Critical CVEs
3,569 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-60565 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-60568 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-60627 |
9.9 |
0.0043
|
37.4% | 2026-07-21 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (componen | |
CVE-2026-60663 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-60711 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-61041 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (com | |
CVE-2026-61072 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Staffing Front Office Brazil product of Ora | |
CVE-2026-61076 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracl | |
CVE-2026-61146 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-61209 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the PeopleSoft In-Memory Project Discovery product of Oracle PeopleSoft ( | |
CVE-2026-61211 |
9.9 |
0.0043
|
37.5% | 2026-07-21 | Vulnerability in the RDBMS component of Oracle Database Server. Supported versions that a | |
CVE-2026-61242 |
9.9 |
0.0043
|
37.4% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle | |
CVE-2026-12605 |
9.6 |
0.0043
|
37.5% | 2026-08-06 | In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSo | |
CVE-2026-72804 |
9.2 |
0.0043
|
37.5% | 2026-08-12 | SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLo | |
CVE-2026-60702 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component | |
CVE-2026-60720 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-60730 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (componen | |
CVE-2026-60990 |
9.9 |
0.0043
|
37.4% | 2026-08-18 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware | |
CVE-2026-60995 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware | |
CVE-2026-61003 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (com | |
CVE-2026-61021 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component | |
CVE-2026-61066 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-61206 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (compo | |
CVE-2026-61248 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (compon | |
CVE-2026-61317 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-62512 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component | |
CVE-2026-62588 |
9.9 |
0.0043
|
37.4% | 2026-08-18 | Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: Open | |
CVE-2026-62608 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70920 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-71059 |
9.9 |
0.0043
|
37.5% | 2026-08-18 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Servi | |
CVE-2026-116014 |
9.2 |
0.0043
|
37.4% | 2026-10-24 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDesc | |
CVE-2026-103594 |
9.5 |
0.0043
|
37.5% | 2026-10-27 | A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration proce | |
CVE-2026-76527 |
9.8 |
0.0043
|
37.4% | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-33807 |
9.1 |
0.0043
|
37.3% | 2026-04-15 | @fastify/express v4.0.4 and earlier contains a path handling bug in the onRegister functio | |
CVE-2026-46716 |
9.9 |
0.0043
|
37.3% | 2026-06-12 | Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M | |
CVE-2026-53055 |
9.8 |
0.0043
|
37.2% | 2026-06-24 | In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec | |
CVE-2026-14241 |
9.8 |
0.0043
|
37.3% | 2026-06-30 | Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memor | |
CVE-2026-58422 |
9.8 |
0.0043
|
37.3% | 2026-07-03 | Improper authorization on OAuth sign-in callback silently re-enables administrator-disable | |
CVE-2026-77644 |
9.3 |
0.0043
|
37.3% | 2026-08-20 | A critical bypass access control vulnerability has been reported in PTC Windchill Risk and | |
CVE-2026-118264 |
9.1 |
0.0043
|
37.2% | 2026-10-28 | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware sel | |
CVE-2026-16364 |
9.1 |
0.0043
|
37.1% | 2026-07-21 | Incorrect boundary conditions in the Audio/Video: Playback component. This vulnerability w | |
CVE-2026-64793 |
9.1 |
0.0043
|
37.2% | 2026-07-22 | Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Any | |
CVE-2026-16503 |
9.1 |
0.0043
|
37.2% | 2026-07-31 | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that i | |
CVE-2026-119050 |
9.2 |
0.0043
|
37.2% | 2026-10-29 | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows | |
CVE-2026-103093 |
9.4 |
0.0043
|
37.2% | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the Servi | |
CVE-2026-31845 |
9.3 |
0.0043
|
37.0% | 2026-04-11 | A reflected cross-site scripting (XSS) vulnerability exists in Rukovoditel CRM version 3.6 | |
CVE-2026-41144 |
9.8 |
0.0043
|
37.1% | 2026-04-22 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and oth | |
CVE-2026-12818 |
9.3 |
0.0043
|
37.0% | 2026-06-30 | Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability with | |
CVE-2026-22098 |
9.2 |
0.0043
|
37.0% | 2026-07-13 | Various sensitive information such as passwords and charging card UIDs are written to log | |
CVE-2026-17675 |
9.6 |
0.0043
|
37.0% | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote atta |