Critical vulnerability archive — page 72

PaperCut2 vulnerabilities on this pageMax CVSS 9.8Priority 99KEV 2

CVE-2026-81578 · PaperCut PaperCut MF/NG

PaperCut MF/NG: Authentication Bypass

KEV · due 14 Sep EPSS 85%public exploit SSVC act CVSS 9.8

CVE-2026-82078 · PaperCut PaperCut MF/NG

PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector

KEV · due 14 Sep EPSS 63%public exploit SSVC act CVSS 9.4

jfrog1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-82329 · jfrog artifactory

Potential authentication bypass leading to administrative access in Artifactory

KEV · due 5 Sep EPSS 14%public exploit SSVC act CVSS 9.8

argoproj-labs1 vulnerability on this pageMax CVSS 10.0Priority 57KEV 0

CVE-2026-82456 · argoproj-labs argocd-mcp

argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP

EPSS 2%public exploit CVSS 10.0

Tenda1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-82542 · Tenda HG10

Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

EPSS 1%public exploit CVSS 10.0

coderaiser1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-82460 · coderaiser cloudcmd

Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown

EPSS 0.9%public exploit CVSS 9.8

yamcs3 vulnerabilities on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-55559 · yamcs yamcs

Yamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-55565 · yamcs yamcs

Yamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)

EPSS 0.7%public exploit CVSS 9.9

CVE-2026-55511 · yamcs yamcs

Yamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`

EPSS 0.7%public exploit CVSS 9.1

budibase1 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2026-82244 · budibase server

Budibase before 3.41.3 Remote Code Execution via Plugin eval()

EPSS 0.9%public exploit CVSS 9.4

kubeflow1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-54745 · kubeflow pipelines

Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

EPSS 0.6%public exploit CVSS 10.0

pimcore2 vulnerabilities on this pageMax CVSS 9.9Priority 50KEV 0

CVE-2026-55634 · pimcore pimcore

Pimcore: Remote Code Execution via DataObject Class-Definition Field Name

EPSS 0.7%public exploit CVSS 9.9

CVE-2026-55220 · pimcore pimcore

Pimcore Hotspotimage getDataFromResource() unrestricted Serialize::unserialize over object-store column

EPSS 0.7%CVSS 9.3

TOTOLINK1 vulnerability on this pageMax CVSS 9.4Priority 50KEV 0

CVE-2026-82539 · TOTOLINK A720R

TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption

EPSS 0.8%public exploit CVSS 9.4

free5gc1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-55068 · free5gc free5gc

free5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints

EPSS 0.6%public exploit CVSS 9.3

Liquid Web / StellarWP1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-82222 · Liquid Web / StellarWP GiveWP

WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability

EPSS 2%CVSS 10.0

klever-io2 vulnerabilities on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-54754 · klever-io klever-go

Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

EPSS 0.4%public exploit CVSS 9.6

CVE-2026-54755 · klever-io klever-go

Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

EPSS 0.6%CVSS 9.6

Cinnamon1 vulnerability on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-82281 · Cinnamon kotaemon

Kotaemon Missing Ownership Check in Conversation Functions

EPSS 0.4%public exploit CVSS 9.1

IBM4 vulnerabilities on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2026-19295 · IBM Langflow OSS

Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

EPSS 2%CVSS 9.9

CVE-2026-19286 · IBM Langflow OSS

Langflow is affected by multiple remote code execution vulnerabilities due to insufficient code-execution policy enforcement

EPSS 0.9%CVSS 9.8

CVE-2026-18527 · IBM Administration Runtime Expert for i

IBM Application Runtime Expert (ARE) for IBM i is vulnerable to a user gaining elevated privileges and sensitive information [, ].

EPSS 0.5%CVSS 9.9

CVE-2026-3627 · IBM Concert

Multiple Vulnerabilities in IBM Concert Software

EPSS 0.5%CVSS 9.1

siyuan-note2 vulnerabilities on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2026-82653 · siyuan-note siyuan

SiYuan before v3.8.1 Stored XSS via confirmDialog

EPSS 0.4%public exploit CVSS 9.3

CVE-2026-82654 · siyuan-note siyuan

SiYuan before v3.8.1 Stored XSS via block name

EPSS 0.4%CVSS 9.3

bdthemes1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-14494 · bdthemes SigmaForms Pro – AI Generated Forms

Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field

EPSS 0.9%CVSS 9.8

argoproj1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-82277 · argoproj argo-rollouts

Argo Rollouts Dashboard Unauthenticated Mutating Operations

EPSS 0.8%CVSS 9.8

iot-ecology1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-82452 · iot-ecology rust-iot-platform

rust-iot-platform Authentication Bypass via Missing Request Guards

EPSS 0.8%CVSS 9.8

Shinobi Systems1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-82448 · Shinobi Systems Shinobi

Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key

EPSS 0.7%CVSS 9.8

shriyanss1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-55378 · shriyanss js-recon

JS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values

EPSS 0.8%CVSS 9.3

TangibleWP1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-15980 · TangibleWP MyHome Core

MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation Token

EPSS 0.7%CVSS 9.8

WWBN1 vulnerability on this pageMax CVSS 9.2Priority 40KEV 0

CVE-2026-82645 · WWBN AVideo

AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token

EPSS 0.2%public exploit CVSS 9.2

redpanda-data1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-82266 · redpanda-data redpanda

Redpanda Admin API Unauthenticated Superuser Access via Default Configuration

EPSS 0.6%CVSS 9.8

Addify1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-15369 · Addify Custom User Registration Fields for WooCommerce

Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API Checkout

EPSS 0.5%CVSS 9.8

jeremyevans1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-82466 · jeremyevans rodauth

Rodauth before 2.46.0 Authentication Bypass via webauthn_login

EPSS 0.6%CVSS 9.4

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-80694 · Linux Linux

net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller

EPSS 0.5%CVSS 9.8

CVE-2026-80714 · Linux Linux

ipvs: do not propagate one-packet flag to synced conns

EPSS 0.5%CVSS 9.8

CVE-2026-80725 · Linux Linux

net: gro: properly validate BIG TCP aggregation criteria

EPSS 0.5%CVSS 9.8

CVE-2026-80693 · Linux Linux

idpf: bound interrupt-vector register fill to the allocated array

EPSS 0.1%CVSS 9.3

Unknown4 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-10522 · Unknown MemberHero

Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to Administrator

EPSS 0.5%CVSS 9.8

CVE-2026-16259 · Unknown Uix UserCenter

Uix UserCenter <= 1.0.3 - Unauthenticated Privilege Escalation

EPSS 0.5%CVSS 9.8

CVE-2026-16947 · Unknown Total processing card payments for WooCommerce

Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential Disclosure

EPSS 0.4%CVSS 9.1

CVE-2026-77012 · Unknown 爱采集数据采集和发布插件

Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password

EPSS 0.3%CVSS 9.3

Eclipse Foundation1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-18918 · Eclipse Foundation Eclipse Lyo

OAuth 1.0 session-fixation chain via unauthenticated provisional-consumer registration and insecure v1_0Allowed default

EPSS 0.5%CVSS 9.1

Synology1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2026-40541 · Synology Synology Chat Server

An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in extract domain in Synology Chat…

EPSS 0.5%CVSS 9.0

omnivore-app1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-82454 · omnivore-app omnivore

Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in

EPSS 0.4%CVSS 9.3

plone2 vulnerabilities on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2026-55247 · plone plone.app.event

plone.app.event: Denial of service via iCalendar import

EPSS 0.4%CVSS 9.1

CVE-2026-55248 · plone plone.app.portlets

plone.app.portlets: Denial of service via RSS feed portlet

EPSS 0.4%CVSS 9.1

NousResearch1 vulnerability on this pageMax CVSS 9.0Priority 33KEV 0

CVE-2026-82021 · NousResearch hermes-agent

Hermes Agent 0.18.2 < 0.19.0 MCP Catalog Supply Chain RCE via Mutable Branch Reference

EPSS 0.3%CVSS 9.0

Open-Xchange GmbH1 vulnerability on this pageMax CVSS 9.1Priority 33KEV 0

CVE-2026-42007 · Open-Xchange GmbH OX Dovecot Pro

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editi…

EPSS 0.3%CVSS 9.1

The archive.