Critical CVEs
3,395 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-6057 |
9.8 |
0.0093
|
60.4% | 2026-04-10 | FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the fil | |
CVE-2026-85809 |
9.8 |
0.0093
|
60.4% | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-85814 |
9.8 |
0.0093
|
60.4% | 2026-10-13 | Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized at | |
CVE-2024-58351 |
9.3 |
0.0093
|
60.4% | 2026-06-20 | Flowise before 2.1.4 allows configuration to be injected into the Chainflow during executi | |
CVE-2026-0685 |
9.8 |
0.0093
|
60.4% | 2026-06-26 | Server side template inject (SSTI) in the expression evaluation component in Genshi Templa | |
CVE-2026-43867 |
9.8 |
0.0093
|
60.4% | 2026-07-06 | Deserialization of Untrusted Data vulnerability in Apache Camel PQC Component. The camel- | |
CVE-2026-52200 |
9.8 |
0.0093
|
60.4% | 2026-07-08 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execut | |
CVE-2026-67919 |
9.8 |
0.0093
|
60.4% | 2026-08-17 | An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginE | |
CVE-2026-58275 |
10.0 |
0.0092
|
60.4% | 2026-07-24 | Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges o | |
CVE-2026-62825 |
10.0 |
0.0092
|
60.4% | 2026-07-24 | Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate priv | |
CVE-2026-17436 |
9.8 |
0.0092
|
60.3% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-18832 |
9.8 |
0.0092
|
60.3% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17142 |
9.8 |
0.0092
|
60.3% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-22313 |
9.1 |
0.0092
|
60.2% | 2026-06-16 | The device has a webserver that exposes a REST API authenticated with a token on the manag | |
CVE-2026-113736 |
9.3 |
0.0092
|
60.2% | 2026-10-21 | A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03. The impacted element is the | |
CVE-2026-69098 |
9.3 |
0.0091
|
60.0% | 2026-08-04 | kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_co | |
CVE-2018-25254 |
9.3 |
0.0091
|
60.0% | 2026-04-04 | NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability th | |
CVE-2026-57092 |
9.9 |
0.0091
|
60.0% | 2026-07-14 | Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges ove | |
CVE-2026-41900 |
10.0 |
0.0091
|
59.9% | 2026-05-08 | OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to ver | |
CVE-2026-32871 |
10.0 |
0.0091
|
59.9% | 2026-04-02 | FastMCP is a Pythonic way to build MCP servers and clients. Prior to version 3.2.0, the Op | |
CVE-2026-68770 |
9.3 |
0.0091
|
59.9% | 2026-07-31 | sentence-transformers contains a security control bypass vulnerability that allows attacke | |
CVE-2026-85806 |
9.8 |
0.0091
|
59.8% | 2026-10-13 | Integer underflow (wrap or wraparound) in Network Policy Server (NPS) allows an unauthoriz | |
CVE-2026-8984 |
10.0 |
0.0091
|
59.7% | 2026-07-21 | Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code exe | |
CVE-2026-58116 |
9.3 |
0.0090
|
59.7% | 2026-06-30 | LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows att | |
CVE-2026-107092 |
9.8 |
0.0090
|
59.7% | 2026-10-26 | 1 PoC | NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. |
CVE-2026-40324 |
9.1 |
0.0090
|
59.6% | 2026-04-18 | Hot Chocolate is an open-source GraphQL server. Prior to versions 12.22.7, 13.9.16, 14.3.1 | |
CVE-2026-45480 |
10.0 |
0.0090
|
59.6% | 2026-06-19 | Improper authentication in Azure Active Directory allows an unauthorized attacker to eleva | |
CVE-2026-56191 |
10.0 |
0.0090
|
59.6% | 2026-07-24 | Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to pe | |
CVE-2026-56163 |
10.0 |
0.0090
|
59.6% | 2026-07-24 | Missing authentication for critical function in Microsoft Azure Kubernetes Service allows | |
CVE-2026-57106 |
10.0 |
0.0090
|
59.6% | 2026-07-24 | Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to elev | |
CVE-2026-66803 |
10.0 |
0.0090
|
59.6% | 2026-07-30 | Improper access control in Azure Cosmos DB allows an unauthorized attacker to execute code | |
CVE-2026-56162 |
10.0 |
0.0090
|
59.6% | 2026-08-06 | Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate p | |
CVE-2026-65801 |
10.0 |
0.0090
|
59.6% | 2026-08-20 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized att | |
CVE-2026-114278 |
9.8 |
0.0090
|
59.5% | 2026-10-28 | The che-machine-exec service constructs a shell command by concatenating user-controlled i | |
CVE-2023-46453 |
9.8 |
0.0090
|
59.5% | 2026-05-08 | Certain GL.iNet devices with 4.x firmware allow authentication bypass (resulting in admini | |
CVE-2026-83935 |
9.8 |
0.0090
|
59.5% | 2026-10-13 | Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute cod | |
CVE-2026-53633 |
9.8 |
0.0090
|
59.5% | 2026-07-14 | Vitest is a testing framework powered by Vite. From 3.0.0 until 3.2.5, 4.1.8, and 5.0.0-be | |
CVE-2026-86400 |
9.8 |
0.0090
|
59.5% | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 relea | |
CVE-2026-64767 |
9.8 |
0.0089
|
59.4% | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-85792 |
9.8 |
0.0089
|
59.3% | 2026-10-13 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker | |
CVE-2026-96219 |
9.8 |
0.0089
|
59.3% | 2026-10-13 | Out-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows a | |
CVE-2023-25207 |
9.8 |
0.0089
|
59.3% | 2023-03-13 | PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php. | |
CVE-2026-24254 |
9.8 |
0.0089
|
59.3% | 2026-08-04 | NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where | |
CVE-2026-73414 |
9.2 |
0.0089
|
59.3% | 2026-08-12 | Shescape is a simple shell escape library for JavaScript. Prior to 2.1.14 and 3.0.1, getEs | |
CVE-2023-29129 |
9.8 |
0.0089
|
59.2% | 2023-06-13 | A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= | |
CVE-2026-110063 |
10.0 |
0.0089
|
59.2% | 2026-10-22 | 1 PoC | Improper link resolution before file access ('link following') in VM Inspector for Azure V |
CVE-2026-75854 |
9.3 |
0.0089
|
59.2% | 2026-08-18 | ArcadeDB versions before 26.8.1 contain a missing authentication vulnerability in the Redi | |
CVE-2026-47731 |
9.1 |
0.0089
|
59.2% | 2026-07-21 | The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Sp | |
CVE-2026-23751 |
9.3 |
0.0088
|
59.1% | 2026-04-23 | Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be | |
CVE-2020-37281 |
9.2 |
0.0088
|
59.1% | 2026-10-14 | Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability th |