Critical vulnerability archive — page 91

TRENDnet1 vulnerability on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-75877 · TRENDnet TV-IP751WIC

TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

EPSS 0.9%public exploit CVSS 9.9

froxlor1 vulnerability on this pageMax CVSS 9.0Priority 47KEV 0

CVE-2026-62988 · froxlor froxlor

Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

EPSS 0.6%public exploit CVSS 9.0

Hmbown2 vulnerabilities on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2026-75856 · Hmbown CodeWhale

CodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU

EPSS 0.5%public exploit CVSS 9.2

CVE-2026-75913 · Hmbown CodeWhale

CodeWhale before 0.8.64 Argument Injection via git_show

EPSS 0.5%public exploit CVSS 9.3

Red Hat2 vulnerabilities on this pageMax CVSS 9.6Priority 46KEV 0

CVE-2026-18963 · Red Hat Red Hat build of Keycloak 26.4

Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

EPSS 5%CVSS 9.1

CVE-2026-12564 · Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8

Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf

EPSS 0.3%CVSS 9.6

Oracle Corporation16 vulnerabilities on this pageMax CVSS 9.9Priority 45KEV 0

CVE-2026-60591 · Oracle Corporation Oracle Hospitality Simphony

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-60672 · Oracle Corporation Oracle WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 0.5%CVSS 9.8

CVE-2026-60696 · Oracle Corporation Oracle WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 0.5%CVSS 9.8

CVE-2026-60698 · Oracle Corporation Oracle WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 0.5%CVSS 9.8

CVE-2026-60721 · Oracle Corporation Oracle Identity Manager

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

EPSS 0.5%CVSS 9.8

CVE-2026-60727 · Oracle Corporation Oracle Identity Manager

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

EPSS 0.5%CVSS 9.8

CVE-2026-60782 · Oracle Corporation Oracle Payments

Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).

EPSS 0.5%CVSS 9.8

CVE-2026-60821 · Oracle Corporation PeopleSoft Enterprise PeopleTools

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).

EPSS 0.5%CVSS 9.8

CVE-2026-60858 · Oracle Corporation Oracle Hyperion Calculation Manager

Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).

EPSS 0.5%CVSS 9.8

CVE-2026-60702 · Oracle Corporation Oracle WebLogic Server

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

EPSS 0.4%CVSS 9.9

CVE-2026-60720 · Oracle Corporation Oracle Identity Manager

Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

EPSS 0.4%CVSS 9.9

CVE-2026-60730 · Oracle Corporation Oracle WebCenter Portal

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

EPSS 0.4%CVSS 9.9

CVE-2026-60728 · Oracle Corporation Oracle WebCenter Portal

Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

EPSS 0.5%CVSS 9.1

CVE-2026-60754 · Oracle Corporation Siebel Apps - Marketing

Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

EPSS 0.5%CVSS 9.1

CVE-2026-60737 · Oracle Corporation Oracle Web Services Manager

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).

EPSS 0.4%CVSS 9.1

CVE-2026-60861 · Oracle Corporation Service Delivery Platform

Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

EPSS 0.4%CVSS 9.6

Netflix1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2026-55166 · Netflix lemur

Lemur: any SSO-authenticated user achieves AWS IAM compromise and permanent PKI key access via ACME acme_url SSRF and creator-equality IDOR

EPSS 0.3%public exploit CVSS 9.9

mybb2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-45117 · mybb mybb

MyBB: Installer database configuration RCE

EPSS 1%CVSS 9.8

CVE-2026-45118 · mybb mybb

MyBB: Contact page reflected XSS

EPSS 0.5%CVSS 9.3

Dell1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-67271 · Dell PowerStore 500T

Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in SMB/CIFS.

EPSS 0.8%CVSS 9.8

lxsmnsyc1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-59940 · lxsmnsyc seroval

Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization

EPSS 0.8%CVSS 9.8

Joomla! Project1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-73373 · Joomla! Project Joomla! CMS

Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2

EPSS 0.6%CVSS 9.8

NVIDIA2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-47627 · NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.

EPSS 0.7%CVSS 9.8

CVE-2026-47606 · NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.

EPSS 0.7%CVSS 9.1

uber1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2026-75625 · uber kraken

Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

EPSS 0.2%public exploit CVSS 9.1

baresip1 vulnerability on this pageMax CVSS 9.3Priority 39KEV 0

CVE-2026-50161 · baresip re

libre: Integer overflow in websock_decode() masked frame length check leads to heap buffer overflow

EPSS 0.7%CVSS 9.3

GBIF2 vulnerabilities on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-71878 · GBIF Integrated Publishing Toolkit

Authentication bypass in Integrated Publishing Toolkit

EPSS 0.9%CVSS 9.2

CVE-2026-71879 · GBIF Integrated Publishing Toolkit

Authentication bypass in Integrated Publishing Toolkit

EPSS 0.9%CVSS 9.1

supsystic4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-73366 · supsystic Easy Google Maps

WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-73376 · supsystic Ultimate Maps by Supsystic

WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-73380 · supsystic Popup by Supsystic

WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

CVE-2026-73381 · supsystic Popup by Supsystic

WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability

EPSS 0.5%CVSS 9.1

Youzify1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-73397 · Youzify Youzify

WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability

EPSS 0.6%CVSS 9.8

frangoteam1 vulnerability on this pageMax CVSS 9.2Priority 38KEV 0

CVE-2026-67443 · frangoteam FUXA

FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

EPSS 0.7%CVSS 9.2

goauthentik1 vulnerability on this pageMax CVSS 9.4Priority 38KEV 0

CVE-2026-57580 · goauthentik authentik

authentik: Account Takeover via SAML NameID Comment Truncation

EPSS 0.6%CVSS 9.4

Google2 vulnerabilities on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2026-76036 · Google Chrome

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outsid…

EPSS 0.5%CVSS 9.6

CVE-2026-76035 · Google Chrome

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary c…

EPSS 0.5%CVSS 9.6

ThemeGrill1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-73996 · ThemeGrill Masteriyo - LMS

WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.8

ZcashFoundation1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-52735 · ZcashFoundation zebra

ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

EPSS 0.5%CVSS 9.3

Uptash1 vulnerability on this pageMax CVSS 9.0Priority 36KEV 0

CVE-2026-75130 · Uptash Context7

Context7 2.1.2 Prompt Injection via Custom AI Instructions

EPSS 0.5%CVSS 9.0

Crocoblock. Jetimpex Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-73365 · Crocoblock. Jetimpex Inc. JetAppointment

WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

merkulove1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-74015 · merkulove Readabler

WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

fbeta-GmbH1 vulnerability on this pageMax CVSS 9.1Priority 34KEV 0

CVE-2026-52723 · fbeta-GmbH ePA3-Service-OpenSource

ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust

EPSS 0.4%CVSS 9.1

gohugoio1 vulnerability on this pageMax CVSS 9.3Priority 32KEV 0

CVE-2026-75926 · gohugoio hugo

Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant

EPSS 0.3%CVSS 9.3

The archive.