Critical CVEs
3,537 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-17801 |
9.6 |
0.0043
|
37.0% | 2026-07-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a re | |
CVE-2026-39923 |
9.2 |
0.0043
|
37.1% | 2026-08-05 | Flarum before 1.8.16 contains a password reset token expiry bypass vulnerability that allo | |
CVE-2026-114119 |
9.3 |
0.0043
|
37.1% | 2026-10-21 | Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server | |
CVE-2026-115932 |
9.6 |
0.0043
|
37.0% | 2026-10-24 | When a post is published, Postiz treats a media path that is not a web address as a file o | |
CVE-2026-40393 |
9.8 |
0.0043
|
37.0% | 2026-04-12 | In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGP | |
CVE-2026-64798 |
9.1 |
0.0043
|
36.9% | 2026-07-22 | Joomla Extension - regularlabs.com - Insecure login URL keys in IP login extension - Persi | |
CVE-2026-59503 |
9.1 |
0.0043
|
36.9% | 2026-08-13 | : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Persona | |
CVE-2026-59504 |
9.1 |
0.0043
|
36.9% | 2026-08-13 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generat | |
CVE-2026-28192 |
9.6 |
0.0043
|
37.0% | 2026-08-18 | Unauthenticated Arbitrary File Upload in Piotnet Addons For Elementor Pro <= 7.1.67 versio | |
CVE-2026-18894 |
9.8 |
0.0043
|
37.0% | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existin | |
CVE-2026-33707 |
9.8 |
0.0043
|
36.9% | 2026-04-10 | Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, the default | |
CVE-2026-2347 |
9.8 |
0.0043
|
36.9% | 2026-05-14 | Authorization bypass through User-Controlled key vulnerability in Akilli Commerce Software | |
CVE-2026-62325 |
9.1 |
0.0043
|
36.9% | 2026-07-28 | goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1 | |
CVE-2026-73501 |
9.1 |
0.0043
|
36.9% | 2026-08-12 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandle | |
CVE-2026-42810 |
9.4 |
0.0043
|
36.8% | 2026-05-04 | Apache Polaris accepts literal `*` characters in namespace and table names. When it later | |
CVE-2026-46784 |
9.1 |
0.0043
|
36.8% | 2026-06-17 | Vulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (compo | |
CVE-2026-13780 |
9.6 |
0.0043
|
36.8% | 2026-06-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-13781 |
9.6 |
0.0043
|
36.8% | 2026-06-30 | Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 | |
CVE-2026-60267 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core | |
CVE-2026-60326 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: | |
CVE-2026-60438 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mo | |
CVE-2026-60567 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-60606 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle | |
CVE-2026-60649 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (compone | |
CVE-2026-61059 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise SCM Order Management product of Oracle PeopleSo | |
CVE-2026-61153 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-61156 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Commerce Guided Search Platform Services product of Oracle Com | |
CVE-2026-61171 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security) | |
CVE-2026-61184 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Orac | |
CVE-2026-61197 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (componen | |
CVE-2026-61238 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Common Objects Argentina product of Oracle | |
CVE-2026-61244 |
9.1 |
0.0043
|
36.8% | 2026-07-21 | Vulnerability in the PeopleSoft Enterprise FIN Manufacturing Argentina product of Oracle P | |
CVE-2026-60737 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (comp | |
CVE-2026-61008 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component | |
CVE-2026-62610 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70668 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (compone | |
CVE-2026-70741 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (compo | |
CVE-2026-70862 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in Oracle Application Testing Suite. The supported version that is affecte | |
CVE-2026-70872 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperi | |
CVE-2026-70921 |
10.0 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (comp | |
CVE-2026-70978 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71014 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71015 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71026 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-71036 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager pr | |
CVE-2026-73865 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73866 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73916 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73917 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We | |
CVE-2026-73922 |
9.1 |
0.0043
|
36.8% | 2026-08-18 | Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative We |