Critical CVEs
3,593 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-93577 |
9.9 |
0.0059
|
48.3% | 2026-09-24 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19. | |
CVE-2026-63293 |
9.9 |
0.0059
|
48.3% | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read an | |
CVE-2026-66898 |
9.9 |
0.0059
|
48.3% | 2026-08-12 | A path traversal vulnerability in LXD allows an attacker to manipulate file system paths d | |
CVE-2026-48085 |
9.8 |
0.0059
|
48.2% | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-57580 |
9.4 |
0.0059
|
48.2% | 2026-08-18 | authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, an inbound | |
CVE-2026-20706 |
9.1 |
0.0059
|
48.1% | 2026-07-03 | Gitea versions up to and including 1.26.1 allow repository archive downloads to bypass tok | |
CVE-2026-48039 |
9.1 |
0.0059
|
48.2% | 2026-08-07 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads | |
CVE-2026-111312 |
9.2 |
0.0059
|
48.1% | 2026-10-15 | OpenHealth through 0.2.0 contains a missing authentication and authorization vulnerability | |
CVE-2026-20310 |
9.1 |
0.0059
|
48.1% | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-63299 |
9.9 |
0.0059
|
48.1% | 2026-08-12 | An authorization bypass vulnerability in LXD allows an authenticated user to bypass projec | |
CVE-2026-35546 |
9.8 |
0.0059
|
48.0% | 2026-04-17 | Anviz CX2 Lite and CX7 are vulnerable to unauthenticated firmware uploads. This causes cra | |
CVE-2026-41512 |
9.9 |
0.0059
|
48.1% | 2026-05-08 | ai-scanner is an AI model safety scanner built on NVIDIA garak. From version 1.0.0 to befo | |
CVE-2026-34191 |
9.1 |
0.0059
|
48.1% | 2026-08-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-53434 |
9.1 |
0.0059
|
48.0% | 2026-06-29 | Detection of Error Condition Without Action vulnerability in Apache Tomcat when configurin | |
CVE-2026-39873 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43694 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43710 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-43748 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fi | |
CVE-2026-43764 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in m | |
CVE-2026-43773 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in | |
CVE-2026-43793 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | An issue existed in the handling of environment variables. This issue was addressed with i | |
CVE-2026-64694 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | An integer overflow was addressed with improved input validation. This issue is fixed in m | |
CVE-2026-64697 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64698 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoi | |
CVE-2026-64704 |
9.8 |
0.0059
|
48.0% | 2026-07-27 | A type confusion issue was addressed with improved memory handling. This issue is fixed in | |
CVE-2026-69703 |
9.3 |
0.0059
|
48.0% | 2026-08-04 | Atlas-Livre contains an improper access control vulnerability in the admin controllers und | |
CVE-2024-42360 |
9.8 |
0.0058
|
47.9% | 2024-08-14 | SequenceServer lets you rapidly set up a BLAST+ server with an intuitive user interface fo | |
CVE-2026-59873 |
9.2 |
0.0058
|
47.8% | 2026-07-08 | node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does | |
CVE-2025-62025 |
9.8 |
0.0058
|
47.7% | 2025-10-22 | Deserialization of Untrusted Data vulnerability in eyecix JobSearch wp-jobsearch.This issu | |
CVE-2026-48614 |
9.9 |
0.0058
|
47.8% | 2026-07-06 | An improper authorization vulnerability in the Plesk XML API allows an authenticated user | |
CVE-2026-47686 |
9.9 |
0.0058
|
47.8% | 2026-08-17 | vm2 is an open source vm/sandbox for Node.js. Prior to 3.11.6, handleException() in lib/se | |
CVE-2026-111643 |
9.3 |
0.0058
|
47.7% | 2026-10-16 | Misaka Danmu Server through 2.8.9 contains an authentication bypass vulnerability that all | |
CVE-2026-47428 |
9.6 |
0.0058
|
47.7% | 2026-07-14 | Vitest is a testing framework powered by Vite. From 4.0.17 until 4.1.6 and 5.0.0-beta.3, V | |
CVE-2026-47393 |
9.8 |
0.0058
|
47.7% | 2026-07-21 | PraisonAI is a multi-agent teams system. CVE-2026-44338 (GHSA-6rmh-7xcm-cpxj) documents th | |
CVE-2026-64825 |
9.0 |
0.0058
|
47.7% | 2026-07-21 | Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows un | |
CVE-2026-71268 |
9.9 |
0.0058
|
47.7% | 2026-08-05 | OpenPLC Runtime v3's compile_program function (webserver/openplc.py) parses directives fro | |
CVE-2026-6100 |
9.1 |
0.0058
|
47.6% | 2026-04-13 | Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, a | |
CVE-2026-10672 |
9.1 |
0.0058
|
47.6% | 2026-07-14 | subsys/net/lib/lwm2m/lwm2m_pull_context.c copied the firmware-update Package URI into a fi | |
CVE-2026-101986 |
9.3 |
0.0058
|
47.6% | 2026-10-14 | An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos | |
CVE-2025-65719 |
9.8 |
0.0058
|
47.6% | 2026-05-12 | An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary co | |
CVE-2026-16351 |
9.8 |
0.0058
|
47.6% | 2026-07-21 | Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability | |
CVE-2026-16352 |
9.8 |
0.0058
|
47.6% | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnera | |
CVE-2026-16356 |
9.8 |
0.0058
|
47.6% | 2026-07-21 | Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnera | |
CVE-2026-7413 |
9.8 |
0.0058
|
47.6% | 2026-05-07 | A hidden, persistent backdoor was found in Yarbo firmware v2.3.9 that provides remote, una | |
CVE-2026-5801 |
9.8 |
0.0058
|
47.5% | 2026-07-10 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulne | |
CVE-2026-28312 |
9.1 |
0.0058
|
47.5% | 2026-07-21 | SolarWinds Serv-U is affected by a privilege escalation vulnerability. This would elevate | |
CVE-2026-28321 |
9.1 |
0.0058
|
47.5% | 2026-07-21 | SolarWinds Serv-U is affected by a broken access control vulnerability that could allow ar | |
CVE-2026-10090 |
9.0 |
0.0058
|
47.6% | 2026-08-05 | A flaw was found in the Application Subscription controller (multicluster-operators-subscr | |
CVE-2025-56563 |
9.8 |
0.0058
|
47.5% | 2026-09-16 | A Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tr | |
CVE-2026-42555 |
9.1 |
0.0058
|
47.5% | 2026-05-14 | Valtimo is an open-source business process automation platform. com.ritense.valtimo:docume |