Critical vulnerability archive — page 97

MindsDB1 vulnerability on this pageMax CVSS 10.0Priority 55KEV 0

CVE-2026-73678 · MindsDB Minds Platform

MindsDB Minds Platform v26.1.0 Unauthenticated RCE via scratchpad exec()

EPSS 2%public exploit CVSS 10.0

emlog1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-73849 · emlog emlog

emlog allows unauthenticated reinstallation via `install.php?action=reinstall`.

EPSS 0.7%public exploit CVSS 9.8

Tenable, Inc.2 vulnerabilities on this pageMax CVSS 9.9Priority 48KEV 0

CVE-2026-19681 · Tenable, Inc. Security Center

Command Injection

EPSS 4%CVSS 9.9

CVE-2026-19682 · Tenable, Inc. Security Center

Command Injection

EPSS 2%CVSS 9.9

Haiwell1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-19188 · Haiwell Haiwell IoT Cloud HMI Gateway

Haiwell IoT Cloud HMI Gateway OS Command Injection

EPSS 3%CVSS 10.0

doobidoo1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2026-50027 · doobidoo mcp-memory-service

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

EPSS 1.0%CVSS 9.8

IBM4 vulnerabilities on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-17184 · IBM Db2 Mirror for i

IBM Db2 Mirror for i is affected by multiple vulnerabilities

EPSS 0.8%CVSS 9.8

CVE-2026-17182 · IBM Db2 Mirror for i

IBM Db2 Mirror for i is affected by multiple vulnerabilities

EPSS 0.7%CVSS 9.8

CVE-2026-17186 · IBM Db2 Mirror for i

IBM Db2 Mirror for i is affected by multiple vulnerabilities

EPSS 0.5%CVSS 9.9

CVE-2026-17181 · IBM Db2 Mirror for i

IBM Db2 Mirror for i is affected by multiple vulnerabilities

EPSS 0.5%CVSS 9.3

Linux33 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-72033 · Linux Linux

orangefs: keep the readdir entry size 64-bit in fill_from_part()

EPSS 0.8%CVSS 9.8

CVE-2026-72098 · Linux Linux

dm-verity: fix buffer overflow in FEC calculation

EPSS 0.8%CVSS 9.8

CVE-2026-72130 · Linux Linux

nvmet-auth: reject short AUTH_RECEIVE buffers

EPSS 0.8%CVSS 9.8

CVE-2026-72194 · Linux Linux

fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow

EPSS 0.8%CVSS 9.8

CVE-2026-68476 · Linux Linux

ipvs: reload ip header after head reallocation

EPSS 0.7%CVSS 9.8

CVE-2026-68477 · Linux Linux

ipvs: fix more places with wrong ipv6 transport offsets

EPSS 0.7%CVSS 9.8

CVE-2026-72014 · Linux Linux

drbd: reject data replies with an out-of-range payload size

EPSS 0.7%CVSS 9.8

CVE-2026-72020 · Linux Linux

ipvs: reset full ip_vs_seq structs in ip_vs_conn_new

EPSS 0.7%CVSS 9.8

CVE-2026-72041 · Linux Linux

espintcp: use sk_msg_free_partial to fix partial send

EPSS 0.7%CVSS 9.8

CVE-2026-72046 · Linux Linux

gve: fix header buffer corruption with header-split and HW-GRO

EPSS 0.6%CVSS 9.8

CVE-2026-72065 · Linux Linux

net: mana: Validate the packet length reported by the NIC

EPSS 0.7%CVSS 9.8

CVE-2026-72069 · Linux Linux

locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()

EPSS 0.7%CVSS 9.8

CVE-2026-72083 · Linux Linux

scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

EPSS 0.7%CVSS 9.8

CVE-2026-72084 · Linux Linux

scsi: target: Bound PR-OUT TransportID parsing to the received buffer

EPSS 0.7%CVSS 9.8

CVE-2026-72129 · Linux Linux

nvmet-rdma: handle inline data with a nonzero offset

EPSS 0.7%CVSS 9.8

CVE-2026-72137 · Linux Linux

xfrm: nat_keepalive: avoid double free on send error

EPSS 0.7%CVSS 9.8

CVE-2026-72139 · Linux Linux

tcp: defer md5sig_info kfree past RCU grace period in tcp_connect

EPSS 0.6%CVSS 9.8

CVE-2026-72185 · Linux Linux

ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock()

EPSS 0.7%CVSS 9.8

CVE-2026-72191 · Linux Linux

ntfs3: validate split-point offset in indx_insert_into_buffer

EPSS 0.7%CVSS 9.8

CVE-2026-72192 · Linux Linux

ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head

EPSS 0.7%CVSS 9.8

CVE-2026-72200 · Linux Linux

ntfs: detect mapping-pairs LCN accumulator overflow

EPSS 0.7%CVSS 9.8

CVE-2026-72199 · Linux Linux

ntfs: validate resident index root values on lookup

EPSS 0.6%CVSS 9.8

CVE-2026-72201 · Linux Linux

ntfs: validate index entries on reading

EPSS 0.6%CVSS 9.8

CVE-2026-72206 · Linux Linux

ntfs: validate index block header more strictly

EPSS 0.6%CVSS 9.8

CVE-2026-72207 · Linux Linux

ntfs: not change 0-byte $DATA attribute to non-resident

EPSS 0.6%CVSS 9.8

CVE-2026-72208 · Linux Linux

ntfs: add bounds check before accessing EA entries

EPSS 0.6%CVSS 9.8

CVE-2026-72209 · Linux Linux

ntfs: validate attribute values on lookup

EPSS 0.6%CVSS 9.8

CVE-2026-72210 · Linux Linux

ntfs: fix off-by-one in mapping pairs decoding bounds checks

EPSS 0.6%CVSS 9.8

CVE-2026-68457 · Linux Linux

ksmbd: use opener credentials for FSCTL mutations

EPSS 0.7%CVSS 9.1

CVE-2026-72064 · Linux Linux

net: mana: Sync page pool RX frags for CPU

EPSS 0.5%CVSS 9.8

CVE-2026-72186 · Linux Linux

ntfs: make system files immutable to prevent corruption

EPSS 0.5%CVSS 9.1

CVE-2026-72188 · Linux Linux

ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name()

EPSS 0.5%CVSS 9.1

CVE-2026-72085 · Linux Linux

scsi: xen: scsiback: Free unsubmitted command instead of double-putting it

EPSS 0.2%CVSS 9.3

pietror911 vulnerability on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2026-14484 · pietror91 RapiSafe – Secure Multi File Upload for Contact Form 7

RapiSafe <= 1.0.4 - Unauthenticated Arbitrary File Deletion via 'rsmfcf7_session' and 'file_name' Parameters

EPSS 1%CVSS 9.1

sixstorage1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-15303 · sixstorage 6Storage Rentals

6Storage Rentals <= 2.27.0 - Unauthenticated Account Takeover via 'email' Parameter

EPSS 0.8%CVSS 9.8

Laravel1 vulnerability on this pageMax CVSS 9.2Priority 39KEV 0

CVE-2026-73683 · Laravel Socialite

Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

EPSS 0.8%CVSS 9.2

rafasashi1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-15341 · rafasashi User Session Synchronizer

User Session Synchronizer <= 1.4.0 - Unauthenticated Authentication Bypass to Account Takeover via 'ussync-key', 'ussync-token', and 'ussync-ref' Parameters

EPSS 0.6%CVSS 9.8

NCEAS1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-48528 · NCEAS metacat

Metacat has an unauthenticated SQL injection vulnerability

EPSS 0.5%CVSS 9.8

icagenda.com1 vulnerability on this pageMax CVSS 9.2Priority 34KEV 0

CVE-2026-67365 · icagenda.com iCagenda extension for Joomla

Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11

EPSS 0.4%CVSS 9.2

benoitc1 vulnerability on this pageMax CVSS 9.1Priority 31KEV 0

CVE-2026-49457 · benoitc erlang_quic

QUIC has Broken TLS verification

EPSS 0.2%CVSS 9.1

The archive.