Critical vulnerability archive — page 76

Gitea1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-60004 · Gitea Gitea

Gitea Code Injection Vulnerability

KEV · due 28 Aug EPSS 24%public exploit SSVC act CVSS 9.8

senaite1 vulnerability on this pageMax CVSS 9.8Priority 53KEV 0

CVE-2026-54569 · senaite senaite.core

SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.core

EPSS 1%public exploit CVSS 9.8

TarsCloud1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-80349 · TarsCloud TarsWeb

TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter

EPSS 0.7%public exploit CVSS 9.8

ILIAS-eLearning e.V.1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-80428 · ILIAS-eLearning e.V. ILIAS

ILIAS PHP Object Injection via Shibboleth Logout

EPSS 5%CVSS 9.8

kyverno1 vulnerability on this pageMax CVSS 9.6Priority 47KEV 0

CVE-2026-54523 · kyverno kyverno

Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

EPSS 0.5%public exploit CVSS 9.6

Ubiquiti Inc15 vulnerabilities on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2026-77552 · Ubiquiti Inc UniFi Enterprise Audio/Video Bridge

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Vid…

EPSS 2%CVSS 9.8

CVE-2026-77554 · Ubiquiti Inc UniFi Talk Application

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to…

EPSS 2%CVSS 10.0

CVE-2026-77543 · Ubiquiti Inc UniFi Access Application

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi A…

EPSS 1%CVSS 9.9

CVE-2026-77546 · Ubiquiti Inc UniFi Access Application

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi A…

EPSS 1%CVSS 9.9

CVE-2026-77547 · Ubiquiti Inc UniFi Access Application

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi A…

EPSS 1%CVSS 9.9

CVE-2026-77548 · Ubiquiti Inc UniFi Protect Application

A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi P…

EPSS 1%CVSS 9.9

CVE-2026-77540 · Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi…

EPSS 1%CVSS 9.1

CVE-2026-77542 · Ubiquiti Inc UID Enterprise Agent

A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID En…

EPSS 1%CVSS 9.1

CVE-2026-77550 · Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain de…

EPSS 0.8%CVSS 10.0

CVE-2026-77557 · Ubiquiti Inc UniFi Protect AI Key

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to esca…

EPSS 0.5%CVSS 9.8

CVE-2026-77553 · Ubiquiti Inc UniFi Access Application

A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Acc…

EPSS 0.5%CVSS 9.9

CVE-2026-77549 · Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vuln…

EPSS 0.5%CVSS 9.0

CVE-2026-77541 · Ubiquiti Inc UniFi Network Application

A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Ne…

EPSS 0.5%CVSS 9.1

CVE-2026-77545 · Ubiquiti Inc UniFi OS Server

A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerabilit…

EPSS 0.4%CVSS 9.0

CVE-2026-77551 · Ubiquiti Inc UniFi Connect Display Cast Pro

A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in…

EPSS 0.4%CVSS 9.0

vesoft-inc1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2026-81032 · vesoft-inc nebula

NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration

EPSS 0.4%public exploit CVSS 9.8

Dell1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2026-70419 · Dell Cloud Disaster Recovery

Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS…

EPSS 2%CVSS 9.1

Google1 vulnerability on this pageMax CVSS 9.2Priority 43KEV 0

CVE-2026-75062 · Google langfun

Eval Injection in google/langfun via default lf.query protocol

EPSS 0.4%public exploit CVSS 9.2

wedevs1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-18080 · wedevs ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce

ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment

EPSS 0.9%CVSS 9.8

1Panel-dev1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-65956 · 1Panel-dev KubePi

KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF

EPSS 0.6%CVSS 10.0

Linux17 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-80519 · Linux Linux

ovpn: finish crypto callback cleanup before peer release

EPSS 0.6%CVSS 9.8

CVE-2026-74737 · Linux Linux

net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG

EPSS 0.6%CVSS 9.8

CVE-2026-74743 · Linux Linux

macvlan: inherit needed_headroom and needed_tailroom from lowerdev

EPSS 0.5%CVSS 9.8

CVE-2026-74746 · Linux Linux

netfilter: flowtable: publish GC-visible tuple last

EPSS 0.5%CVSS 9.8

CVE-2026-74744 · Linux Linux

ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

EPSS 0.5%CVSS 9.8

CVE-2026-74752 · Linux Linux

sctp: validate cookie AUTH state before use

EPSS 0.5%CVSS 9.8

CVE-2026-80528 · Linux Linux

ceph: avoid fs reclaim while using current->journal_info

EPSS 0.5%CVSS 9.8

CVE-2026-80557 · Linux Linux

libceph: fix OOB read in decode_watchers() via missing bounds check

EPSS 0.5%CVSS 9.8

CVE-2026-80558 · Linux Linux

libceph: Avoid using invalid osd indices from primary_temp

EPSS 0.5%CVSS 9.8

CVE-2026-80561 · Linux Linux

libceph: fix multiple unsafe decodes in decode_locker()

EPSS 0.5%CVSS 9.8

CVE-2026-80587 · Linux Linux

mptcp: avoid combining some incoming suboptions

EPSS 0.4%CVSS 9.8

CVE-2026-74751 · Linux Linux

riscv: lib: Fix ZBB strnlen reading past count boundary

EPSS 0.5%CVSS 9.4

CVE-2026-80586 · Linux Linux

mptcp: options: reset DSS fields in case of unexpected size

EPSS 0.4%CVSS 9.8

CVE-2026-80589 · Linux Linux

block: stop the timeout timer when releasing a never added disk

EPSS 0.4%CVSS 9.8

CVE-2026-80585 · Linux Linux

mptcp: fastopen: only mark MPTFO subflows with SYN data

EPSS 0.3%CVSS 9.4

CVE-2026-80551 · Linux Linux

s390/vfio_ccw: Ensure first IDAW remains constant

EPSS 0.2%CVSS 9.3

CVE-2026-80554 · Linux Linux

s390/vfio_ccw: Limit the number of channel program segments

EPSS 0.2%CVSS 9.3

WebPros1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-65646 · WebPros Plesk

Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose…

EPSS 0.7%CVSS 9.9

Spring1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-47837 · Spring Spring Cloud Config

Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests

EPSS 0.6%CVSS 9.8

getgrav2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-80203 · getgrav grav

Grav before 1.0.18 Authentication Bypass via Scoped API Key

EPSS 0.5%CVSS 9.8

CVE-2026-80204 · getgrav grav

Grav before 1.0.18 Authentication Bypass via Scoped API Key

EPSS 0.2%CVSS 9.3

Google Cloud2 vulnerabilities on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-12717 · Google Cloud BigQuery Data Transfer Service

Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection

EPSS 0.6%CVSS 9.4

CVE-2026-19485 · Google Cloud Vertex AI Search for Commerce

Bucket Squatting in Vertex AI Search for Commerce

EPSS 0.4%CVSS 9.3

Veeam1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-65641 · Veeam One

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

EPSS 0.5%CVSS 9.3

TÜBİTAK BİLGEM Software Technologies Research Institute1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-75896 · TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk

Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk

EPSS 0.4%CVSS 9.1

The archive.