Critical vulnerability archive — page 84

Comfast2 vulnerabilities on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-77022 · Comfast CF-N1-S

Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow

EPSS 0.8%public exploit CVSS 9.9

CVE-2026-77148 · Comfast CF-N1-S

Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow

EPSS 0.8%public exploit CVSS 9.9

cloudnative-pg1 vulnerability on this pageMax CVSS 9.4Priority 49KEV 0

CVE-2026-55769 · cloudnative-pg cloudnative-pg

CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`

EPSS 0.8%public exploit CVSS 9.4

libevent2 vulnerabilities on this pageMax CVSS 9.2Priority 49KEV 0

CVE-2026-63382 · libevent libevent

libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

EPSS 0.8%public exploit CVSS 9.2

CVE-2026-63385 · libevent libevent

Libevent: HTTP header handling bugs create risk of access control bypass.

EPSS 1%CVSS 9.2

cesanta4 vulnerabilities on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-73257 · cesanta mongoose

Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-73253 · cesanta mongoose

Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching

EPSS 0.3%public exploit CVSS 9.1

CVE-2026-73256 · cesanta mongoose

Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE

EPSS 0.4%CVSS 9.1

CVE-2026-73251 · cesanta mongoose

Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification

EPSS 0.2%CVSS 9.3

TP-Link Systems Inc.1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-19586 · TP-Link Systems Inc. ER7212PC v2

Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways

EPSS 6%CVSS 9.8

Microsoft12 vulnerabilities on this pageMax CVSS 10.0Priority 46KEV 0

CVE-2026-69836 · Microsoft Microsoft Entra

Microsoft Entra ID Remote Code Execution Vulnerability

EPSS 2%CVSS 10.0

CVE-2026-65770 · Microsoft Azure Managed Instance for Apache Cassandra

Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability

EPSS 1%CVSS 10.0

CVE-2026-63509 · Microsoft Microsoft Fabric

Microsoft Fabric Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.9

CVE-2026-65801 · Microsoft Microsoft Exchange Online

Microsoft Exchange Online Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 10.0

CVE-2026-65816 · Microsoft Azure Web Apps

Azure Arc Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 10.0

CVE-2026-68782 · Microsoft Azure SQL Database

Azure SQL Database Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.9

CVE-2026-68789 · Microsoft Azure SQL Database

Azure SQL Database Elevation of Privilege Vulnerability

EPSS 1.0%CVSS 9.9

CVE-2026-69400 · Microsoft Azure Logic Apps

Azure Logic Apps Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.6

CVE-2026-69555 · Microsoft Azure ARC

Azure Arc Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 10.0

CVE-2026-69851 · Microsoft Microsoft Entra

Microsoft Entra ID Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.9

CVE-2026-66309 · Microsoft Azure SQL Database

Azure SQL Database Elevation of Privilege Vulnerability

EPSS 0.9%CVSS 9.1

CVE-2026-62834 · Microsoft Azure Data Factory

Azure Data Factory Elevation of Privilege Vulnerability

EPSS 0.5%CVSS 9.8

IBM18 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-17142 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.9%CVSS 9.8

CVE-2026-17000 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17006 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17040 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17118 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17122 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17136 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17141 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17152 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17157 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17160 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.8%CVSS 9.8

CVE-2026-17138 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.7%CVSS 9.8

CVE-2026-17145 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.7%CVSS 9.8

CVE-2026-17060 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.7%CVSS 9.1

CVE-2026-17003 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.4%CVSS 9.1

CVE-2026-17024 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.4%CVSS 9.8

CVE-2026-17423 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.5%CVSS 9.1

CVE-2026-17422 · IBM AIX

Vulnerabilities in IBM AIX and PowerVM VIOS

EPSS 0.2%CVSS 9.3

evershopcommerce1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-72843 · evershopcommerce evershop

EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover

EPSS 0.8%CVSS 9.8

Red Hat2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2026-66788 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16

Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label

EPSS 0.7%CVSS 9.9

CVE-2026-67567 · Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11

Multicloud-operators-subscription: multicloud-operators-subscription: helmrelease chart applied with controller sa without gvk or namespace restriction

EPSS 0.6%CVSS 9.9

vsDesk1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2026-2334 · vsDesk vsDesk

) Missing Server-Side File Extension Validation in vsDesk

EPSS 0.7%CVSS 9.4

Apple1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-43798 · Apple swift-nio-ssh

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and con…

EPSS 0.5%CVSS 9.8

centrifugal1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-71485 · centrifugal centrifugo

Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends

EPSS 0.6%CVSS 9.1

dropbox1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-53424 · dropbox samly

Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

EPSS 0.6%CVSS 9.1

PTC1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-77644 · PTC Windchill Risk and Reliability Enterprise Edition (Formerly Relex)

Critical Bypass Access Control Vulnerability Reported for Windchill Risk and Reliability (WRR) Enterprise Edition

EPSS 0.4%CVSS 9.3

torproject2 vulnerabilities on this pageMax CVSS 9.3Priority 34KEV 0

CVE-2026-77642 · torproject Tor

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest t…

EPSS 0.4%CVSS 9.3

CVE-2026-77638 · torproject Tor

Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impers…

EPSS 0.3%CVSS 9.0

The archive.