Critical vulnerability archive — page 94

LB-LINK2 vulnerabilities on this pageMax CVSS 9.2Priority 55KEV 0

CVE-2026-19900 · LB-LINK X-PRO

LB-LINK X-PRO shadow hard-coded credentials

EPSS 3%public exploit CVSS 9.2

CVE-2026-19901 · LB-LINK X-PRO

LB-LINK X-PRO easycwmp hard-coded credentials

EPSS 0.8%public exploit CVSS 9.2

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2026-19924 · Tenda AC10

Tenda AC10 httpd R7WebsSecurityHandler improper authentication

EPSS 1%public exploit CVSS 9.8

mitre19 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2026-67868 · mitre

A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems proc…

EPSS 1%public exploit CVSS 9.8

CVE-2026-67919 · mitre

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and Defaul…

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-38165 · mitre

A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows…

EPSS 0.9%public exploit CVSS 9.8

CVE-2026-50775 · mitre

A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a cra…

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-67678 · mitre

File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-50772 · mitre

An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password re…

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-50769 · mitre

The CRM+ application before and including version 2025.6 from Brainformatik is vulnerable to SQL Injection (time-based) vulnerability.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-50774 · mitre

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-67917 · mitre

zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.

EPSS 0.6%public exploit CVSS 9.8

CVE-2026-51346 · mitre

SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and o…

EPSS 0.7%public exploit CVSS 9.1

CVE-2026-51977 · mitre

An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privil…

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-39254 · mitre

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice…

EPSS 0.8%CVSS 9.8

CVE-2026-39255 · mitre

Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice…

EPSS 0.8%CVSS 9.8

CVE-2026-67926 · mitre

An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module

EPSS 0.9%CVSS 9.8

CVE-2026-67854 · mitre

SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code

EPSS 0.7%CVSS 9.8

CVE-2026-42164 · mitre

Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allo…

EPSS 0.6%CVSS 9.8

CVE-2026-50770 · mitre

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.

EPSS 0.6%CVSS 9.8

CVE-2026-42163 · mitre

Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) und…

EPSS 0.5%CVSS 9.8

CVE-2026-42162 · mitre

Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to…

EPSS 0.5%CVSS 9.1

Edimax2 vulnerabilities on this pageMax CVSS 9.9Priority 51KEV 0

CVE-2026-19959 · Edimax EW-7478APC

Edimax EW-7478APC formWanTcpipSetup stack-based overflow

EPSS 0.8%public exploit CVSS 9.9

CVE-2026-19961 · Edimax EW-7478APC

Edimax EW-7478APC formWlSiteSurvey buffer overflow

EPSS 0.8%public exploit CVSS 9.9

siyuan-note9 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2026-73046 · siyuan-note siyuan

SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-73056 · siyuan-note siyuan

SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token

EPSS 0.8%public exploit CVSS 9.8

CVE-2026-73052 · siyuan-note siyuan

SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-73053 · siyuan-note siyuan

SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji

EPSS 0.5%public exploit CVSS 9.4

CVE-2026-73041 · siyuan-note siyuan

SiYuan before v3.7.4 Remote Code Execution via PDF Annotations

EPSS 0.4%public exploit CVSS 9.4

CVE-2026-73044 · siyuan-note siyuan

SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width

EPSS 0.4%public exploit CVSS 9.4

CVE-2026-73050 · siyuan-note siyuan

SiYuan before v3.7.4 Stored XSS via select option color

EPSS 0.4%public exploit CVSS 9.4

CVE-2026-73043 · siyuan-note siyuan

SiYuan before v3.7.4 Remote Code Execution via Template Calculation

EPSS 0.6%CVSS 9.4

CVE-2026-73042 · siyuan-note siyuan

SiYuan before v3.7.4 Remote Code Execution via Menu Metadata

EPSS 0.5%CVSS 9.4

sc0ttkclark1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-19598 · sc0ttkclark Pods – Custom Content Types and Fields

Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router

EPSS 2%CVSS 9.8

scriban3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-73061 · scriban scriban

Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-74790 · scriban scriban

Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache

EPSS 0.5%public exploit CVSS 9.3

CVE-2026-74791 · scriban scriban

Scriban before 7.0.0 Authorization Bypass via Stale Include Cache

EPSS 0.4%public exploit CVSS 9.2

Unknown2 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2026-19725 · Unknown WPvivid — Backup, Migration & Staging

WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect

EPSS 0.5%public exploit CVSS 9.1

CVE-2026-19714 · Unknown Simple JWT Login

Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation

EPSS 0.4%public exploit CVSS 9.1

prosolution2 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2026-16098 · prosolution ProSolution WP Client

ProSolution WP Client <= 2.0.10 - Unauthenticated Arbitrary File Upload via Content-Disposition Header Filename Override

EPSS 1%CVSS 9.8

CVE-2026-14524 · prosolution ProSolution WP Client

ProSolution WP Client <= 2.0.8 - Unauthenticated Arbitrary File Deletion via 'newfilename' and 'filename' Parameters

EPSS 1%CVSS 9.1

jackdewey1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-18855 · jackdewey Link Library

Link Library <= 7.9.4 - Unauthenticated Arbitrary File Deletion via link_url Parameter

EPSS 1%CVSS 9.1

CPANSec2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-19349 · CPANSec

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends

EPSS 0.8%CVSS 9.8

CVE-2026-72887 · CPANSec

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in get_request_token

EPSS 0.7%CVSS 9.8

reputeinfosystems1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-13784 · reputeinfosystems Contact Form, Survey, Quiz & Popup Form Builder – ARForms

Contact Form, Survey, Quiz & Popup Form Builder – ARForms <= 1.8.5 - Unauthenticated PHP Object Injection

EPSS 0.8%CVSS 9.8

shabti1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-18432 · shabti Frontend Admin by DynamiApps

Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter

EPSS 0.8%CVSS 9.8

pandora-analysis1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2026-74764 · pandora-analysis pandora

Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora

EPSS 0.6%CVSS 10.0

ABEVERLEY1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-15689 · ABEVERLEY Dancer2::Plugin::Auth::Extensible

Dancer2::Plugin::Auth::Extensible versions through 0.713 for Perl allow password reset link poisoning via the request Host header in _default_email_password_reset and _default_welcome_send

EPSS 0.6%CVSS 9.8

solacewp1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2026-18316 · solacewp Solace Extra

Solace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action

EPSS 0.6%CVSS 9.1

phoca.cz1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2026-74251 · phoca.cz Phoca Cart extension for Joomla

Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6

EPSS 0.4%CVSS 9.3

The archive.