Critical vulnerability archive — page 69

QVidium1 vulnerability on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2026-82971 · QVidium Opera11

QVidium Opera11 CGI Script net_tr.cgi command injection

EPSS 3%public exploit CVSS 10.0

Cobham1 vulnerability on this pageMax CVSS 9.9Priority 57KEV 0

CVE-2026-83772 · Cobham SATCOM VSAT7090 Maritime Satellite Router

Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection

EPSS 3%public exploit CVSS 9.9

RedPort1 vulnerability on this pageMax CVSS 9.9Priority 57KEV 0

CVE-2026-83524 · RedPort Optimizer wXa-203

RedPort Optimizer wXa-223 System Clock datetime.php exec command injection

EPSS 3%public exploit CVSS 9.9

mitre18 vulnerabilities on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-51934 · mitre

Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.

EPSS 1%public exploit CVSS 9.8

CVE-2026-51741 · mitre

Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase…

EPSS 0.6%CVSS 9.8

CVE-2026-51744 · mitre

Incorrect access control in the recv_mesh_info_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to for…

EPSS 0.6%CVSS 9.8

CVE-2026-51747 · mitre

Incorrect access control in the keepAlive function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to emit indirect…

EPSS 0.6%CVSS 9.8

CVE-2026-51750 · mitre

Incorrect access control in the updatePriChannel function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to rescan…

EPSS 0.6%CVSS 9.8

CVE-2026-51751 · mitre

Incorrect access control in the delSlaveDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to remove a…

EPSS 0.6%CVSS 9.8

CVE-2026-51757 · mitre

Incorrect access control in the meshSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to start a…

EPSS 0.6%CVSS 9.8

CVE-2026-51760 · mitre

Incorrect access control in the informSyncUpgfw function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to mass-tr…

EPSS 0.6%CVSS 9.8

CVE-2026-51762 · mitre

Incorrect access control in the meshInfoKick function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to kick or cl…

EPSS 0.6%CVSS 9.8

CVE-2026-51763 · mitre

Incorrect access control in the freeStaClient function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forcibly…

EPSS 0.6%CVSS 9.8

CVE-2026-51764 · mitre

Incorrect access control in the recvSlaveCloudCheckStatus function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers…

EPSS 0.6%CVSS 9.8

CVE-2026-51765 · mitre

Incorrect access control in the recvIndirectMeshInfo function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to in…

EPSS 0.6%CVSS 9.8

CVE-2026-51767 · mitre

Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset…

EPSS 0.6%CVSS 9.8

CVE-2026-51769 · mitre

Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to…

EPSS 0.6%CVSS 9.8

CVE-2026-51770 · mitre

Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to f…

EPSS 0.6%CVSS 9.8

CVE-2026-51754 · mitre

Incorrect access control in the updateSlaveIpList function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to overw…

EPSS 0.6%CVSS 9.8

CVE-2026-52111 · mitre

An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes…

EPSS 0.6%CVSS 9.8

CVE-2026-51743 · mitre

Incorrect access control in the guest_wifi_sync function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to disable…

EPSS 0.5%CVSS 9.1

samanhappy1 vulnerability on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-79748 · samanhappy mcphub

MCPHub: Authenticated non-admin user achieves RCE via POST /api/servers (missing authorization on stdio command/args)

EPSS 0.6%public exploit CVSS 9.9

librenms1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2026-84189 · librenms librenms

LibreNMS before 26.7.0 Stored XSS via Oxidized API

EPSS 0.4%public exploit CVSS 9.2

kyverno2 vulnerabilities on this pageMax CVSS 9.4Priority 42KEV 0

CVE-2026-84200 · kyverno kyverno

Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions

EPSS 0.3%public exploit CVSS 9.4

CVE-2023-54356 · kyverno kyverno

Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

EPSS 0.2%CVSS 9.3

Ministry of the Interior (MVČR)1 vulnerability on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2026-59111 · Ministry of the Interior (MVČR) eObčanka-Identifikace

Command Injection vulnerability in eObčanka-Identifikace

EPSS 1%CVSS 9.3

VulDB1 vulnerability on this pageMax CVSS 9.9Priority 42KEV 0

CVE-2026-82954 · VulDB

Dokploy Settings application.ts writeTraefikConfigInPath path traversal

EPSS 1.0%CVSS 9.9

wplegalpages1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-75865 · wplegalpages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode

WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

EPSS 0.9%CVSS 9.8

WebPros1 vulnerability on this pageMax CVSS 9.0Priority 41KEV 0

CVE-2026-67394 · WebPros Plesk

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versio…

EPSS 1%CVSS 9.0

MSI1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-82908 · MSI Dragon Center

MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow

EPSS 0.2%public exploit CVSS 9.3

Proper Fraction1 vulnerability on this pageMax CVSS 9.2Priority 40KEV 0

CVE-2026-66047 · Proper Fraction ProfilePress

ProfilePress WordPress Plugin < 4.17.2 Unauthenticated Arbitrary Plugin Installation RCE

EPSS 0.9%CVSS 9.2

hashthemes1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-81780 · hashthemes Hash Form

WordPress Hash Form plugin <= 1.4.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

ieungSoft1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-82807 · ieungSoft Ultra RAMDisk Pro

ieungSoft Ultra RAMDisk Pro Kernel Driver URDSCSI.sys privileges management

EPSS 0.2%public exploit CVSS 9.3

Mozilla5 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-18550 · scriptsbundle Nokri – Job Board WordPress Theme

Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter

EPSS 0.6%CVSS 9.8

Silk Themes1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-81779 · Silk Themes Newspapers X

WordPress Newspapers X theme 1.0.46-1.0.48 - Backdoor vulnerability

EPSS 0.5%CVSS 10.0

Tickera1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-82226 · Tickera Tickera

WordPress Tickera plugin <= 3.6.0.2 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

WP Legal Pages1 vulnerability on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-82970 · WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePrivacy Consent

WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Ebyte2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-73819 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Weak Authentication

EPSS 0.5%CVSS 9.8

CVE-2026-76133 · Ebyte Ebyte NA111-M Firmware

Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm

EPSS 0.4%CVSS 9.8

Sauter1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2026-78319 · Sauter modu680-AS

TOCTOU Vulnerability in file exchange

EPSS 0.6%CVSS 9.3

Lutece1 vulnerability on this pageMax CVSS 9.4Priority 37KEV 0

CVE-2026-4813 · Lutece Lutece Core

Code injection in the Lutece Core

EPSS 0.5%CVSS 9.4

Autorius E-goi1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-81756 · Autorius E-goi Smart Marketing SMS and Newsletters Forms

WordPress Smart Marketing SMS and Newsletters Forms plugin <= 5.1.24 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Passionate Programmer Peter1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-81293 · Passionate Programmer Peter WP Data Access

WordPress WP Data Access plugin <= 5.5.81 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

zhenorzz1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-53552 · zhenorzz goploy

Goploy: Cross-namespace IDOR and RCE via body-supplied row id in project and project_file handlers

EPSS 0.4%CVSS 9.6

ウェブ屋のさとーさん1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-81763 · ウェブ屋のさとーさん Throws SPAM Away

WordPress Throws SPAM Away plugin <= 3.8.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

The archive.