026-79941 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutr…

EPSS 5%CVSS 9.8

CVE-2026-80172 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient V…

EPSS 0.3%CVSS 9.8

MaxSite2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-87929 · MaxSite MaxSite CMS

MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-87930 · MaxSite MaxSite CMS

MaxSite CMS through 109.6 PHP Object Injection via ci_session

EPSS 0.6%public exploit CVSS 9.2

NationalSecurityAgency1 vulnerability on this pageMax CVSS 9.6Priority 47KEV 0

CVE-2026-54694 · NationalSecurityAgency skills-service

NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover

EPSS 0.5%public exploit CVSS 9.6

eProsima1 vulnerability on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-22590 · eProsima Fast-DDS

Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage

EPSS 0.5%public exploit CVSS 9.1

grokability1 vulnerability on this pageMax CVSS 9.6Priority 45KEV 0

CVE-2026-86751 · grokability snipe-it

Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown

EPSS 0.4%public exploit CVSS 9.6

Perforce1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-85978 · Perforce Akana

Unauthenticated Remote Code Execution in Akana API Platform

EPSS 1%CVSS 10.0

AWS1 vulnerability on this pageMax CVSS 9.6Priority 44KEV 0

CVE-2026-87911 · AWS AWS Labs postgres MCP Server

Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server

EPSS 2%CVSS 9.6

KGUARD1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2026-87827 · KGUARD KGUARD_firmware

KGUARD DVR unauthenticated remote command execution vulnerability

EPSS 1%CVSS 10.0

Google Cloud1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-79696 · Google Cloud Agent Development Kit (ADK) for Python

Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist

EPSS 0.7%CVSS 10.0

Samsung Mobile3 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-21095 · Samsung Mobile Samsung Mobile Devices

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute ar…

EPSS 0.8%CVSS 9.8

CVE-2026-21096 · Samsung Mobile Samsung Mobile Devices

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute a…

EPSS 0.8%CVSS 9.8

CVE-2026-21102 · Samsung Mobile Samsung Mobile Devices

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

EPSS 0.2%CVSS 9.3

WebPros1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-67401 · WebPros cPanel

A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component

EPSS 0.9%CVSS 9.9

Apache Software Foundation3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-41871 · Apache Software Foundation Apache Nutch

Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

EPSS 0.7%CVSS 9.8

CVE-2026-41869 · Apache Software Foundation Apache Nutch

Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

EPSS 0.7%CVSS 9.1

CVE-2026-56207 · Apache Software Foundation Apache Impala

Apache Impala: SAML authentication bypass via forged bearer token

EPSS 0.5%CVSS 9.8

Behavioral Technology Group1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2026-87931 · Behavioral Technology Group Pavlok Behavioral Conditioning Wearable

Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow

EPSS 0.6%CVSS 9.6

mantisbt1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-47156 · mantisbt mantisbt

MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator

EPSS 0.7%CVSS 9.3

mitre1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-38626 · mitre

Garlic-Hub v1.0.1 is vulnerable to SQL Injection in src/Modules/Items/Repositories/ItemsRepository.php.

EPSS 0.5%CVSS 9.8

Google21 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-87448 · Google Chrome

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbo…

EPSS 0.5%CVSS 9.6

CVE-2026-87455 · Google Chrome

Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside th…

EPSS 0.5%CVSS 9.6

CVE-2026-87470 · Google Chrome

Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially execute a…

EPSS 0.5%CVSS 9.6

CVE-2026-87474 · Google Chrome

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outsid…

EPSS 0.5%CVSS 9.6

CVE-2026-87494 · Google Chrome

Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering t…

EPSS 0.5%CVSS 9.6

CVE-2026-87528 · Google Chrome

Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary c…

EPSS 0.5%CVSS 9.6

CVE-2026-87529 · Google Chrome

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code…

EPSS 0.5%CVSS 9.6

CVE-2026-87547 · Google Chrome

Incorrect reference resolution in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineer…

EPSS 0.5%CVSS 9.6

CVE-2026-87558 · Google Chrome

Use after free in Payments in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside…

EPSS 0.5%CVSS 9.6

CVE-2026-87581 · Google Chrome

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially…

EPSS 0.5%CVSS 9.6

CVE-2026-87595 · Google Chrome

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to…

EPSS 0.4%CVSS 9.8

CVE-2026-87634 · Google Chrome

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code ou…

EPSS 0.5%CVSS 9.6

CVE-2026-87637 · Google Chrome

Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outsid…

EPSS 0.5%CVSS 9.6

CVE-2026-87638 · Google Chrome

Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outs…

EPSS 0.5%CVSS 9.6

CVE-2026-87643 · Google Chrome

Integer overflow in GPU in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary…

EPSS 0.5%CVSS 9.6

CVE-2026-87504 · Google Chrome

Use after free in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitra…

EPSS 0.4%CVSS 9.6

CVE-2026-87526 · Google Chrome

Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentiall…

EPSS 0.4%CVSS 9.6

CVE-2026-87609 · Google Chrome

Use after free in Sharing in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside t…

EPSS 0.4%CVSS 9.6

CVE-2026-87544 · Google Chrome

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restricti…

EPSS 0.3%CVSS 9.8

CVE-2026-87613 · Google Chrome

Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arb…

EPSS 0.5%CVSS 9.0

CVE-2026-87534 · Google Chrome

Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engine…

EPSS 0.3%CVSS 9.8

pandora-analysis1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2026-88069 · pandora-analysis pandora

Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis

EPSS 0.5%CVSS 9.3

parse-community1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-87806 · parse-community parse-server

Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password

EPSS 0.5%CVSS 9.1

Sage2 vulnerabilities on this pageMax CVSS 9.0Priority 31KEV 0

CVE-2026-67403 · Sage Sage AR Automation

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.

EPSS 0.3%CVSS 9.0

CVE-2026-68484 · Sage Sage AR Automation

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.

EPSS 0.3%CVSS 9.0

PayTR Payment and Electronic Money Institution Inc.1 vulnerability on this pageMax CVSS 9.1Priority 30KEV 0

CVE-2026-16272 · PayTR Payment and Electronic Money Institution Inc. PayTR Virtual Pos iFrame API WHMCS Module

Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

EPSS 0.2%CVSS 9.1

The archive.