Critical CVEs
3,477 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2024-31026 |
9.8 |
0.0075
|
54.9% | 2026-09-29 | An issue in Greek Universities Network (GUnet) Open eClass Platform v.3.15 allows a remote | |
CVE-2026-53486 |
9.1 |
0.0075
|
54.8% | 2026-07-14 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive | |
CVE-2026-76404 |
9.1 |
0.0075
|
54.8% | 2026-08-19 | In Splunk MCP Server app versions below 1.2.1, a user who holds the "admin" Splunk role co | |
CVE-2026-42833 |
9.1 |
0.0075
|
54.8% | 2026-05-12 | Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-pr | |
CVE-2026-63359 |
9.3 |
0.0075
|
54.8% | 2026-07-23 | The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) application | |
CVE-2026-55240 |
9.1 |
0.0075
|
54.8% | 2026-10-15 | Tianji is an open source analytics, uptime monitoring, and server status platform. Prior t | |
CVE-2026-64320 |
9.1 |
0.0075
|
54.8% | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: nvmet: fix pre-auth o | |
CVE-2026-72130 |
9.8 |
0.0075
|
54.8% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: reject sh | |
CVE-2026-72398 |
9.8 |
0.0075
|
54.8% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: sctp: add INIT verifi | |
CVE-2026-58319 |
9.1 |
0.0075
|
54.8% | 2026-07-14 | Certain Apache Doris FE HTTP REST administrative APIs were accessible without proper authe | |
CVE-2026-53405 |
9.8 |
0.0075
|
54.7% | 2026-07-20 | Improper Isolation or Compartmentalization vulnerability in Apache Syncope. An administra | |
CVE-2026-16860 |
9.9 |
0.0075
|
54.7% | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitr | |
CVE-2025-49710 |
9.8 |
0.0074
|
54.7% | 2025-06-11 | An integer overflow was present in `OrderedHashTable` used by the JavaScript engine. This | |
CVE-2026-79860 |
9.8 |
0.0074
|
54.7% | 2026-10-22 | Buffer overflow vulnerabilities exist in an underlying service of AOS-8 that could lead to | |
CVE-2026-54003 |
9.1 |
0.0074
|
54.6% | 2026-07-09 | Kirby is an open-source content management system. Prior to 4.9.4 and from 5.4.4, Kirby si | |
CVE-2026-112408 |
9.4 |
0.0074
|
54.6% | 2026-10-21 | Missing verification of source of a communication channel in the default_bucket() function | |
CVE-2026-115904 |
9.6 |
0.0074
|
54.6% | 2026-10-28 | Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Lin | |
CVE-2026-6264 |
9.8 |
0.0074
|
54.5% | 2026-04-14 | A critical vulnerability in the Talend JobServer and Talend Runtime allows unauthenticated | |
CVE-2026-47606 |
9.1 |
0.0074
|
54.5% | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-9190 |
9.1 |
0.0074
|
54.4% | 2026-08-05 | An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Serve | |
CVE-2026-106626 |
9.1 |
0.0074
|
54.4% | 2026-10-13 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that co | |
CVE-2026-28763 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname fu | |
CVE-2026-40615 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName | |
CVE-2026-41222 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formParentControl url functi | |
CVE-2026-41223 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr func | |
CVE-2026-42019 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe | |
CVE-2026-42020 |
9.1 |
0.0074
|
54.4% | 2026-10-20 | Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe | |
CVE-2026-72569 |
9.1 |
0.0074
|
54.4% | 2026-08-10 | A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauth | |
CVE-2026-67531 |
9.3 |
0.0073
|
54.3% | 2026-08-06 | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). Prior to 1. | |
CVE-2026-17145 |
9.8 |
0.0073
|
54.4% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arb | |
CVE-2026-15435 |
9.8 |
0.0073
|
54.3% | 2026-07-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 coul | |
CVE-2026-47627 |
9.8 |
0.0073
|
54.3% | 2026-08-18 | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could | |
CVE-2026-26083 |
9.8 |
0.0073
|
54.3% | 2026-05-12 | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiS | |
CVE-2026-75885 |
9.3 |
0.0073
|
54.3% | 2026-09-18 | A flaw was found in the OpenShift console. Unauthenticated access to the `/api/devfile/` a | |
CVE-2026-115188 |
9.9 |
0.0073
|
54.3% | 2026-10-26 | An unrestricted file upload vulnerability exists in the campaign import feature of Mautic | |
CVE-2026-28368 |
9.1 |
0.0073
|
54.2% | 2026-03-27 | A flaw was found in Undertow. This vulnerability allows a remote attacker to construct spe | |
CVE-2026-48204 |
9.8 |
0.0073
|
54.2% | 2026-07-06 | Improper Input Validation, Improper Access Control vulnerability in Apache Camel in Camel | |
CVE-2026-40920 |
9.8 |
0.0073
|
54.2% | 2026-08-10 | Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0. Us | |
CVE-2025-49901 |
9.8 |
0.0073
|
54.2% | 2025-10-22 | Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Sim | |
CVE-2026-57807 |
9.8 |
0.0073
|
54.2% | 2026-07-10 | Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Secur | |
CVE-2026-64695 |
9.8 |
0.0073
|
54.1% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-40630 |
9.3 |
0.0073
|
54.0% | 2026-04-24 | A vulnerability in SenseLive X3050’s web management interface allows unauthorized acces | |
CVE-2026-42846 |
9.8 |
0.0073
|
54.0% | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, Cli | |
CVE-2026-52656 |
9.8 |
0.0073
|
54.0% | 2026-07-20 | An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based | |
CVE-2026-73211 |
9.8 |
0.0073
|
54.0% | 2026-08-11 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollow | |
CVE-2026-16770 |
9.8 |
0.0073
|
54.0% | 2026-08-13 | PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via me | |
CVE-2026-73649 |
9.8 |
0.0073
|
54.0% | 2026-08-13 | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior t | |
CVE-2026-67960 |
9.8 |
0.0073
|
54.0% | 2026-08-17 | An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberC | |
CVE-2026-50161 |
9.3 |
0.0072
|
53.9% | 2026-08-18 | libre is a generic library for real-time communications with asynchronous input and output | |
CVE-2026-16656 |
9.8 |
0.0072
|
53.9% | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root p |