Critical CVEs
3,393 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-71985 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71986 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71987 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71988 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71989 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71990 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71991 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71992 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2026-71993 |
9.3 |
0.0246
|
84.4% | 2026-08-09 | MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerabili | |
CVE-2023-23080 |
9.8 |
0.0246
|
84.4% | 2023-02-27 | Certain Tenda products are vulnerable to command injection. This affects Tenda CP7 Tenda C | |
CVE-2026-61515 |
9.3 |
0.0244
|
84.3% | 2026-08-04 | Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command inj | |
CVE-2026-40047 |
9.1 |
0.0243
|
84.2% | 2026-07-06 | Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnera | |
CVE-2026-61459 |
9.3 |
0.0236
|
83.7% | 2026-07-10 | MCP Server Kubernetes before 3.9.0 contains an argument injection vulnerability in structu | |
CVE-2026-116485 |
9.3 |
0.0235
|
83.6% | 2026-10-26 | danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauth | |
CVE-2026-57827 |
10.0 |
0.0233
|
83.5% | 2026-07-11 | Joomla Extension - rsjoomla.com - Unauthenticated file upload in RSFiles component < 1.17. | |
CVE-2026-67261 |
9.8 |
0.0232
|
83.4% | 2026-08-06 | Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, co | |
CVE-2026-10134 |
10.0 |
0.0232
|
83.4% | 2026-06-30 | IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to | |
CVE-2022-44276 |
9.8 |
0.0230
|
83.3% | 2023-06-28 | In Responsive Filemanager < 9.12.0, an attacker can bypass upload restrictions resulting i | |
CVE-2026-77647 |
9.8 |
0.0229
|
83.2% | 2026-08-20 | SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as e | |
CVE-2026-64879 |
9.4 |
0.0226
|
82.9% | 2026-07-21 | A filename supplied during file upload is not properly sanitized before being used in syst | |
CVE-2026-72603 |
9.9 |
0.0223
|
82.7% | 2026-08-11 | An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.crea | |
CVE-2026-114575 |
10.0 |
0.0221
|
82.6% | 2026-10-22 | A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B20221104. Affected by this issue is | |
CVE-2026-63766 |
9.3 |
0.0215
|
82.1% | 2026-07-20 | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.p | |
CVE-2026-28316 |
9.1 |
0.0213
|
82.0% | 2026-07-21 | SolarWinds Serv-U is affected by an insecure direct object reference (IDOR) vulnerability | |
CVE-2026-10768 |
9.8 |
0.0213
|
81.9% | 2026-07-10 | Missing Authorization vulnerability in Drupal LocalGov Workflows allows Forceful Browsing. | |
CVE-2026-49869 |
10.0 |
0.0209
|
81.6% | 2026-06-26 | KEV | Kestra OSS contains an OS command injection vulnerability that could allow an unauthentica |
CVE-2026-59800 |
9.2 |
0.0208
|
81.4% | 2026-07-07 | 9Router before 0.4.44 contains an OS command injection vulnerability in the unauthenticate | |
CVE-2026-33845 |
9.1 |
0.0207
|
81.4% | 2026-04-30 | A flaw in GnuTLS DTLS handshake parsing allows malformed fragments with zero length and no | |
CVE-2026-34976 |
10.0 |
0.0207
|
81.3% | 2026-04-06 | Dgraph is an open source distributed GraphQL database. Prior to 25.3.1, the restoreTenant | |
CVE-2026-72590 |
9.8 |
0.0204
|
81.1% | 2026-08-10 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an u | |
CVE-2021-48014 |
9.3 |
0.0203
|
81.0% | 2026-10-22 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer desi | |
CVE-2026-6349 |
9.3 |
0.0203
|
81.0% | 2026-04-16 | The iSherlock developed by HGiga has an OS Command Injection vulnerability, allowing una | |
CVE-2026-46420 |
9.8 |
0.0201
|
80.8% | 2026-07-17 | setup-php is a GitHub action to set up PHP with extensions, php.ini configuration, coverag | |
CVE-2026-45744 |
9.9 |
0.0201
|
80.8% | 2026-06-05 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-56688 |
9.1 |
0.0200
|
80.7% | 2026-07-10 | Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of | |
CVE-2026-58289 |
9.0 |
0.0199
|
80.6% | 2026-07-03 | Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium- | |
CVE-2026-82854 |
9.3 |
0.0198
|
80.4% | 2026-08-31 | Nodemailer before 8.0.4 is vulnerable to SMTP command injection through the unsanitized en | |
CVE-2026-72589 |
9.8 |
0.0195
|
80.1% | 2026-08-10 | An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an u | |
CVE-2026-53595 |
9.4 |
0.0194
|
80.1% | 2026-07-20 | FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t | |
CVE-2026-6644 |
9.4 |
0.0194
|
80.1% | 2026-04-20 | A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulner | |
CVE-2026-49772 |
9.3 |
0.0194
|
80.0% | 2026-06-16 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-53519 |
9.1 |
0.0193
|
79.9% | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-6942 |
9.3 |
0.0192
|
79.8% | 2026-04-23 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that | |
CVE-2026-61500 |
9.3 |
0.0191
|
79.7% | 2026-07-13 | Rejetto HFS 3.0.0 through 3.2.0 derives its session-cookie signing key from the non-crypto | |
CVE-2026-58453 |
9.3 |
0.0190
|
79.6% | 2026-07-01 | JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411 contain a hard-coded | |
CVE-2026-58127 |
9.3 |
0.0188
|
79.4% | 2026-07-01 | PACSgear MediaWriter 5.2.1 exposes a .NET Remoting TCP service on port 9000 via PacsgearMe | |
CVE-2026-58126 |
9.3 |
0.0184
|
79.0% | 2026-07-01 | PACSgear PACS Scan 5.2.1 contains an unauthenticated remote code execution vulnerability t | |
CVE-2026-49060 |
9.8 |
0.0184
|
78.9% | 2026-06-11 | Incorrect Privilege Assignment vulnerability in Hippoo Mobile App for WooCommerce allows P | |
CVE-2026-4810 |
9.3 |
0.0182
|
78.7% | 2026-04-13 | A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit | |
CVE-2026-44359 |
10.0 |
0.0180
|
78.4% | 2026-07-20 | Meshtastic is an open source mesh networking solution. Prior to version 2.7.21.1370b23, th |