Critical CVEs
3,587 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-76311 |
9.4 |
0.0045
|
38.8% | 2026-08-19 | In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, an unauthenticated | |
CVE-2026-78846 |
9.8 |
0.0045
|
38.8% | 2026-10-22 | Multiple AiDot devices are vulnerable to a heap-based buffer overflow via SSDP location he | |
CVE-2026-5482 |
9.3 |
0.0044
|
38.7% | 2026-06-15 | Responsive FileManager's allows an unauthenticated attacker to upload files of any type an | |
CVE-2026-48814 |
9.1 |
0.0044
|
38.7% | 2026-06-17 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier | |
CVE-2026-61424 |
10.0 |
0.0044
|
38.7% | 2026-07-20 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classif | |
CVE-2026-61900 |
10.0 |
0.0044
|
38.7% | 2026-07-20 | Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-jDownlo | |
CVE-2026-98432 |
9.8 |
0.0044
|
38.7% | 2026-10-15 | 9 PoC | In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt a |
CVE-2026-10757 |
9.8 |
0.0044
|
38.7% | 2026-10-26 | There is a SQL injection vulnerability in Esri ArcGIS Server versions 12.1 and earlier on | |
CVE-2026-41873 |
9.8 |
0.0044
|
38.6% | 2026-04-28 | ** UNSUPPORTED WHEN ASSIGNED ** Inconsistent Interpretation of HTTP Requests ('HTTP Reques | |
CVE-2026-63296 |
9.9 |
0.0044
|
38.7% | 2026-08-12 | An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass ta | |
CVE-2026-73567 |
9.1 |
0.0044
|
38.6% | 2026-08-13 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, | |
CVE-2026-17003 |
9.1 |
0.0044
|
38.6% | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to compromise | |
CVE-2026-77992 |
9.5 |
0.0044
|
38.6% | 2026-08-22 | Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabri | |
CVE-2026-72463 |
9.8 |
0.0044
|
38.7% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-aft | |
CVE-2026-74345 |
9.8 |
0.0044
|
38.7% | 2026-08-15 | In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix endpoin | |
CVE-2026-89659 |
9.8 |
0.0044
|
38.7% | 2026-09-11 | In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client | |
CVE-2026-54419 |
9.3 |
0.0044
|
38.5% | 2026-06-18 | claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, la | |
CVE-2026-61175 |
9.3 |
0.0044
|
38.5% | 2026-07-21 | Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (co | |
CVE-2026-72564 |
9.6 |
0.0044
|
38.5% | 2026-08-10 | An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authen | |
CVE-2026-7381 |
9.1 |
0.0044
|
38.5% | 2026-04-29 | Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled | |
CVE-2026-58053 |
9.4 |
0.0044
|
38.4% | 2026-06-28 | Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow's contain | |
CVE-2026-16390 |
9.1 |
0.0044
|
38.4% | 2026-07-21 | Mitigation bypass in the Enterprise Policies component. This vulnerability was fixed in Fi | |
CVE-2026-48086 |
9.9 |
0.0044
|
38.4% | 2026-08-06 | OpenReception's appointment booking software provides an end-to-end encrypted appointment | |
CVE-2026-83944 |
10.0 |
0.0044
|
38.4% | 2026-09-17 | Improper access control in Azure Logic Apps allows an unauthorized attacker to elevate pri | |
CVE-2025-71392 |
9.4 |
0.0044
|
38.5% | 2026-07-18 | SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escap | |
CVE-2026-33805 |
9.0 |
0.0044
|
38.3% | 2026-04-15 | @fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier proces | |
CVE-2026-54133 |
9.8 |
0.0044
|
38.4% | 2026-06-12 | jmespath.php allows users to use JMESPath, software for declaratively specifying how to ex | |
CVE-2026-46855 |
9.9 |
0.0044
|
38.3% | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-63830 |
9.4 |
0.0044
|
38.4% | 2026-07-19 | In the Linux kernel, the following vulnerability has been resolved: net: skmsg: preserve | |
CVE-2026-92812 |
9.3 |
0.0044
|
38.3% | 2026-09-16 | Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy contain | |
CVE-2021-48016 |
9.3 |
0.0044
|
38.3% | 2026-10-22 | DedeCMS through 5.8.1-beta contains a PHP code injection vulnerability in ShowMsg() where | |
CVE-2026-68083 |
9.1 |
0.0044
|
38.3% | 2026-08-10 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resol | |
CVE-2026-5652 |
9.0 |
0.0044
|
38.2% | 2026-04-21 | An insecure direct object reference vulnerability in the Users API component of Crafty Con | |
CVE-2026-42072 |
9.8 |
0.0044
|
38.2% | 2026-05-08 | Nornicdb is a distributed low-latency, Graph+Vector, Temporal MVCC with all sub-ms HNSW se | |
CVE-2026-18753 |
9.1 |
0.0044
|
38.2% | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd | |
CVE-2026-18754 |
9.1 |
0.0044
|
38.2% | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd | |
CVE-2026-71238 |
9.1 |
0.0044
|
38.2% | 2026-08-05 | DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/sett | |
CVE-2026-112832 |
9.8 |
0.0044
|
38.2% | 2026-10-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote Fil | |
CVE-2026-34279 |
9.1 |
0.0044
|
38.2% | 2026-04-21 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise | |
CVE-2026-6510 |
9.8 |
0.0044
|
38.2% | 2026-05-14 | The InfusedWoo Pro plugin for WordPress is vulnerable to privilege escalation via missing | |
CVE-2026-109566 |
9.3 |
0.0044
|
38.2% | 2026-10-12 | Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability that | |
CVE-2026-87337 |
10.0 |
0.0044
|
38.2% | 2026-10-20 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-41070 |
10.0 |
0.0044
|
38.1% | 2026-05-08 | openvpn-auth-oauth2 is a plugin/management interface client for OpenVPN server to handle a | |
CVE-2026-44727 |
9.3 |
0.0044
|
38.1% | 2026-06-22 | Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert H | |
CVE-2026-47752 |
9.9 |
0.0044
|
38.1% | 2026-07-23 | Tugtainer is a self-hosted app for automating updates of Docker containers. Versions prior | |
CVE-2026-45060 |
9.8 |
0.0044
|
38.0% | 2026-06-11 | ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the | |
CVE-2026-24611 |
9.1 |
0.0044
|
38.0% | 2026-06-17 | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. | |
CVE-2026-12694 |
9.1 |
0.0044
|
38.0% | 2026-07-17 | Missing Authorization vulnerability in Vimesoft Inc. Enterprise Video Platform allows Acce | |
CVE-2026-17718 |
9.6 |
0.0044
|
38.0% | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker | |
CVE-2026-17721 |
9.6 |
0.0044
|
38.0% | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote atta |