Critical CVEs
3,297 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-109618 |
9.2 |
1.0000
|
100.0% | 2026-10-21 | KEV 710 PoC | PHP contains an out-of-memory corruption vulnerability that allows for unauthenticated rem |
CVE-2026-109619 |
9.2 |
1.0000
|
100.0% | 2026-10-21 | KEV | PHP contains a stale internal request-state vulnerability that allows for unauthenticated |
CVE-2026-21589 |
9.3 |
0.9948
|
99.9% | 2026-10-05 | KEV | Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service M |
CVE-2026-41940 |
9.3 |
0.9853
|
99.9% | 2026-04-29 | KEV RW | WebPros cPanel & WHM (WebHost Manager) and WP2 (WordPress Squared) contain an authenticati |
CVE-2026-63077 |
9.8 |
0.9356
|
99.8% | 2026-07-27 | KEV RW | JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could a |
CVE-2026-39808 |
9.8 |
0.9319
|
99.8% | 2026-04-14 | KEV | Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an u |
CVE-2026-20182 |
10.0 |
0.9182
|
99.8% | 2026-05-14 | KEV | Cisco Catalyst SD-WAN Controller & Manager contain an authentication bypass vulnerability |
CVE-2026-71362 |
9.1 |
0.9049
|
99.8% | 2026-08-11 | KEV | Adobe Commerce and Magento contains an incorrect authorization vulnerability that could al |
CVE-2026-42208 |
9.3 |
0.8942
|
99.8% | 2026-05-08 | KEV | BerriAI LiteLLM contains a SQL injection vulnerability that allows an attacker to read dat |
CVE-2026-48908 |
10.0 |
0.8851
|
99.8% | 2026-06-20 | KEV | JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vul |
CVE-2026-111497 |
9.2 |
0.8799
|
99.8% | 2026-10-22 | KEV | Google Brotli contains an unchecked return value vulnerability that allows a remote unauth |
CVE-2024-21762 |
9.8 |
0.8459
|
99.7% | 2024-02-09 | KEV RW | Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthe |
CVE-2026-105134 |
10.0 |
0.8176
|
99.6% | 2026-10-04 | KEV | Ahsay AhsayCBS contains a command injection vulnerability that could allow a remote attack |
CVE-2026-41089 |
9.8 |
0.7962
|
99.6% | 2026-05-12 | Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute | |
CVE-2026-55040 |
9.1 |
0.6954
|
99.4% | 2026-07-14 | KEV 5 PoC | Microsoft SharePoint contains a weak authentication vulnerability which allows an unauthor |
CVE-2026-42945 |
9.2 |
0.6805
|
99.3% | 2026-05-13 | NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module modul | |
CVE-2026-0740 |
9.8 |
0.6290
|
99.2% | 2026-04-07 | The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file upload | |
CVE-2026-48356 |
9.3 |
0.5908
|
99.1% | 2026-07-14 | KEV | Adobe Commerce and Magento contain an unrestricted upload of file with dangerous type vuln |
CVE-2026-2699 |
9.8 |
0.5839
|
99.1% | 2026-04-02 | Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attack | |
CVE-2026-48282 |
10.0 |
0.4239
|
98.7% | 2026-06-30 | KEV | Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code |
CVE-2026-0300 |
9.3 |
0.4171
|
98.7% | 2026-05-06 | KEV | Palo Alto Networks PAN-OS contains an out-of-bounds write vulnerability in the User-ID Aut |
CVE-2026-19490 |
9.3 |
0.3265
|
98.3% | 2026-08-19 | KEV | Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability |
CVE-2026-41679 |
10.0 |
0.3167
|
98.3% | 2026-04-23 | Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a | |
CVE-2026-56290 |
10.0 |
0.3087
|
98.2% | 2026-06-29 | KEV | Joomlack Page Builder contains an improper access control vulnerability that could allow f |
CVE-2026-9198 |
9.8 |
0.2866
|
98.1% | 2026-07-17 | KEV | Langflow contains a code injection vulnerability that allows unauthenticated attackers to |
CVE-2026-39813 |
9.8 |
0.2222
|
97.7% | 2026-04-14 | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, | |
CVE-2026-22679 |
9.3 |
0.2036
|
97.5% | 2026-04-07 | Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote | |
CVE-2026-48939 |
10.0 |
0.2007
|
97.4% | 2026-06-20 | KEV | iCagenda contains an unrestricted upload of file with dangerous type vulnerability that al |
CVE-2026-9586 |
9.3 |
0.1898
|
97.3% | 2026-07-17 | KEV | Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated r |
CVE-2026-41268 |
9.8 |
0.1744
|
97.1% | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-58644 |
9.8 |
0.1587
|
96.9% | 2026-07-14 | KEV | Microsoft SharePoint contains a deserialization of untrusted data vulnerability that allow |
CVE-2026-25874 |
9.3 |
0.1555
|
96.8% | 2026-04-23 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async infere | |
CVE-2026-61447 |
10.0 |
0.1524
|
96.8% | 2026-07-11 | PraisonAI before 1.6.78 contains a remote code execution vulnerability in CodeAgent._execu | |
CVE-2024-48884 |
9.1 |
0.1521
|
96.7% | 2025-01-14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerabi | |
CVE-2026-45829 |
10.0 |
0.1515
|
96.7% | 2026-05-18 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the Chroma | |
CVE-2026-56291 |
10.0 |
0.1485
|
96.7% | 2026-07-09 | KEV | Balbooa Forms contains an unrestricted upload of file with dangerous type vulnerability th |
CVE-2026-23696 |
9.4 |
0.1358
|
96.5% | 2026-04-07 | Windmill CE and EE versions 1.276.0 through 1.603.2 contain an SQL injection vulnerability | |
CVE-2026-40933 |
9.9 |
0.1196
|
96.1% | 2026-04-21 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-110447 |
9.2 |
0.1163
|
96.0% | 2026-10-14 | KEV | Collabora Collabora Online – Built-in CODE Server when used within the NextCloud platform |
CVE-2026-20147 |
9.9 |
0.1038
|
95.7% | 2026-04-15 | A vulnerability in Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attack | |
CVE-2026-64849 |
9.3 |
0.1002
|
95.6% | 2026-08-17 | KEV | MLflow contains a server-side request forgery vulnerability that can allow attackers to re |
CVE-2026-58138 |
9.3 |
0.0914
|
95.3% | 2026-06-30 | Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vu | |
CVE-2026-45087 |
10.0 |
0.0873
|
95.1% | 2026-05-27 | Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2 | |
CVE-2026-58455 |
9.2 |
0.0804
|
94.8% | 2026-07-02 | Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability t | |
CVE-2025-6424 |
9.8 |
0.0796
|
94.7% | 2025-06-24 | A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerab | |
CVE-2026-48030 |
9.9 |
0.0755
|
94.5% | 2026-07-27 | Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to be | |
CVE-2026-54069 |
9.2 |
0.0747
|
94.5% | 2026-06-24 | SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note | |
CVE-2026-67208 |
9.3 |
0.0722
|
94.3% | 2026-07-30 | Juggle through 1.6.0 contains a remote code execution vulnerability that allows unauthenti | |
CVE-2024-51092 |
9.1 |
0.0718
|
94.3% | 2026-05-08 | LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command | |
CVE-2026-8985 |
10.0 |
0.0709
|
94.2% | 2026-07-21 | Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection |