Critical CVEs
3,495 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-64695 |
9.8 |
0.0073
|
54.2% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.10 | |
CVE-2026-40630 |
9.3 |
0.0073
|
54.1% | 2026-04-24 | A vulnerability in SenseLive X3050’s web management interface allows unauthorized acces | |
CVE-2026-42846 |
9.8 |
0.0073
|
54.1% | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, Cli | |
CVE-2026-52656 |
9.8 |
0.0073
|
54.1% | 2026-07-20 | An issue in SJCAM AllWinner Tech products SJ4000-Air V1.4C and before and Whitelabel based | |
CVE-2026-73211 |
9.8 |
0.0073
|
54.1% | 2026-08-11 | PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollow | |
CVE-2026-16770 |
9.8 |
0.0073
|
54.1% | 2026-08-13 | PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via me | |
CVE-2026-73649 |
9.8 |
0.0073
|
54.1% | 2026-08-13 | Velocity.js is a JavaScript implementation of the Apache Velocity template engine. Prior t | |
CVE-2026-67960 |
9.8 |
0.0073
|
54.1% | 2026-08-17 | An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberC | |
CVE-2026-50161 |
9.3 |
0.0072
|
54.0% | 2026-08-18 | libre is a generic library for real-time communications with asynchronous input and output | |
CVE-2026-16656 |
9.8 |
0.0072
|
54.0% | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root p | |
CVE-2025-40795 |
9.3 |
0.0072
|
53.9% | 2025-09-09 | A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS ne | |
CVE-2026-43682 |
9.8 |
0.0072
|
53.9% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64696 |
9.8 |
0.0072
|
53.9% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-9072 |
9.8 |
0.0072
|
53.9% | 2026-06-22 | IBM WebSphere Application Server and IBM WebSphere Application Server Liberty - when using | |
CVE-2026-2334 |
9.4 |
0.0072
|
53.9% | 2026-08-20 | An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative | |
CVE-2026-77900 |
9.8 |
0.0072
|
53.9% | 2026-10-08 | Missing authentication for critical function in Azure App Service allows an unauthorized a | |
CVE-2026-85885 |
9.9 |
0.0072
|
53.9% | 2026-09-17 | Improper neutralization of special elements used in a command ('command injection') in M36 | |
CVE-2026-28367 |
9.1 |
0.0072
|
53.8% | 2026-03-27 | A flaw was found in Undertow. A remote attacker can exploit this vulnerability by sending | |
CVE-2026-33976 |
9.6 |
0.0072
|
53.8% | 2026-03-27 | Notesnook is a note-taking app. Prior to version 3.3.11 on Web/Desktop and 3.3.17 on Andro | |
CVE-2026-58370 |
9.2 |
0.0072
|
53.9% | 2026-06-30 | Woodpecker before 3.15.0 matches the ApprovalAllowedUsers bypass list against pipeline.Aut | |
CVE-2026-12481 |
9.8 |
0.0072
|
53.9% | 2026-07-03 | A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due | |
CVE-2026-18667 |
9.3 |
0.0072
|
53.8% | 2026-08-03 | A vulnerability in Tenable Sensor Proxy allows a remote attacker to execute code with elev | |
CVE-2026-72911 |
9.9 |
0.0072
|
53.8% | 2026-08-10 | ERPNext is a free and open source Enterprise Resource Planning tool. Prior to 15.118.0 and | |
CVE-2026-66897 |
9.9 |
0.0072
|
53.8% | 2026-08-24 | A path traversal vulnerability in LXD's instance template processing allows an attacker wi | |
CVE-2026-112780 |
9.3 |
0.0072
|
53.8% | 2026-10-19 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page | |
CVE-2026-41106 |
9.3 |
0.0072
|
53.8% | 2026-07-02 | Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized | |
CVE-2026-59118 |
9.3 |
0.0072
|
53.8% | 2026-08-06 | Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privil | |
CVE-2026-74040 |
9.4 |
0.0072
|
53.8% | 2026-10-13 | Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability | |
CVE-2026-39337 |
10.0 |
0.0072
|
53.7% | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 7.1.0, critical pre-authent | |
CVE-2026-29145 |
9.1 |
0.0072
|
53.7% | 2026-04-09 | CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is | |
CVE-2026-42288 |
10.0 |
0.0072
|
53.7% | 2026-05-12 | ChurchCRM is an open-source church management system. Prior to 7.3.2, The fix for CVE-2026 | |
CVE-2026-44180 |
9.8 |
0.0072
|
53.7% | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clu | |
CVE-2026-74987 |
9.8 |
0.0072
|
53.7% | 2026-08-18 | Internally found bugs present in Firefox ESR 140.13, Firefox ESR 153.0 and Firefox 153. So | |
CVE-2026-74990 |
9.8 |
0.0072
|
53.7% | 2026-08-18 | Internally found bugs present in Firefox ESR 115.38, Firefox ESR 140.13, Firefox ESR 153.0 | |
CVE-2026-63922 |
9.8 |
0.0071
|
53.7% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refres | |
CVE-2026-63924 |
9.8 |
0.0071
|
53.6% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refres | |
CVE-2026-33591 |
10.0 |
0.0071
|
53.7% | 2026-08-03 | A vulnerability in Wapt Server before version 2.6.1.17813 allows a remote unauthenticated | |
CVE-2026-64824 |
9.3 |
0.0071
|
53.6% | 2026-07-21 | Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup- | |
CVE-2026-54213 |
9.2 |
0.0071
|
53.6% | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application exposes a functionality that allows t | |
CVE-2025-67066 |
9.8 |
0.0071
|
53.6% | 2026-09-04 | SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute | |
CVE-2026-63087 |
9.3 |
0.0071
|
53.6% | 2026-07-16 | Grafana OnCall through 1.16.11 contains an unauthenticated access vulnerability that allow | |
CVE-2026-33109 |
9.9 |
0.0071
|
53.5% | 2026-05-07 | Improper access control in Azure Managed Instance for Apache Cassandra allows an authorize | |
CVE-2026-56786 |
9.3 |
0.0071
|
53.5% | 2026-06-25 | RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 func | |
CVE-2026-63886 |
9.8 |
0.0071
|
53.5% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: | |
CVE-2026-61466 |
9.1 |
0.0071
|
53.5% | 2026-08-06 | In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server acce | |
CVE-2026-26332 |
10.0 |
0.0071
|
53.5% | 2026-05-04 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, SuppressedError all | |
CVE-2026-17060 |
9.1 |
0.0071
|
53.5% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to obtain sens | |
CVE-2026-71470 |
9.1 |
0.0071
|
53.4% | 2026-08-19 | A flaw was found in the search-v2-operator. This vulnerability allows a privileged user, s | |
CVE-2026-77264 |
9.8 |
0.0071
|
53.4% | 2026-08-21 | The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code | |
CVE-2026-105895 |
9.9 |
0.0071
|
53.4% | 2026-10-13 | Adobe Experience Manager is affected by an Improper Input Validation vulnerability that co |