Critical CVEs
3,537 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40504 |
9.3 |
0.0064
|
50.7% | 2026-04-16 | Creolabs Gravity before 0.9.6 contains a heap buffer overflow vulnerability in the gravity | |
CVE-2026-61445 |
9.4 |
0.0064
|
50.6% | 2026-07-11 | PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilitie | |
CVE-2026-16363 |
9.8 |
0.0064
|
50.6% | 2026-07-21 | JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed | |
CVE-2026-16369 |
9.8 |
0.0064
|
50.6% | 2026-07-21 | Integer overflow in the JavaScript: WebAssembly component. This vulnerability was fixed in | |
CVE-2026-16389 |
9.8 |
0.0064
|
50.6% | 2026-07-21 | Incorrect boundary conditions, integer overflow in the Libraries component in NSS. This vu | |
CVE-2026-54211 |
9.5 |
0.0064
|
50.6% | 2026-08-07 | Tobit Laboratories AG TeamDavid's Webbox application’s endpoint “//serverClient_close.html | |
CVE-2026-10059 |
9.1 |
0.0064
|
50.6% | 2026-08-05 | A flaw was found in the Multicluster Engine for Kubernetes ClusterCurator controller. A te | |
CVE-2026-41167 |
9.1 |
0.0064
|
50.5% | 2026-04-22 | Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, | |
CVE-2026-27780 |
9.8 |
0.0064
|
50.5% | 2026-07-03 | Gitea versions before 1.26.0 do not fail closed on bufio.Scanner errors while processing p | |
CVE-2026-8987 |
9.4 |
0.0064
|
50.5% | 2026-07-21 | Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow | |
CVE-2026-59705 |
9.3 |
0.0064
|
50.5% | 2026-07-07 | mem0's openmemory/api component contains an unauthenticated access vulnerability that allo | |
CVE-2026-34659 |
9.6 |
0.0063
|
50.4% | 2026-05-12 | Adobe Connect versions 2025.9.15, 2025.8.157 and earlier are affected by a Deserialization | |
CVE-2026-24013 |
9.1 |
0.0063
|
50.4% | 2026-07-06 | Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query | |
CVE-2026-97631 |
9.5 |
0.0063
|
50.4% | 2026-10-22 | 3 PoC | EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classi |
CVE-2026-80980 |
9.8 |
0.0063
|
50.4% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: net/smc: stop killed, | |
CVE-2026-89492 |
9.8 |
0.0063
|
50.4% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate direc | |
CVE-2026-89526 |
9.8 |
0.0063
|
50.4% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Rea | |
CVE-2026-89972 |
9.8 |
0.0063
|
50.4% | 2026-09-16 | In the Linux kernel, the following vulnerability has been resolved: nvme: add missing SRC | |
CVE-2026-90104 |
9.8 |
0.0063
|
50.4% | 2026-09-17 | In the Linux kernel, the following vulnerability has been resolved: NFSv4.1: zero referri | |
CVE-2026-85928 |
9.8 |
0.0063
|
50.3% | 2026-10-13 | Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthoriz | |
CVE-2026-96864 |
9.8 |
0.0063
|
50.3% | 2026-10-13 | Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker t | |
CVE-2026-88102 |
9.8 |
0.0063
|
50.3% | 2026-10-13 | Use after free in Windows Failover Cluster allows an unauthorized attacker to execute code | |
CVE-2026-6257 |
9.2 |
0.0063
|
50.3% | 2026-04-20 | Vvveb CMS before 1.0.8.2 contains a remote code execution vulnerability in its media manag | |
CVE-2026-66418 |
9.3 |
0.0063
|
50.3% | 2026-07-30 | OpenClaw Dashboard v3.0.0 contains a stored cross-site scripting vulnerability that allows | |
CVE-2026-9827 |
9.1 |
0.0063
|
50.3% | 2026-10-20 | A arbitrary file write vulnerability exists in the boa formUploadFile functionality of X20 | |
CVE-2026-20266 |
9.1 |
0.0063
|
50.3% | 2026-06-17 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could | |
CVE-2026-9265 |
9.1 |
0.0063
|
50.3% | 2026-06-20 | Crypt::OpenSSL::PKCS12 versions before 1.96 for Perl permits a heap OOB read in print_attr | |
CVE-2026-53481 |
9.8 |
0.0063
|
50.3% | 2026-07-07 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-57074 |
9.1 |
0.0063
|
50.3% | 2026-07-16 | XML::Bare versions through 0.53 for Perl have an unbounded character lookahead. The parse | |
CVE-2026-57075 |
9.1 |
0.0063
|
50.3% | 2026-07-16 | YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via a signed-char loo | |
CVE-2026-44182 |
10.0 |
0.0063
|
50.3% | 2026-07-16 | Jupyter Enterprise Gateway launches remote Jupyter Notebook kernels across distributed clu | |
CVE-2026-12946 |
9.9 |
0.0063
|
50.2% | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote attacker to inject arbitrary co | |
CVE-2026-15065 |
9.1 |
0.0063
|
50.2% | 2026-08-19 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 NIM could allow a remote attacker to bypass | |
CVE-2025-51679 |
9.1 |
0.0063
|
50.3% | 2026-08-26 | An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and n | |
CVE-2026-113678 |
9.4 |
0.0063
|
50.2% | 2026-10-20 | Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownW | |
CVE-2026-57211 |
10.0 |
0.0063
|
50.2% | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 4.1.11 and 4.2.6 on Windows, the Ra | |
CVE-2026-64439 |
9.8 |
0.0063
|
50.2% | 2026-07-25 | In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - filter | |
CVE-2026-14162 |
9.3 |
0.0063
|
50.2% | 2026-06-30 | Hospital Queuing Management developed by Advantech has a Sensitive Data Exposure vulnerabi | |
CVE-2026-18452 |
10.0 |
0.0063
|
50.2% | 2026-07-31 | DMS+ (Non-Mobile) developed by Rich Source has a Use of Hard-coded Credentials vulnerabili | |
CVE-2026-34099 |
9.3 |
0.0063
|
50.1% | 2026-07-01 | Guardian language-system passes the id GET parameter directly into an unsanitized SQL quer | |
CVE-2026-71319 |
9.6 |
0.0063
|
50.1% | 2026-08-05 | Nuxt is an open-source web development framework for Vue.js. Prior to 3.3.1, Nuxt DevTools | |
CVE-2026-53790 |
9.2 |
0.0063
|
50.1% | 2026-08-13 | rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that a | |
CVE-2025-11367 |
10.0 |
0.0063
|
50.0% | 2025-11-12 | The N-central Software Probe < 2025.4 is vulnerable to Remote Code Execution via deseriali | |
CVE-2026-40351 |
9.8 |
0.0063
|
50.0% | 2026-04-17 | FastGPT is an AI Agent building platform. In versions prior to 4.14.9.5, the password-base | |
CVE-2026-50203 |
9.1 |
0.0063
|
50.0% | 2026-06-17 | A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(opera | |
CVE-2026-48031 |
9.1 |
0.0063
|
50.0% | 2026-08-03 | go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by Postgr | |
CVE-2026-35030 |
9.4 |
0.0063
|
50.0% | 2026-04-06 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prio | |
CVE-2026-35090 |
9.3 |
0.0063
|
50.0% | 2026-05-27 | In Slican telephone exchanges it is possible to manage the control panel remotely. An unau | |
CVE-2026-53483 |
9.8 |
0.0063
|
50.0% | 2026-07-07 | Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1 | |
CVE-2026-10139 |
9.1 |
0.0062
|
49.9% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (ve |