Critical CVEs
3,491 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-48519 |
9.6 |
0.0078
|
55.9% | 2026-06-23 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-64606 |
9.8 |
0.0078
|
55.9% | 2026-07-21 | Deserialization of untrusted data vulnerability that may allow class-registration checks t | |
CVE-2026-69223 |
9.1 |
0.0078
|
55.9% | 2026-08-11 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue | |
CVE-2026-48024 |
9.1 |
0.0078
|
55.9% | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-67282 |
10.0 |
0.0078
|
55.8% | 2026-08-12 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 | |
CVE-2026-47647 |
9.9 |
0.0078
|
55.8% | 2026-06-18 | Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate | |
CVE-2026-45499 |
9.9 |
0.0078
|
55.8% | 2026-07-02 | Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevat | |
CVE-2026-57100 |
9.9 |
0.0078
|
55.8% | 2026-07-02 | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) al | |
CVE-2026-63887 |
9.8 |
0.0078
|
55.8% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-63888 |
9.8 |
0.0078
|
55.8% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-62830 |
9.9 |
0.0078
|
55.8% | 2026-08-06 | Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileg | |
CVE-2026-69851 |
9.9 |
0.0078
|
55.8% | 2026-08-20 | Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker | |
CVE-2026-83941 |
9.9 |
0.0078
|
55.8% | 2026-09-08 | Missing authorization in Entra ID allows an authorized attacker to elevate privileges over | |
CVE-2026-64609 |
9.1 |
0.0078
|
55.8% | 2026-07-21 | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserial | |
CVE-2026-114509 |
9.2 |
0.0078
|
55.8% | 2026-10-21 | 6 PoC | Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configure |
CVE-2026-34977 |
9.3 |
0.0077
|
55.7% | 2026-04-06 | Aperi'Solve is an open-source steganalysis web platform. In versions 3.1.3 through 3.2.0, | |
CVE-2026-67688 |
9.8 |
0.0077
|
55.7% | 2026-08-06 | ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerabil | |
CVE-2026-67678 |
9.8 |
0.0077
|
55.7% | 2026-08-17 | File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to | |
CVE-2025-70293 |
9.8 |
0.0077
|
55.7% | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability e | |
CVE-2026-49441 |
9.1 |
0.0077
|
55.7% | 2026-08-19 | Wazuh is a free and open source platform used for threat prevention, detection, and respon | |
CVE-2026-17006 |
9.8 |
0.0077
|
55.6% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-17000 |
9.8 |
0.0077
|
55.6% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-65880 |
10.0 |
0.0077
|
55.6% | 2026-07-28 | Joomla Extension - balbooa.com - Unauthenticated remote code execution in Balbooa Forms < | |
CVE-2026-102785 |
10.0 |
0.0077
|
55.6% | 2026-10-22 | Joomla Extension - yootheme.com - Unauthenticated remote code execution in YOOtheme Pro 5. | |
CVE-2026-105192 |
9.8 |
0.0077
|
55.6% | 2026-10-07 | 1 PoC | LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ R |
CVE-2026-55769 |
9.4 |
0.0077
|
55.6% | 2026-08-20 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes envi | |
CVE-2026-15734 |
9.8 |
0.0077
|
55.5% | 2026-08-06 | A Server-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2 and ear | |
CVE-2026-44758 |
9.1 |
0.0077
|
55.5% | 2026-08-11 | SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileg | |
CVE-2025-13590 |
9.1 |
0.0077
|
55.5% | 2026-02-19 | A malicious actor with administrative privileges can upload an arbitrary file to a user-co | |
CVE-2026-44181 |
10.0 |
0.0077
|
55.4% | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clu | |
CVE-2026-65321 |
9.3 |
0.0077
|
55.4% | 2026-08-02 | PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticate | |
CVE-2026-71560 |
9.1 |
0.0077
|
55.4% | 2026-08-07 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects A | |
CVE-2026-43750 |
9.8 |
0.0077
|
55.4% | 2026-07-27 | A buffer overflow was addressed with improved bounds checking. This issue is fixed in macO | |
CVE-2026-35573 |
9.1 |
0.0076
|
55.4% | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vul | |
CVE-2026-6350 |
9.3 |
0.0076
|
55.4% | 2026-04-16 | MailGates/MailAudit developed by Openfind has a Stack-based Buffer Overflow vulnerability, | |
CVE-2026-11405 |
9.8 |
0.0076
|
55.4% | 2026-07-06 | The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in th | |
CVE-2026-46412 |
10.0 |
0.0076
|
55.4% | 2026-07-20 | @beproduct/nestjs-auth is a NestJS authentication module for BeProduct IDS (Identity Serve | |
CVE-2026-66012 |
10.0 |
0.0076
|
55.3% | 2026-07-25 | SiYuan before v3.7.2 contains a missing authorization vulnerability in the POST /mcp kerne | |
CVE-2026-67595 |
9.2 |
0.0076
|
55.3% | 2026-07-29 | VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload emb | |
CVE-2023-30191 |
9.8 |
0.0076
|
55.2% | 2023-05-17 | PrestaShop cdesigner < 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleF | |
CVE-2026-79851 |
10.0 |
0.0076
|
55.2% | 2026-10-22 | Buffer overflow vulnerabilities exist in the affected interface of AOS-10 that could lead | |
CVE-2026-20744 |
9.3 |
0.0076
|
55.1% | 2026-07-10 | The charging station websocket endpoint accepts connections without proper authentication | |
CVE-2026-47131 |
10.0 |
0.0076
|
55.1% | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, by combining Buffer | |
CVE-2026-16462 |
9.3 |
0.0075
|
55.0% | 2026-07-28 | In PROCON-WEB SCADA the endpoint 'GetGridData' is not properly sanitized. This allows a re | |
CVE-2026-68503 |
9.8 |
0.0075
|
55.0% | 2026-07-30 | LazyOwn RedTeam/APT Framework is an AI-powered C2 and red-team operations framework. Prior | |
CVE-2024-26828 |
9.4 |
0.0075
|
55.0% | 2024-04-17 | In the Linux kernel, the following vulnerability has been resolved: cifs: fix underflow i | |
CVE-2026-79855 |
9.8 |
0.0075
|
55.0% | 2026-10-22 | An authentication bypass vulnerability in the SSH daemon of AOS-8 allows an unauthenticate | |
CVE-2026-63071 |
9.8 |
0.0075
|
54.9% | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administra | |
CVE-2026-54159 |
10.0 |
0.0075
|
54.9% | 2026-07-17 | PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 u | |
CVE-2026-26035 |
9.8 |
0.0075
|
54.9% | 2026-08-12 | An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0. |