Critical CVEs
3,516 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-70290 |
9.8 |
0.0067
|
52.0% | 2026-08-26 | An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability i | |
CVE-2026-96207 |
10.0 |
0.0067
|
52.0% | 2026-10-08 | Improper certificate validation in Microsoft Partner Center allows an unauthorized attacke | |
CVE-2026-85889 |
10.0 |
0.0067
|
52.0% | 2026-09-17 | Missing authentication for critical function in Azure AI Foundry allows an unauthorized at | |
CVE-2026-72200 |
9.8 |
0.0067
|
52.0% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: ntfs: detect mapping- | |
CVE-2026-72494 |
9.8 |
0.0067
|
52.0% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Replace w | |
CVE-2026-74269 |
9.8 |
0.0067
|
52.0% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: bnxt: fix head underf | |
CVE-2026-74723 |
9.8 |
0.0067
|
52.0% | 2026-08-22 | In the Linux kernel, the following vulnerability has been resolved: btrfs: lzo: reject in | |
CVE-2026-80634 |
9.8 |
0.0067
|
52.0% | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: | |
CVE-2026-80668 |
9.8 |
0.0067
|
52.0% | 2026-08-28 | In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntra | |
CVE-2026-89654 |
9.8 |
0.0067
|
52.0% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ceph: fix UAF in chec | |
CVE-2026-90048 |
9.8 |
0.0067
|
52.0% | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-ou | |
CVE-2026-62241 |
9.3 |
0.0067
|
51.9% | 2026-07-17 | clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret (' | |
CVE-2026-92152 |
9.3 |
0.0067
|
52.0% | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | |
CVE-2026-114382 |
10.0 |
0.0067
|
51.8% | 2026-10-21 | A security flaw has been discovered in TOTOLINK EX200 5.2.3c.7200. This affects the functi | |
CVE-2026-105014 |
9.1 |
0.0067
|
51.9% | 2026-10-22 | 1 PoC | Improper neutralization of special elements used in a command ('command injection') in Azu |
CVE-2026-5445 |
9.1 |
0.0067
|
51.8% | 2026-04-09 | An out-of-bounds read vulnerability exists in the `DecodeLookupTable` function within `Dic | |
CVE-2026-13448 |
9.8 |
0.0067
|
51.8% | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.1 Lanflow OSS contains an unauthenticated remote code | |
CVE-2026-39918 |
9.2 |
0.0066
|
51.8% | 2026-04-20 | Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoin | |
CVE-2026-27436 |
9.1 |
0.0066
|
51.8% | 2026-07-02 | Editor Arbitrary Code Execution in Five Star Business Profile and Schema <= 2.3.19 version | |
CVE-2026-65907 |
9.1 |
0.0066
|
51.8% | 2026-07-23 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 code execution in Git VCS roots was possi | |
CVE-2026-71231 |
9.8 |
0.0066
|
51.7% | 2026-08-05 | IOTSmartHome's gui/login.php checkCookie function builds an authentication query as SELECT | |
CVE-2026-71278 |
9.8 |
0.0066
|
51.7% | 2026-08-05 | rust-iot-platform allows creating a "calc rule" via POST /calc-rule/create (api/src/contro | |
CVE-2026-54210 |
9.5 |
0.0066
|
51.8% | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements various file upload functi | |
CVE-2026-54212 |
9.5 |
0.0066
|
51.8% | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application implements an API endpoint that is vu | |
CVE-2026-54414 |
9.3 |
0.0066
|
51.7% | 2026-06-19 | FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoin | |
CVE-2026-50003 |
9.3 |
0.0066
|
51.7% | 2026-06-30 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET stora | |
CVE-2026-52199 |
9.1 |
0.0066
|
51.7% | 2026-07-17 | An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execut | |
CVE-2026-69253 |
9.0 |
0.0066
|
51.7% | 2026-08-04 | Flowise is a drag-and-drop user interface for building customized large language model (LL | |
CVE-2026-66145 |
9.1 |
0.0066
|
51.7% | 2026-08-11 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build | |
CVE-2026-105008 |
9.0 |
0.0066
|
51.7% | 2026-10-13 | No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoof | |
CVE-2026-16723 |
9.0 |
0.0066
|
51.7% | 2026-07-23 | A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This | |
CVE-2026-75110 |
9.3 |
0.0066
|
51.7% | 2026-08-17 | MemOS is a memory operating system for LLMs and AI agents. In deployments where authentica | |
CVE-2026-75852 |
9.3 |
0.0066
|
51.7% | 2026-08-18 | ArcadeDB versions before 26.8.1 fail to enforce SASL authentication on data commands in th | |
CVE-2026-89686 |
9.8 |
0.0066
|
51.7% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: nfsd: fix BUG_ON in n | |
CVE-2026-35087 |
9.3 |
0.0066
|
51.6% | 2026-05-27 | Slican telephone exchanges allow administrative protocol authentication bypass. An attacke | |
CVE-2026-55447 |
9.6 |
0.0066
|
51.6% | 2026-06-23 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1. | |
CVE-2026-73486 |
9.0 |
0.0066
|
51.6% | 2026-08-13 | Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's custo | |
CVE-2026-56004 |
10.0 |
0.0066
|
51.6% | 2026-07-02 | A shellcode injection in the mercurial handler of the obs tar_scm source service before ve | |
CVE-2026-14740 |
9.1 |
0.0066
|
51.6% | 2026-07-07 | DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting a | |
CVE-2026-36669 |
9.8 |
0.0066
|
51.5% | 2026-07-17 | An unauthenticated arbitrary file upload vulnerability in ck_upload_handler.php in Feng Of | |
CVE-2026-115915 |
9.8 |
0.0066
|
51.5% | 2026-10-26 | vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageM | |
CVE-2026-33821 |
9.9 |
0.0066
|
51.5% | 2026-05-12 | Improper privilege management in Microsoft Dynamics 365 Customer Insights allows an author | |
CVE-2026-65906 |
10.0 |
0.0066
|
51.5% | 2026-07-23 | In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox esc | |
CVE-2026-96639 |
9.8 |
0.0066
|
51.5% | 2026-10-21 | Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can reta | |
CVE-2026-96096 |
9.8 |
0.0066
|
51.5% | 2026-10-13 | Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to exec | |
CVE-2026-12045 |
9.4 |
0.0066
|
51.5% | 2026-06-19 | Read-only transaction bypass in the pgAdmin 4 AI Assistant allows an attacker who can infl | |
CVE-2026-63146 |
9.3 |
0.0066
|
51.4% | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unesc | |
CVE-2026-42778 |
9.8 |
0.0066
|
51.4% | 2026-05-01 | The fix for CVE-2026-41409 was not applied to the 2.1.X and 2.2.X branches. Here was the o | |
CVE-2026-14454 |
9.8 |
0.0066
|
51.4% | 2026-07-08 | Imager versions before 1.033 for Perl treat unsigned EXIF IFD entry counts as signed. Ima | |
CVE-2026-63244 |
9.8 |
0.0066
|
51.4% | 2026-10-23 | An authentication bypass vulnerability in WizLearn Technologies' Learning Management Syste |