Critical vulnerability archive — page 7

Google1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-111497 · Google Brotli

Out-of-Bounds Write in Google Brotli Decoder

KEV · due 10 Nov EPSS 83%public exploit SSVC act CVSS 9.8

TOTOLINK3 vulnerabilities on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-114575 · TOTOLINK A950RG

TOTOLINK A950RG product.so UploadCustomModule command injection

EPSS 2%public exploit CVSS 10.0

CVE-2026-114382 · TOTOLINK EX200

TOTOLINK EX200 lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow

EPSS 0.7%public exploit CVSS 10.0

CVE-2026-114383 · TOTOLINK EX200

TOTOLINK EX200 wireless.so cstecgi.cgi setWiFiAclAddConfig stack-based overflow

EPSS 0.7%public exploit CVSS 10.0

FanRuan1 vulnerability on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2021-48014 · FanRuan FineReport

FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer

EPSS 2%public exploit CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-65200 · mitre

An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on a web-accessable U…

EPSS 0.6%public exploit CVSS 9.6

CVE-2026-78846 · mitre

Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location header parsing.

EPSS 0.4%CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-114268 · Tenda BE3L Pro

Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow

EPSS 0.5%public exploit CVSS 9.9

DedeCMS1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2021-48016 · DedeCMS DedeCMS

DedeCMS 5.8.1-beta Unauthenticated RCE via plus/flink.php

EPSS 0.4%public exploit CVSS 9.8

GitLab1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-110264 · GitLab GitLab

Integer Overflow or Wraparound in GitLab

EPSS 1%CVSS 10.0

Hewlett Packard Enterprise (HPE)5 vulnerabilities on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-79846 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Unauthenticated Command Injection Vulnerabilities in AOS-8

EPSS 1%CVSS 10.0

CVE-2026-79844 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Authentication Bypass Leading to Remote Code Execution in AOS-10

EPSS 0.7%CVSS 10.0

CVE-2026-79847 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10

EPSS 0.8%CVSS 10.0

CVE-2026-79848 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

EPSS 0.7%CVSS 10.0

CVE-2026-79849 · Hewlett Packard Enterprise (HPE) ArubaOS (AOS)

Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8

EPSS 0.7%CVSS 10.0

openremote1 vulnerability on this pageMax CVSS 9.0Priority 43KEV 0

CVE-2026-114661 · openremote openremote

OpenRemote 1.2.0 before 1.31.0 Missing Authorization in Gateway Tunnel Endpoints

EPSS 0.4%public exploit CVSS 9.0

schorschii1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-114611 · schorschii OCO-Server

OCO-Server: MDM /profile endpoint accepts self-signed PKCS#7 signatures (PKCS7_NOVERIFY): device MDM identity (certificate + private key) disclosure and device-record hijack

EPSS 0.3%public exploit CVSS 9.1

yootheme.com1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-102785 · yootheme.com YOOtheme Pro extension for Joomla

Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5.0.0-5.0.52

EPSS 0.8%CVSS 10.0

python-pillow1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-96639 · python-pillow Pillow

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

EPSS 0.7%CVSS 9.8

AWS1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-112408 · AWS Amazon SageMaker Python SDK

Missing bucket ownership verification in Amazon SageMaker Python SDK default_bucket()

EPSS 0.7%CVSS 9.4

laravel1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-114509 · laravel framework

Laravel TokenGuard authentication bypass through non-string API credentials

EPSS 0.8%CVSS 9.2

liukuo3625731 vulnerability on this pageMax CVSS 9.1Priority 39KEV 0

CVE-2022-51022 · liukuo362573 YiShaAdmin

YiShaAdmin 3.1 Unauthenticated Path Traversal via DownloadFile endpoint

EPSS 0.8%CVSS 9.1

TianoCore1 vulnerability on this pageMax CVSS 9.5Priority 39KEV 0

CVE-2026-97631 · TianoCore EDK2

Pre-boot RCE in EDK II PXE driver

EPSS 0.6%CVSS 9.5

Apache Software Foundation8 vulnerabilities on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2026-111813 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration

EPSS 0.5%CVSS 10.0

CVE-2026-111812 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials

EPSS 0.4%CVSS 10.0

CVE-2026-111811 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication

EPSS 0.4%CVSS 9.4

CVE-2025-31699 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling

EPSS 0.3%CVSS 9.1

CVE-2026-111814 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin

EPSS 0.2%CVSS 10.0

CVE-2026-111815 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement

EPSS 0.2%CVSS 10.0

CVE-2026-111816 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: A malformed 302 response bypasses parse-error rejection through the Transfer-Encoding: chunked carve-out

EPSS 0.3%CVSS 9.3

CVE-2026-111809 · Apache Software Foundation Apache Traffic Server

Apache Traffic Server: HEAD requests carrying Content-Length or Transfer-Encoding enable request smuggling

EPSS 0.2%CVSS 9.3

Brainstorm Force1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-112241 · Brainstorm Force SureCart

WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability

EPSS 0.5%CVSS 9.8

CozyThemes1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-112832 · CozyThemes Rootblox

WordPress Rootblox plugin <= 1.0.6 - Local File Inclusion vulnerability

EPSS 0.4%CVSS 9.8

Splunk5 vulnerabilities on this pageMax CVSS 9.9Priority 37KEV 0

CVE-2026-76302 · Splunk Splunk Enterprise

Security Hardening in Splunk Enterprise - October 2026

EPSS 0.4%CVSS 9.9

CVE-2026-76531 · Splunk Splunk SOAR

Files or Directories Accessible to External Parties in Splunk SOAR

EPSS 0.4%CVSS 9.9

CVE-2026-76301 · Splunk Splunk Enterprise

Security Hardening in Splunk Enterprise - October 2026

EPSS 0.4%CVSS 9.8

CVE-2026-76299 · Splunk Splunk Enterprise

Security Hardening in Splunk Enterprise - October 2026

EPSS 0.3%CVSS 9.9

CVE-2026-76527 · Splunk Splunk SOAR

Improper Check or Handling of Exceptional Conditions in Splunk SOAR

EPSS 0.1%CVSS 9.8

getsentry1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-114139 · getsentry sentry-javascript

Sentry-Javascript: Middleware Bypass when using Tunnel route

EPSS 0.5%CVSS 9.1

BerriAI1 vulnerability on this pageMax CVSS 9.9Priority 35KEV 0

CVE-2026-114612 · BerriAI litellm

LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key

EPSS 0.3%CVSS 9.9

better-auth1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-114607 · better-auth better-auth

better-auth: OAuth state can be used as a Magic Link to sign in as another user

EPSS 0.4%CVSS 9.1

Drupal1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-96355 · Drupal Webform

Webform - Critical - Remote Code Execution - SA-CONTRIB-2026-175

EPSS 0.4%CVSS 9.1

Silicon Labs3 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-85080 · Silicon Labs EmberZNet

Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling

EPSS 0.5%CVSS 9.1

CVE-2026-85079 · Silicon Labs EmberZNet

Out-of-bounds write in Zigbee Simple_Desc_req handling

EPSS 0.3%CVSS 9.8

CVE-2026-94502 · Silicon Labs EmberZNet

Out-of-bounds write in Zigbee Publish Price Matrix handling

EPSS 0.3%CVSS 9.8

Oracle Corporation1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-91403 · Oracle Corporation Oracle Java SE

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).

EPSS 0.4%CVSS 9.1

mem0ai1 vulnerability on this pageMax CVSS 9.2Priority 33KEV 0

CVE-2026-115324 · mem0ai mem0

mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Store

EPSS 0.3%CVSS 9.2

NewType Infortech2 vulnerabilities on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-114219 · NewType Infortech NT OneAPP

NewType Infortech｜NT OneAPP - Hard-coded Credentials

EPSS 0.3%CVSS 9.1

CVE-2026-114220 · NewType Infortech NT OneAPP

NewType Infortech｜NT OneAPP - Improper Certificate Validation

EPSS 0.2%CVSS 9.3

TMS1 vulnerability on this pageMax CVSS 9.3Priority 33KEV 0

CVE-2026-112327 · TMS Amelia

WordPress Amelia plugin <= 2.4.11 - SQL Injection vulnerability

EPSS 0.3%CVSS 9.3

The archive.