Critical CVEs
3,597 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-16326 |
10.0 |
0.0054
|
45.3% | 2026-07-29 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in | |
CVE-2026-101484 |
9.8 |
0.0054
|
45.2% | 2026-10-20 | Vulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions | |
CVE-2026-35490 |
9.8 |
0.0054
|
45.2% | 2026-04-07 | changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, | |
CVE-2026-15143 |
9.3 |
0.0054
|
45.2% | 2026-07-10 | A flaw was found in the file_type content detector of guardrails-detectors. This vulnerabi | |
CVE-2026-16393 |
9.1 |
0.0054
|
45.2% | 2026-07-21 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fi | |
CVE-2026-115547 |
9.1 |
0.0054
|
45.2% | 2026-10-23 | An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the proces | |
CVE-2026-24444 |
9.3 |
0.0053
|
45.2% | 2026-05-28 | SDMC NE6037 cable modem routers running firmware 7.1.6.0.25 and 7.1.6.1.9_B9 contain a har | |
CVE-2026-68584 |
9.2 |
0.0053
|
45.1% | 2026-08-03 | SiYuan versions before v3.7.3 contain an authentication bypass vulnerability in publish mo | |
CVE-2026-53224 |
9.1 |
0.0053
|
45.1% | 2026-06-25 | In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedd | |
CVE-2025-40765 |
9.3 |
0.0053
|
45.1% | 2025-10-14 | A vulnerability has been identified in TeleControl Server Basic V3.1 (All versions >= V3.1 | |
CVE-2026-59151 |
9.6 |
0.0053
|
45.0% | 2026-07-10 | Prowler is a cloud security platform. Prior to 5.30.3, Prowler's SAML authentication flow | |
CVE-2026-71960 |
9.3 |
0.0053
|
45.1% | 2026-08-19 | Cudy WR3000 2.0 running firmware before 2.5.24 contains a hard-coded JWT HMAC signing secr | |
CVE-2026-115557 |
9.4 |
0.0053
|
45.1% | 2026-10-24 | Python has added a denylist for known compromised certificates to the "ssl" module to ensu | |
CVE-2026-70009 |
9.3 |
0.0053
|
45.1% | 2026-09-17 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Ar | |
CVE-2026-42922 |
9.8 |
0.0053
|
45.1% | 2026-10-29 | A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version | |
CVE-2026-49875 |
9.8 |
0.0053
|
45.0% | 2026-06-12 | Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParse | |
CVE-2026-11720 |
9.3 |
0.0053
|
45.0% | 2026-06-29 | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolb | |
CVE-2026-58072 |
9.0 |
0.0053
|
45.0% | 2026-08-04 | A vulnerability in Veeam Service Provider Console allowing arbitrary file write on the man | |
CVE-2026-19677 |
9.3 |
0.0053
|
45.0% | 2026-10-23 | An authentication bypass vulnerability in the public onPhase/ frevvo registration form ver | |
CVE-2026-7414 |
9.8 |
0.0053
|
44.9% | 2026-05-07 | Yarbo firmware v2.3.9 contains hardcoded administrative credentials embedded in the firmwa | |
CVE-2026-45158 |
9.1 |
0.0053
|
44.9% | 2026-05-13 | OPNsense is a FreeBSD based firewall and routing platform. Prior to 26.1.8, unsanitized us | |
CVE-2026-2031 |
10.0 |
0.0053
|
44.9% | 2026-05-15 | An Improper Access Control vulnerability in several internal API endpoints for Google Clou | |
CVE-2026-22102 |
9.3 |
0.0053
|
44.9% | 2026-07-13 | A POST request sent to a specific webserver endpoint can be used to write to arbitrary fil | |
CVE-2026-57309 |
9.3 |
0.0053
|
44.9% | 2026-07-20 | A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthentic | |
CVE-2026-16392 |
9.1 |
0.0053
|
44.9% | 2026-07-21 | JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed i | |
CVE-2026-16280 |
9.8 |
0.0053
|
44.9% | 2026-07-24 | An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit | |
CVE-2026-97406 |
9.1 |
0.0053
|
44.9% | 2026-10-20 | XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and | |
CVE-2026-41586 |
9.3 |
0.0053
|
44.8% | 2026-05-07 | Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for de | |
CVE-2026-44790 |
9.4 |
0.0053
|
44.8% | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-51599 |
9.8 |
0.0053
|
44.8% | 2026-07-09 | An insufficient input validation vulnerability in the RTSP service of MERCURY MIPC252W v1. | |
CVE-2026-63232 |
9.9 |
0.0053
|
44.8% | 2026-07-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-63233 |
9.9 |
0.0053
|
44.8% | 2026-07-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-63234 |
9.9 |
0.0053
|
44.8% | 2026-07-29 | A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authent | |
CVE-2026-13435 |
9.9 |
0.0053
|
44.8% | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.1 contains an improper input validation vulnerability | |
CVE-2026-92559 |
9.8 |
0.0053
|
44.8% | 2026-10-20 | IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obta | |
CVE-2026-44789 |
9.4 |
0.0053
|
44.7% | 2026-06-23 | n8n is an open source workflow automation platform. Prior to 1.123.43, 2.22.1, and 2.20.7, | |
CVE-2026-54527 |
9.3 |
0.0053
|
44.7% | 2026-07-08 | JupyterLab Git is a Git extension for JupyterLab. From 0.30.0b3 before 0.54.0, the PlainTe | |
CVE-2026-53412 |
9.8 |
0.0053
|
44.8% | 2026-07-16 | Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, | |
CVE-2026-72575 |
9.1 |
0.0053
|
44.7% | 2026-08-10 | An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated | |
CVE-2026-115812 |
9.3 |
0.0053
|
44.7% | 2026-10-23 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model | |
CVE-2026-62834 |
9.3 |
0.0053
|
44.8% | 2026-08-20 | Improper verification of cryptographic signature in Azure Data Factory allows an unauthori | |
CVE-2025-40771 |
9.3 |
0.0053
|
44.7% | 2025-10-14 | A vulnerability has been identified in SIMATIC CP 1542SP-1 (6GK7542-6UX00-0XE0) (All versi | |
CVE-2026-55445 |
9.3 |
0.0053
|
44.7% | 2026-07-15 | Qinglong is a timed task management platform supporting Python3, JavaScript, Shell, and Ty | |
CVE-2026-15982 |
9.8 |
0.0053
|
44.7% | 2026-07-17 | The Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit plugi | |
CVE-2026-18670 |
9.1 |
0.0053
|
44.7% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a den | |
CVE-2026-114108 |
9.3 |
0.0053
|
44.7% | 2026-10-21 | HKUDS Vibe-Trading from 0.1.0 before 0.1.7 contains a missing authentication vulnerability | |
CVE-2025-68809 |
9.1 |
0.0053
|
44.7% | 2026-01-13 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race | |
CVE-2025-60355 |
9.8 |
0.0053
|
44.6% | 2025-10-28 | zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection | |
CVE-2026-5189 |
9.2 |
0.0053
|
44.6% | 2026-04-15 | CWE-798: Use of Hard-coded Credentials in Sonatype Nexus Repository Manager versions 3.0.0 | |
CVE-2026-15378 |
9.3 |
0.0053
|
44.6% | 2026-07-10 | A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remo |