Critical CVEs
3,589 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2023-53982 |
9.3 |
0.0061
|
49.0% | 2025-12-23 | PMB 7.4.6 contains a SQL injection vulnerability in the id parameter of the storage module | |
CVE-2026-59792 |
9.8 |
0.0060
|
48.9% | 2026-07-10 | In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path traversal in p | |
CVE-2026-65431 |
9.8 |
0.0060
|
48.9% | 2026-07-23 | Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update a | |
CVE-2026-59555 |
10.0 |
0.0060
|
48.9% | 2026-07-23 | Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.3 versions. | |
CVE-2026-43757 |
9.8 |
0.0060
|
48.9% | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43802 |
9.8 |
0.0060
|
48.9% | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-43809 |
9.8 |
0.0060
|
48.9% | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-104350 |
9.3 |
0.0060
|
48.9% | 2026-10-27 | Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnera | |
CVE-2025-11366 |
9.4 |
0.0060
|
48.9% | 2025-11-12 | N-central < 2025.4 is vulnerable to authentication bypass via path traversal | |
CVE-2026-54390 |
9.3 |
0.0060
|
48.9% | 2026-06-18 | 1 PoC | JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerabil |
CVE-2026-64633 |
10.0 |
0.0060
|
48.9% | 2026-08-04 | A vulnerability allowing remote unauthenticated code execution on the agent host. | |
CVE-2026-55454 |
9.9 |
0.0060
|
48.8% | 2026-06-24 | Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1 | |
CVE-2026-69255 |
9.2 |
0.0060
|
48.8% | 2026-08-04 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-53424 |
9.1 |
0.0060
|
48.8% | 2026-08-20 | Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker | |
CVE-2026-42823 |
9.9 |
0.0060
|
48.7% | 2026-05-12 | Improper access control in Azure Logic Apps allows an authorized attacker to elevate privi | |
CVE-2026-49352 |
9.8 |
0.0060
|
48.7% | 2026-07-15 | 9Router is an AI router & token saver. From 0.2.21 until 0.4.44, 9Router used the hardcode | |
CVE-2026-48203 |
9.1 |
0.0060
|
48.7% | 2026-07-06 | Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Inj | |
CVE-2026-48205 |
9.1 |
0.0060
|
48.7% | 2026-07-06 | Improper Input Validation, Server-Side Request Forgery (SSRF) vulnerability in Apache Came | |
CVE-2026-70200 |
10.0 |
0.0060
|
48.7% | 2026-09-17 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Lo | |
CVE-2026-37637 |
9.1 |
0.0060
|
48.7% | 2026-06-29 | An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code | |
CVE-2026-117564 |
9.3 |
0.0060
|
48.6% | 2026-10-27 | nest-admin before 1.0.1 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-5442 |
9.8 |
0.0060
|
48.6% | 2026-04-09 | A heap buffer overflow vulnerability exists in the DICOM image decoder. Dimension fields a | |
CVE-2026-12485 |
10.0 |
0.0060
|
48.6% | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be cont | |
CVE-2026-12846 |
10.0 |
0.0060
|
48.6% | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be cont | |
CVE-2026-12847 |
10.0 |
0.0060
|
48.6% | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be cont | |
CVE-2026-12848 |
10.0 |
0.0060
|
48.6% | 2026-06-24 | GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be cont | |
CVE-2026-64625 |
9.3 |
0.0060
|
48.6% | 2026-07-20 | AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wrap | |
CVE-2026-59144 |
9.8 |
0.0060
|
48.6% | 2026-07-21 | Data::RingBuffer::Shared versions before 0.04 for Perl allow a stack buffer overflow via a | |
CVE-2026-67330 |
9.4 |
0.0060
|
48.6% | 2026-08-01 | @better-auth/scim (a better-auth plugin) versions >= 1.4.0-beta.27 through <= 1.6.21 and > | |
CVE-2026-10132 |
9.1 |
0.0060
|
48.6% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality | |
CVE-2026-10133 |
9.1 |
0.0060
|
48.6% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R | |
CVE-2026-10136 |
9.1 |
0.0060
|
48.6% | 2026-10-20 | A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of | |
CVE-2026-10137 |
9.1 |
0.0060
|
48.6% | 2026-10-20 | A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality o | |
CVE-2024-26011 |
9.8 |
0.0060
|
48.6% | 2024-11-12 | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4. | |
CVE-2026-40050 |
9.8 |
0.0060
|
48.5% | 2026-04-21 | CrowdStrike has released security updates to address a critical unauthenticated path trave | |
CVE-2026-8178 |
9.2 |
0.0060
|
48.5% | 2026-05-08 | An issue exists in Amazon Redshift JDBC Driver versions prior to 2.2.2. Under certain cond | |
CVE-2026-40008 |
9.8 |
0.0060
|
48.6% | 2026-07-10 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnera | |
CVE-2026-41041 |
9.1 |
0.0060
|
48.5% | 2026-07-13 | URL path injection via unencoded user-supplied identifiers vulnerability in Apache Graviti | |
CVE-2026-73485 |
9.0 |
0.0060
|
48.6% | 2026-08-13 | Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node th | |
CVE-2026-39912 |
9.1 |
0.0060
|
48.5% | 2026-04-09 | V2Board 1.6.1 through 1.7.4 and Xboard through 0.1.9 expose authentication tokens in HTTP | |
CVE-2026-10697 |
9.8 |
0.0060
|
48.5% | 2026-07-23 | Improper Authentication vulnerability in Progress MOVEit Transfer. This issue affects MOV | |
CVE-2026-16350 |
9.8 |
0.0060
|
48.4% | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: cubeb component. This vulnerability was | |
CVE-2026-16353 |
9.8 |
0.0060
|
48.4% | 2026-07-21 | Invalid pointer in the DOM: Bindings (WebIDL) component. This vulnerability was fixed in F | |
CVE-2026-16355 |
9.8 |
0.0060
|
48.4% | 2026-07-21 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-16357 |
9.8 |
0.0060
|
48.4% | 2026-07-21 | Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in F | |
CVE-2026-118633 |
9.2 |
0.0060
|
48.4% | 2026-10-28 | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitra | |
CVE-2026-8635 |
9.9 |
0.0059
|
48.4% | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated users to escalate privileges to | |
CVE-2026-93577 |
9.9 |
0.0059
|
48.3% | 2026-09-23 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19. | |
CVE-2026-63293 |
9.9 |
0.0059
|
48.3% | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read an | |
CVE-2026-66898 |
9.9 |
0.0059
|
48.3% | 2026-08-12 | A path traversal vulnerability in LXD allows an attacker to manipulate file system paths d |