Critical CVEs
3,593 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-101521 |
9.8 |
0.0058
|
47.5% | 2026-10-20 | Vulnerability in Oracle APEX (component: General). Supported versions that are affected a | |
CVE-2024-58366 |
9.0 |
0.0057
|
47.4% | 2026-07-18 | SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::t | |
CVE-2026-67429 |
10.0 |
0.0057
|
47.4% | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, | |
CVE-2026-58046 |
9.9 |
0.0057
|
47.5% | 2026-07-30 | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privile | |
CVE-2026-58256 |
9.1 |
0.0057
|
47.4% | 2026-10-27 | GRR is a resource management and reservation application. Prior to the advisory-reported f | |
CVE-2026-109516 |
9.8 |
0.0057
|
47.5% | 2026-10-29 | The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication B | |
CVE-2026-12087 |
9.1 |
0.0057
|
47.4% | 2026-06-15 | Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack | |
CVE-2026-48087 |
9.8 |
0.0057
|
47.4% | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-53983 |
9.2 |
0.0057
|
47.4% | 2026-08-06 | Ground Station prior to 0.6.0 contains an unauthenticated blind server-side request forger | |
CVE-2026-24178 |
9.8 |
0.0057
|
47.3% | 2026-04-28 | NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authenticatio | |
CVE-2026-61425 |
9.4 |
0.0057
|
47.3% | 2026-07-20 | Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0 - The Joomla ext | |
CVE-2026-20272 |
9.8 |
0.0057
|
47.3% | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco | |
CVE-2026-43631 |
9.2 |
0.0057
|
47.3% | 2026-08-06 | llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in | |
CVE-2026-104351 |
9.9 |
0.0057
|
47.3% | 2026-10-27 | Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Co | |
CVE-2026-104317 |
9.8 |
0.0057
|
47.4% | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the me | |
CVE-2026-48836 |
10.0 |
0.0057
|
47.3% | 2026-06-15 | Unauthenticated Remote Code Execution (RCE) in Easy Invoice <= 2.1.19 versions. | |
CVE-2026-40525 |
9.1 |
0.0057
|
47.2% | 2026-04-17 | OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the V | |
CVE-2026-42996 |
10.0 |
0.0057
|
47.2% | 2026-05-01 | JS8Call through 2.3.1 and JS8Call-improved before 3.0 have a stack-based buffer overflow v | |
CVE-2026-42854 |
9.8 |
0.0057
|
47.2% | 2026-05-12 | arduino-esp32 is an Arduino core for the ESP32, ESP32-S2, ESP32-S3, ESP32-C3, ESP32-C6 and | |
CVE-2026-7329 |
9.9 |
0.0057
|
47.2% | 2026-08-05 | An improper privilege management vulnerability in the SQL, SPARQL, and Optic REST query in | |
CVE-2026-5443 |
9.8 |
0.0057
|
47.2% | 2026-04-09 | A heap buffer overflow vulnerability exists during the decoding of `PALETTE COLOR` DICOM i | |
CVE-2026-16361 |
9.8 |
0.0057
|
47.2% | 2026-07-21 | Memory safety bugs present in Thunderbird ESR 140.12. Some of these bugs showed evidence o | |
CVE-2026-16368 |
9.8 |
0.0057
|
47.2% | 2026-07-21 | Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability | |
CVE-2026-74989 |
9.8 |
0.0057
|
47.2% | 2026-08-18 | Internally found bugs present in Firefox 153. Some of these bugs showed evidence of memory | |
CVE-2026-11373 |
9.1 |
0.0057
|
47.1% | 2026-06-22 | Net::Statsite::Client versions through 1.1.0 for Perl allow metric injections. Net::Stats | |
CVE-2026-58409 |
9.1 |
0.0057
|
47.1% | 2026-07-13 | ChurchCRM is an open-source church management system. Prior to version 7.4.0, an authentic | |
CVE-2026-64703 |
9.8 |
0.0057
|
47.1% | 2026-07-27 | A use after free issue was addressed with improved memory management. This issue is fixed | |
CVE-2026-41265 |
9.2 |
0.0057
|
47.1% | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-46515 |
9.3 |
0.0057
|
47.1% | 2026-07-16 | Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERM_READ | |
CVE-2026-15091 |
9.3 |
0.0057
|
47.1% | 2026-07-17 | IBM Engineering AI Hub 1.0.0, 1.1.0, and 1.2.0 could allow a remote attacker to execute ar | |
CVE-2026-16377 |
9.8 |
0.0057
|
47.1% | 2026-07-21 | Mitigation bypass in the PDF Viewer component. This vulnerability was fixed in Firefox 153 | |
CVE-2026-16383 |
9.8 |
0.0057
|
47.1% | 2026-07-21 | Mitigation bypass in the DOM: Networking component. This vulnerability was fixed in Firefo | |
CVE-2026-101990 |
9.3 |
0.0057
|
47.1% | 2026-10-14 | A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Junipe | |
CVE-2026-35580 |
9.1 |
0.0057
|
47.0% | 2026-04-07 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workf | |
CVE-2026-26150 |
10.0 |
0.0057
|
47.0% | 2026-04-23 | Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to | |
CVE-2026-45311 |
9.6 |
0.0057
|
47.0% | 2026-05-28 | CodeWhale is a DeepSeek + MiMo coding agent in terminal. From 0.3.0 to 0.8.23, the run_tes | |
CVE-2026-54408 |
9.8 |
0.0057
|
47.0% | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-60053 |
9.1 |
0.0057
|
47.0% | 2026-08-05 | Insufficient Session Expiration vulnerability in Apache Answer. This issue affects Apache | |
CVE-2026-94510 |
9.9 |
0.0057
|
47.0% | 2026-10-08 | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthori | |
CVE-2026-42196 |
9.9 |
0.0056
|
46.9% | 2026-05-12 | django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, | |
CVE-2026-35300 |
9.8 |
0.0056
|
46.9% | 2026-06-17 | Vulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Core) | |
CVE-2026-58172 |
9.3 |
0.0056
|
46.9% | 2026-06-30 | Ocelot through 24.1.0, fixed in commit f156fd4, contains a security control bypass vulnera | |
CVE-2026-66395 |
9.4 |
0.0056
|
46.9% | 2026-07-27 | SiYuan desktop before v3.7.2 contains a reflected cross-site scripting vulnerability in th | |
CVE-2026-56032 |
9.8 |
0.0056
|
46.8% | 2026-06-26 | Subscriber PHP Object Injection in Buddyboss Platform <= 3.0.4 versions. | |
CVE-2026-56057 |
9.8 |
0.0056
|
46.8% | 2026-06-26 | Subscriber PHP Object Injection in Uncanny Automator Pro <= 7.3.0.6 versions. | |
CVE-2026-57621 |
9.8 |
0.0056
|
46.8% | 2026-07-02 | Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions. | |
CVE-2026-57677 |
9.8 |
0.0056
|
46.8% | 2026-07-02 | Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce <= 12.10. | |
CVE-2026-14535 |
9.8 |
0.0056
|
46.9% | 2026-07-04 | In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysi | |
CVE-2026-9726 |
9.8 |
0.0056
|
46.9% | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili | |
CVE-2026-12535 |
9.8 |
0.0056
|
46.8% | 2026-07-10 | Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerabili |