Critical vulnerability archive — page 92

COMFAST1 vulnerability on this pageMax CVSS 9.4Priority 56KEV 0

CVE-2026-75094 · COMFAST CF-N1-S

COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection

EPSS 3%public exploit CVSS 9.4

TRENDnet2 vulnerabilities on this pageMax CVSS 10.0Priority 53KEV 0

CVE-2026-75784 · TRENDnet TEW-WLC100

TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow

EPSS 1%public exploit CVSS 10.0

CVE-2026-75783 · TRENDnet TEW-WLC100P

TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow

EPSS 0.6%public exploit CVSS 9.6

ArcadeData4 vulnerabilities on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-75854 · ArcadeData arcadedb

ArcadeDB Redis Wire-Protocol Plugin Missing Authentication

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-75843 · ArcadeData arcadedb

ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-75851 · ArcadeData arcadedb

ArcadeDB before 26.8.1 Authentication Bypass via Async Command

EPSS 0.4%public exploit CVSS 9.9

CVE-2026-75852 · ArcadeData arcadedb

ArcadeDB MongoDB wire protocol authentication bypass cross-database

EPSS 0.7%CVSS 9.8

bastillion-io1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-75627 · bastillion-io Bastillion

Bastillion Authentication Bypass via Path-Prefix Routing Mismatch

EPSS 0.8%public exploit CVSS 9.8

mitre4 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-52610 · mitre

An arbitrary file write/directory traversal vulnerability in reportico-web <= 8.1.0 allows remote attackers to create or overwrite files…

EPSS 1%public exploit CVSS 9.1

CVE-2021-43717 · mitre

An issue exists in pson EH-TW5350 Epson iProjection.apk v3.2.6.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-67921 · mitre

Cross-Site Request Forgery (CSRF) vulnerability exists in Halo CMS versions up to 2.25.4 via the CorsConfigurer.java and the CsrfConfigur…

EPSS 0.3%public exploit CVSS 9.3

CVE-2026-52608 · mitre

An incorrect access control vulnerability in reportico-web <= 8.1.0 allows an unauthenticated attacker to inject arbitrary php code into…

EPSS 0.9%CVSS 9.8

getgrav5 vulnerabilities on this pageMax CVSS 9.3Priority 50KEV 0

wpmudev1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-15748 · wpmudev Forminator Forms – Contact Form, Payment Form & Custom Form Builder

Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration

EPSS 4%CVSS 9.8

smicallef1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2026-75626 · smicallef spiderfoot

SpiderFoot Stored Cross-Site Scripting via Correlation Titles

EPSS 0.3%public exploit CVSS 9.3

AresIT1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2026-73343 · AresIT WP Compress

WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability

EPSS 0.9%CVSS 10.0

Cwicly1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-32444 · Cwicly Cwicly

WordPress Cwicly plugin <= 1.4.4 - Remote Code Execution (RCE) vulnerability

EPSS 0.8%CVSS 9.9

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-34884 · Apache Software Foundation Apache SkyWalking MCP

Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server

EPSS 0.7%CVSS 9.8

Mozilla17 vulnerabilities on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-74964 · Mozilla Firefox

Integer overflow in the Graphics component

EPSS 0.7%CVSS 9.8

CVE-2026-74987 · Mozilla Firefox

Internally found bugs fixed in Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

EPSS 0.7%CVSS 9.8

CVE-2026-74990 · Mozilla Firefox

Internally found bugs fixed in Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1 and Firefox 154

EPSS 0.7%CVSS 9.8

CVE-2026-74936 · Mozilla Firefox

Use-after-free in the JavaScript: WebAssembly component

EPSS 0.6%CVSS 9.8

CVE-2026-74940 · Mozilla Firefox

Use-after-free in the Graphics: Text component

EPSS 0.6%CVSS 9.8

CVE-2026-74943 · Mozilla Firefox

Use-after-free in the Graphics: ImageLib component

EPSS 0.6%CVSS 9.8

CVE-2026-74944 · Mozilla Firefox

Use-after-free in the DOM: Core & HTML component

EPSS 0.6%CVSS 9.8

CVE-2026-74988 · Mozilla Firefox

Internally found bugs fixed in Firefox ESR 153.1 and Firefox 154

EPSS 0.6%CVSS 9.8

CVE-2026-74989 · Mozilla Firefox

Internally found bugs fixed in Firefox 154

EPSS 0.6%CVSS 9.8

CVE-2026-74985 · Mozilla Firefox

Privilege escalation in the Enterprise Policies component

EPSS 0.5%CVSS 9.8

CVE-2026-75874 · Mozilla Firefox

Sandbox escape in the Remote Settings Client component

EPSS 0.5%CVSS 10.0

CVE-2026-74986 · Mozilla Firefox

Site isolation issue in the CSS Parsing and Computation component

EPSS 0.6%CVSS 9.1

CVE-2026-74956 · Mozilla Firefox

Same-origin policy bypass in the DOM: Service Workers component

EPSS 0.5%CVSS 9.1

CVE-2026-74959 · Mozilla Firefox

Mitigation bypass in the Storage: Cache API component

EPSS 0.5%CVSS 9.1

CVE-2026-74938 · Mozilla Firefox

Mitigation bypass in the JavaScript: GC component

EPSS 0.4%CVSS 9.1

CVE-2026-74961 · Mozilla Firefox

Side-channel in the Web Audio component

EPSS 0.4%CVSS 9.1

CVE-2026-74979 · Mozilla Firefox

Mitigation bypass in the Add-ons Manager component

EPSS 0.3%CVSS 9.8

Metagauss1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-73341 · Metagauss RegistrationMagic

WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

Roxnor1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-32470 · Roxnor FundEngine

WordPress FundEngine plugin <= 1.7.9 - PHP Object Injection vulnerability

EPSS 0.6%CVSS 9.8

EDGE22 Studios Ltd.1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-66627 · EDGE22 Studios Ltd. GP Premium

WordPress GP Premium plugin <= 2.5.5 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Kamlesh Parmar1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-32463 · Kamlesh Parmar Sync Post With Other Site

WordPress Sync Post With Other Site plugin <= 1.9.3 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

wpWax1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2026-32474 · wpWax Templatiq

WordPress Templatiq plugin <= 0.2.5 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

Zabbix1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-23933 · Zabbix Zabbix

Hardcoded session key in Zabbix 7.4

EPSS 0.6%CVSS 9.1

Piotnet1 vulnerability on this pageMax CVSS 9.6Priority 36KEV 0

CVE-2026-28192 · Piotnet Piotnet Addons For Elementor Pro

WordPress Piotnet Addons For Elementor Pro plugin <= 7.1.67 - Arbitrary File Upload vulnerability

EPSS 0.4%CVSS 9.6

gingerplugins1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-73187 · gingerplugins Sticky Chat Widget

WordPress Sticky Chat Widget plugin <= 1.4.2 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

Webnus Inc.1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-73339 · Webnus Inc. Modern Events Calendar

WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

wp.insider1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-73355 · wp.insider Affiliates Manager

WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability

EPSS 0.4%CVSS 9.3

siyuan-note1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2026-74902 · siyuan-note siyuan

SiYuan before v3.7.4 XSS-to-RCE via malicious filename upload

EPSS 0.2%CVSS 9.3

The archive.