Critical CVEs
3,599 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110685 |
9.1 |
0.0051
|
43.4% | 2026-10-19 | Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged valu | |
CVE-2026-103039 |
9.8 |
0.0051
|
43.4% | 2026-10-30 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versio | |
CVE-2026-48713 |
9.1 |
0.0051
|
43.2% | 2026-06-15 | Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key stri | |
CVE-2026-48714 |
9.1 |
0.0051
|
43.2% | 2026-06-15 | i18next-http-middleware is a middleware to be used with Node.js web frameworks like expres | |
CVE-2026-9074 |
9.8 |
0.0051
|
43.3% | 2026-07-08 | IBM API Connect 10.0.8.0 through 10.0.8.9 and 12.1.0.0 through 12.1.0.3 contains an unauth | |
CVE-2026-52735 |
9.3 |
0.0051
|
43.2% | 2026-08-18 | ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block t | |
CVE-2026-32311 |
9.3 |
0.0051
|
43.2% | 2026-04-20 | Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investi | |
CVE-2026-59084 |
9.1 |
0.0051
|
43.2% | 2026-07-14 | Insufficient Technical Documentation vulnerability in Apache Tomcat since the requirements | |
CVE-2026-52855 |
9.9 |
0.0051
|
43.2% | 2026-07-31 | Wings is the server control plane for Pterodactyl, a free, open-source game server managem | |
CVE-2026-67285 |
9.2 |
0.0051
|
43.2% | 2026-08-12 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in | |
CVE-2026-76036 |
9.6 |
0.0051
|
43.2% | 2026-08-18 | Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a r | |
CVE-2026-41274 |
9.3 |
0.0050
|
43.1% | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-9390 |
9.1 |
0.0050
|
43.2% | 2026-08-03 | XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _ | |
CVE-2026-26354 |
9.8 |
0.0050
|
43.1% | 2026-04-22 | Dell PowerProtect Data Domain with Domain Operating System (DD OS) of Feature Release vers | |
CVE-2026-57216 |
10.0 |
0.0050
|
43.1% | 2026-07-10 | RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, | |
CVE-2026-45177 |
9.1 |
0.0050
|
43.0% | 2026-06-11 | Idira Secrets Manager SaaS Edge versions prior to 1.8 exhibit improper access control with | |
CVE-2026-14405 |
9.6 |
0.0050
|
43.0% | 2026-07-01 | Uninitialized Use in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker | |
CVE-2026-40582 |
9.1 |
0.0050
|
43.0% | 2026-04-18 | ChurchCRM is an open-source church management system. In versions prior to 7.2.0, the /api | |
CVE-2026-9202 |
9.8 |
0.0050
|
43.0% | 2026-07-17 | IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to create unlimited | |
CVE-2026-65890 |
9.2 |
0.0050
|
43.0% | 2026-07-29 | Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multi | |
CVE-2025-70520 |
9.8 |
0.0050
|
43.0% | 2026-10-07 | The websocket handler of Fanvil x7a firmware version 2.6.0.1182 does not enforce proper au | |
CVE-2026-114595 |
9.3 |
0.0050
|
42.9% | 2026-10-27 | In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing | |
CVE-2026-114358 |
9.3 |
0.0050
|
42.9% | 2026-10-29 | This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation | |
CVE-2026-89650 |
9.1 |
0.0050
|
43.0% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: ceph: bound num_expor | |
CVE-2026-27681 |
9.9 |
0.0050
|
42.9% | 2026-04-14 | Due to insufficient authorization checks in SAP Business Planning and Consolidation and SA | |
CVE-2026-9177 |
9.4 |
0.0050
|
42.9% | 2026-07-29 | A Server-Side Template Injection (SSTI) vulnerability was identified in the mail template | |
CVE-2026-8338 |
9.2 |
0.0050
|
42.9% | 2026-07-29 | A Spring Security authentication and authorization bypass exists in Coverity Connect versi | |
CVE-2026-71263 |
9.1 |
0.0050
|
42.9% | 2026-08-05 | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (dem | |
CVE-2026-53791 |
9.1 |
0.0050
|
42.9% | 2026-08-13 | rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauth | |
CVE-2026-89671 |
9.1 |
0.0050
|
42.9% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs3 setac | |
CVE-2026-25199 |
9.1 |
0.0050
|
42.8% | 2026-05-08 | Instances deployed via the Proxmox extension allow unauthorized access to instances belong | |
CVE-2026-49781 |
9.8 |
0.0050
|
42.8% | 2026-06-15 | Unauthenticated PHP Object Injection in OttoKit <= 1.1.27 versions. | |
CVE-2026-62644 |
9.8 |
0.0050
|
42.8% | 2026-07-14 | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roun | |
CVE-2026-113072 |
9.6 |
0.0050
|
42.8% | 2026-10-20 | Memory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker | |
CVE-2026-27064 |
9.1 |
0.0050
|
42.8% | 2026-07-23 | Editor Arbitrary File Upload in Mailster <= 4.1.17 versions. | |
CVE-2026-65461 |
9.1 |
0.0050
|
42.8% | 2026-07-23 | Administrator Arbitrary File Upload in Really Simple CSV Importer <= 1.3 versions. | |
CVE-2026-28911 |
9.8 |
0.0050
|
42.7% | 2026-07-27 | The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma | |
CVE-2026-107015 |
9.1 |
0.0050
|
42.7% | 2026-10-29 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers t | |
CVE-2026-107032 |
9.1 |
0.0050
|
42.7% | 2026-10-29 | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unautho | |
CVE-2025-68745 |
9.8 |
0.0050
|
42.7% | 2025-12-24 | In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Clear | |
CVE-2026-7664 |
9.8 |
0.0050
|
42.7% | 2026-06-22 | IBM Langflow OSS 1.0.0 through 1.8.4 could allow unauthenticated attackers to access prote | |
CVE-2026-44761 |
9.1 |
0.0050
|
42.6% | 2026-07-14 | SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample cre | |
CVE-2026-56451 |
10.0 |
0.0050
|
42.7% | 2026-07-14 | A vulnerability has been identified in Opcenter X (All versions < V2604). Affected applica | |
CVE-2026-59500 |
10.0 |
0.0050
|
42.7% | 2026-08-13 | : Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP | |
CVE-2026-6885 |
9.3 |
0.0050
|
42.6% | 2026-04-23 | Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has an Arbitr | |
CVE-2026-41552 |
9.2 |
0.0050
|
42.6% | 2026-05-15 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Trav | |
CVE-2026-66587 |
9.8 |
0.0050
|
42.6% | 2026-08-24 | Unauthenticated Local File Inclusion in WP Cafe Pro < 3.0.15 versions. | |
CVE-2026-35270 |
9.1 |
0.0050
|
42.5% | 2026-06-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-61444 |
9.4 |
0.0050
|
42.5% | 2026-07-10 | PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py w | |
CVE-2026-55884 |
9.2 |
0.0050
|
42.6% | 2026-07-10 | Tilt defines dev environments as code for microservice apps on Kubernetes. From 0.20.8 thr |