Critical vulnerability archive — page 82

TRENDnet1 vulnerability on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-77946 · TRENDnet TEW-821DAP

TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow

EPSS 1%public exploit CVSS 10.0

Comfast1 vulnerability on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-78050 · Comfast CF-N1-S

Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow

EPSS 0.8%public exploit CVSS 9.9

4xmen1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2026-49849 · 4xmen xshop

xShop: Unrestricted File Upload in File Attachment Module in Admin panel leads to Arbitrary Code Execution

EPSS 1.0%public exploit CVSS 9.1

jsonata-js3 vulnerabilities on this pageMax CVSS 9.3Priority 50KEV 0

CVE-2026-77415 · jsonata-js jsonata

JSONata: Arbitrary Code Execution via crafted JSONata expressions

EPSS 0.9%public exploit CVSS 9.3

CVE-2026-77413 · jsonata-js jsonata

JSONata: Arbitrary Code Execution via crafted JSONata expressions

EPSS 0.7%public exploit CVSS 9.3

CVE-2026-77414 · jsonata-js jsonata

JSONata: Arbitrary Code Execution via crafted JSONata expressions

EPSS 0.6%public exploit CVSS 9.3

geotools1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-76904 · geotools geotools

GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers

EPSS 4%CVSS 9.8

phalcon1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2026-59989 · phalcon cphalcon

Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)

EPSS 0.5%public exploit CVSS 9.2

xorbitsai1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2026-61539 · xorbitsai inference

Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing

EPSS 1%CVSS 10.0

fabrikar.com7 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-76604 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2

EPSS 0.7%CVSS 10.0

CVE-2026-76605 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2

EPSS 0.7%CVSS 10.0

CVE-2026-76606 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2

EPSS 0.5%CVSS 10.0

CVE-2026-76607 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2

EPSS 0.4%CVSS 10.0

CVE-2026-77992 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

EPSS 0.4%CVSS 9.5

CVE-2026-76571 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.2

EPSS 0.4%CVSS 9.3

CVE-2026-76602 · fabrikar.com Fabrik extension for Joomla

Joomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.2

EPSS 0.4%CVSS 9.3

mailgun1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-78003 · mailgun Mailgun for WordPress

Mailgun for WordPress <= 2.2.0 - Unauthenticated Server-Side Request Forgery (SSRF) via 'addresses' Array Keys

EPSS 0.8%CVSS 9.8

westguard1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-4703 · westguard WS Form LITE – Drag & Drop Contact Form Builder

WS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission

EPSS 0.9%CVSS 9.8

AWS1 vulnerability on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-77810 · AWS Athena Federated Query Neptune Connector

Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

EPSS 0.6%CVSS 9.9

Linux20 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-74591 · Linux Linux

mm/filemap: __filemap_add_folio() restore index before retrying

EPSS 0.6%CVSS 9.8

CVE-2026-74617 · Linux Linux

dibs: initialise dibs->lock in dibs_dev_alloc()

EPSS 0.6%CVSS 9.8

CVE-2026-74727 · Linux Linux

ovpn: skip rehash for peers already removed from by_id

EPSS 0.6%CVSS 9.8

CVE-2026-74597 · Linux Linux

ip6_tunnel: clear skb2->cb[] in ip6ip6_err()

EPSS 0.5%CVSS 9.8

CVE-2026-74612 · Linux Linux

veth: fix skb length accounting after XDP frag adjustment

EPSS 0.5%CVSS 10.0

CVE-2026-74705 · Linux Linux

udp: fix potential use-after-free in tunnel segmentation

EPSS 0.5%CVSS 10.0

CVE-2026-74586 · Linux Linux

sctp: clear new_transport when removing a peer

EPSS 0.5%CVSS 9.8

CVE-2026-74587 · Linux Linux

sctp: fix use-after-free of cached ASCONF chunk

EPSS 0.5%CVSS 9.8

CVE-2026-74588 · Linux Linux

sctp: keep chunk->transport in step with the list it is queued on

EPSS 0.5%CVSS 9.8

CVE-2026-74608 · Linux Linux

smb: client: Fix use-after-free in cifs_try_adding_channels()

EPSS 0.5%CVSS 9.8

CVE-2026-74611 · Linux Linux

tls: rx: restore msg_iter before TLS 1.3 optimistic retry

EPSS 0.5%CVSS 9.8

CVE-2026-74616 · Linux Linux

xdp: reject clones that overrun skb_shared_info tailroom

EPSS 0.5%CVSS 9.8

CVE-2026-74628 · Linux Linux

net/x25: fix use-after-free of the socket by its timers

EPSS 0.5%CVSS 9.8

CVE-2026-74662 · Linux Linux

inet: frags: publish queues before arming timer

EPSS 0.5%CVSS 9.8

CVE-2026-74669 · Linux Linux

ipvs: clear IPv4 options after rebasing tunnel ICMP errors

EPSS 0.5%CVSS 9.8

CVE-2026-74688 · Linux Linux

sctp: clear control chunk transport if it is being removed

EPSS 0.5%CVSS 9.8

CVE-2026-74723 · Linux Linux

btrfs: lzo: reject inline extents without valid headers

EPSS 0.5%CVSS 9.8

CVE-2026-74730 · Linux Linux

NFS: Pin the 'struct nfs_server' during a FREE_STATEID call

EPSS 0.5%CVSS 9.8

CVE-2026-74665 · Linux Linux

net: fix skb length accounting after generic XDP frag adjustment

EPSS 0.4%CVSS 9.1

CVE-2026-74712 · Linux Linux

vdpa/mlx5: Fix buffer length in create_direct_keys()

EPSS 0.1%CVSS 9.3

EmilStenstrom1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-5388 · EmilStenstrom justhtml

justhtml before 1.15.0 Multiple Security Issues

EPSS 0.6%CVSS 9.8

nezhahq1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-62283 · nezhahq nezha

Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check

EPSS 0.6%CVSS 9.9

OnGres1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-78155 · OnGres StackGres

Untrusted Search Path in StackGres

EPSS 0.5%CVSS 9.9

Unknown4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-77001 · Unknown Social Login & Sharing buttons with Analytics By SoClever

Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass

EPSS 0.6%CVSS 9.8

CVE-2026-13598 · Unknown RestrictMate

RestrictMate < 1.3.0 - Unauthenticated Privilege Escalation to Administrator

EPSS 0.5%CVSS 9.8

CVE-2026-77000 · Unknown WP Social Media Login

WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow

EPSS 0.5%CVSS 9.8

CVE-2026-77002 · Unknown SmilePass Selfie Login

SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass

EPSS 0.5%CVSS 9.8

CPANSec2 vulnerabilities on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-75866 · CPANSec

Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them

EPSS 0.5%CVSS 9.1

CVE-2026-75870 · CPANSec

Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret

EPSS 0.5%CVSS 9.1

omnigent-ai1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2026-62674 · omnigent-ai omnigent

Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE

EPSS 0.5%CVSS 9.0

Google Cloud1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-12710 · Google Cloud Application Integration

Missing Authorization in Application Integration QueryEngineTask

EPSS 0.4%CVSS 9.3

The archive.