Critical vulnerability archive — page 64

Adobe1 vulnerability on this pageMax CVSS 10.0Priority 98KEV 1

CVE-2026-75650 · Adobe Adobe Commerce

Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

KEV · due 11 Sep EPSS 4%public exploit SSVC act CVSS 10.0

Advantech2 vulnerabilities on this pageMax CVSS 9.9Priority 58KEV 0

CVE-2026-79697 · Advantech WISE-6610-NB

Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection

EPSS 5%public exploit CVSS 9.9

CVE-2026-79698 · Advantech WISE-6610-NB

Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection

EPSS 3%public exploit CVSS 9.9

librenms1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2026-86426 · librenms librenms

LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

EPSS 4%public exploit CVSS 9.8

Linksys1 vulnerability on this pageMax CVSS 9.9Priority 58KEV 0

CVE-2026-86299 · Linksys RE7000

Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

EPSS 4%public exploit CVSS 9.9

D-Link4 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

Tenda2 vulnerabilities on this pageMax CVSS 9.9Priority 57KEV 0

CVE-2026-86167 · Tenda HG10

Tenda HG10 Boa formgponConf os command injection

EPSS 3%public exploit CVSS 9.9

CVE-2026-86165 · Tenda HG10

Tenda HG10 formURL buffer overflow

EPSS 1%public exploit CVSS 9.8

curl2 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-19931 · curl curl

Negotiate ambient user conn reuse

EPSS 1%public exploit CVSS 9.8

CVE-2026-18924 · curl curl

HTTP/2 server push UAF

EPSS 0.6%public exploit CVSS 9.1

mitre7 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-79574 · mitre

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message.

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-79569 · mitre

Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-79570 · mitre

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data.

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-79576 · mitre

An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7 allows attackers to authenticate as any user, including t…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-79577 · mitre

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via se…

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-79571 · mitre

Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access a…

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-78997 · mitre

UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains a Universal Cross-Site Scripting vulnerability that allo…

EPSS 0.4%public exploit CVSS 9.3

Hitachi2 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-71376 · Hitachi Cosminexus Component Container

OS Command Injection Vulnerability in Cosminexus Component Container

EPSS 2%CVSS 9.8

CVE-2026-71374 · Hitachi Cosminexus Component Container

Deserialization of Untrusted Data Vulnerability in Cosminexus Component Container

EPSS 0.6%CVSS 9.8

SAP_SE4 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-44756 · SAP_SE SAP Extended Passport (EPP) Processing

Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing

EPSS 1%CVSS 10.0

CVE-2026-58240 · SAP_SE SAP NetWeaver (Message Server)

Missing Authentication check in SAP NetWeaver (Message Server)

EPSS 0.5%CVSS 9.8

CVE-2026-66768 · SAP_SE SAP NetWeaver (SAP GUI for Java)

Improper Access Control in SAP NetWeaver (SAP GUI for Java)

EPSS 0.6%CVSS 9.0

CVE-2026-76969 · SAP_SE SAP Cloud Application Programming Model (CAP)

Credential disclosure in multitenant applications using SAP Cloud Application Programming Model (CAP)

EPSS 0.4%CVSS 9.4

Red Hat2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2026-76578 · Red Hat Red Hat Enterprise Linux 10

Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

EPSS 1%CVSS 9.8

CVE-2026-18922 · Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8

389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property

EPSS 0.6%CVSS 9.8

THU-MAIC1 vulnerability on this pageMax CVSS 9.0Priority 44KEV 0

CVE-2026-86259 · THU-MAIC OpenMAIC

OpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation

EPSS 0.4%public exploit CVSS 9.0

Dell5 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-80131 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limit…

EPSS 0.8%CVSS 9.8

CVE-2026-61410 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authori…

EPSS 0.8%CVSS 9.4

CVE-2026-80129 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limit…

EPSS 0.7%CVSS 9.8

CVE-2026-80164 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certi…

EPSS 0.3%CVSS 9.1

CVE-2026-80238 · Dell Secure Connect Gateway 5.0 - Application

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with…

EPSS 0.2%CVSS 9.3

knowns-dev2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-86543 · knowns-dev knowns

knowns before 0.30.0 Unauthenticated Management API Exposure

EPSS 0.9%CVSS 9.8

CVE-2026-86542 · knowns-dev knowns

knowns before 0.30.0 Path Traversal via Import Name

EPSS 0.7%CVSS 9.1

shabti1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-75816 · shabti Frontend Admin by DynamiApps

Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier

EPSS 0.9%CVSS 9.8

Siemens4 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-62645 · Siemens Reyrolle 7SR5

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

EPSS 0.6%CVSS 9.8

CVE-2026-62647 · Siemens Reyrolle 7SR5

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

EPSS 0.6%CVSS 9.3

CVE-2026-62646 · Siemens Reyrolle 7SR5

A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70).

EPSS 0.5%CVSS 9.1

CVE-2026-50093 · Siemens Siveillance Control Pro V3.0

A vulnerability has been identified in Siveillance Control Pro V3.0 (All versions < V3.0.12.2173), Siveillance Control Pro V4.0 (All vers…

EPSS 0.3%CVSS 9.0

JetBrains2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-86478 · JetBrains YouTrack

In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account ta…

EPSS 0.6%CVSS 9.8

CVE-2026-86480 · JetBrains Hub

In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges

EPSS 0.6%CVSS 9.8

Next4Biz Information Technologies Inc.1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-7861 · Next4Biz Information Technologies Inc. CSM (Customer Service Management)

Code Injection in Next4Biz's CSM (Customer Service Management)

EPSS 0.6%CVSS 9.8

Bahçelievler Muncipality1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-6223 · Bahçelievler Muncipality BiHayat App

OTP Bypass in Bahçelievler Muncipality's BiHayat App

EPSS 0.6%CVSS 9.4

CPANSec2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-86219 · CPANSec

Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step

EPSS 0.5%CVSS 9.8

CVE-2026-86304 · CPANSec

MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor

EPSS 0.3%CVSS 9.8

LearnDash1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-16310 · LearnDash MemberDash

MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter

EPSS 0.5%CVSS 9.8

NEC Corporation1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-16876 · NEC Corporation UNIVERGE IX-R/IX-V

An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V.

EPSS 0.6%CVSS 9.3

MISP1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-86419 · MISP MISP

MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery

EPSS 0.4%CVSS 9.1

The archive.