Critical CVEs
3,393 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41264 |
9.2 |
0.0179
|
78.3% | 2026-04-23 | Flowise is a drag & drop user interface to build a customized large language model flow. P | |
CVE-2026-73299 |
10.0 |
0.0178
|
78.2% | 2026-08-12 | Prompty is a markdown file format (.prompty) for LLM prompts. Prior to 0.1.5 and 2.0.0-bet | |
CVE-2026-63305 |
9.2 |
0.0177
|
78.0% | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php | |
CVE-2026-13206 |
9.8 |
0.0177
|
78.0% | 2026-08-10 | Improper neutralization of special elements used in an OS command ('OS command injection') | |
CVE-2026-66147 |
9.4 |
0.0176
|
78.0% | 2026-08-11 | An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Se | |
CVE-2026-40887 |
9.1 |
0.0176
|
78.0% | 2026-04-21 | Vendure is an open-source headless commerce platform. Starting in version 1.7.4 and prior | |
CVE-2026-16812 |
10.0 |
0.0176
|
77.9% | 2026-07-27 | KEV | Arista VeloCloud Orchestrator On-Prem contains an OS command injection vulnerability that |
CVE-2026-63304 |
9.2 |
0.0173
|
77.6% | 2026-07-16 | AVideo through 29.0 contains an OS command injection vulnerability in plugin/API/standAlon | |
CVE-2026-45748 |
9.8 |
0.0173
|
77.5% | 2026-06-05 | Termix is a web-based server management platform with SSH terminal, tunneling, and file ed | |
CVE-2026-65400 |
9.8 |
0.0172
|
77.5% | 2026-08-06 | KEV | Apple macOS contains an improper authentication vulnerability that could allow an attacker |
CVE-2026-66713 |
9.8 |
0.0172
|
77.4% | 2026-07-28 | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component in | |
CVE-2026-47210 |
9.8 |
0.0172
|
77.4% | 2026-06-12 | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, a sandbox escape vu | |
CVE-2026-46364 |
9.3 |
0.0171
|
77.3% | 2026-05-15 | phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCa | |
CVE-2026-42076 |
9.8 |
0.0170
|
77.2% | 2026-05-04 | Evolver is a GEP-powered self-evolving engine for AI agents. Prior to version 1.69.3, a co | |
CVE-2026-41293 |
9.8 |
0.0170
|
77.2% | 2026-05-12 | Improper Input Validation vulnerability in Apache Tomcat. This issue affects Apache Tomca | |
CVE-2026-50517 |
9.9 |
0.0169
|
77.1% | 2026-07-24 | Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute | |
CVE-2026-50515 |
9.9 |
0.0169
|
77.1% | 2026-08-06 | Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to ex | |
CVE-2026-50746 |
10.0 |
0.0169
|
77.0% | 2026-07-02 | A malicious actor with access to the network could exploit an Improper Access Control vuln | |
CVE-2026-53975 |
9.3 |
0.0168
|
76.8% | 2026-08-06 | OpenChamber 1.11.7 contains an unauthenticated remote code execution vulnerability that al | |
CVE-2026-105016 |
9.8 |
0.0166
|
76.6% | 2026-10-13 | Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute co | |
CVE-2026-72580 |
9.8 |
0.0165
|
76.5% | 2026-08-10 | An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows | |
CVE-2026-8500 |
9.8 |
0.0165
|
76.5% | 2026-05-13 | Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small C | |
CVE-2026-33264 |
9.8 |
0.0165
|
76.4% | 2026-07-07 | A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attac | |
CVE-2026-56379 |
9.2 |
0.0164
|
76.4% | 2026-06-23 | ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in th | |
CVE-2026-5965 |
9.3 |
0.0164
|
76.3% | 2026-04-21 | NewSoftOA developed by NewSoft has an OS Command Injection vulnerability, allowing unauthe | |
CVE-2026-42062 |
9.3 |
0.0163
|
76.2% | 2026-05-13 | ELECOM wireless LAN access point devices contain an OS command injection in processing of | |
CVE-2026-50748 |
9.9 |
0.0163
|
76.1% | 2026-07-02 | A malicious actor with access to the network and low privileges could exploit an Improper | |
CVE-2026-34159 |
9.8 |
0.0162
|
76.0% | 2026-04-01 | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC | |
CVE-2026-42281 |
9.2 |
0.0162
|
76.1% | 2026-05-14 | MagicMirror² is an open source modular smart mirror platform. Prior to 2.36.0, an unauthen | |
CVE-2026-61876 |
9.4 |
0.0162
|
76.0% | 2026-07-12 | LuCI versions fail to properly encode DHCPv6 lease hostnames before rendering in status ta | |
CVE-2026-9814 |
9.1 |
0.0160
|
75.8% | 2026-10-20 | An OS command injection vulnerability exists in the boa formWizard newPass functionality o | |
CVE-2026-8054 |
10.0 |
0.0158
|
75.5% | 2026-05-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in th | |
CVE-2026-49261 |
9.8 |
0.0158
|
75.5% | 2026-06-11 | MariaDB server is a community developed fork of MySQL server. Versions 10.6.1 through 10.6 | |
CVE-2026-69084 |
9.9 |
0.0157
|
75.4% | 2026-08-03 | SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a | |
CVE-2026-70242 |
9.8 |
0.0157
|
75.3% | 2026-10-13 | Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to | |
CVE-2026-79861 |
9.8 |
0.0156
|
75.1% | 2026-10-22 | There is a command injection vulnerability in AOS-10 that could lead to unauthenticated re | |
CVE-2026-7873 |
9.9 |
0.0155
|
75.0% | 2026-06-30 | IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary | |
CVE-2026-44225 |
9.3 |
0.0154
|
74.8% | 2026-05-12 | Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to | |
CVE-2026-66914 |
9.2 |
0.0154
|
74.8% | 2026-08-07 | Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0 | |
CVE-2026-55944 |
9.8 |
0.0153
|
74.7% | 2026-07-14 | 1 PoC | Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacke |
CVE-2026-59124 |
9.8 |
0.0153
|
74.7% | 2026-08-11 | Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allow | |
CVE-2026-54117 |
9.8 |
0.0153
|
74.7% | 2026-07-14 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute | |
CVE-2026-54118 |
9.8 |
0.0153
|
74.7% | 2026-07-14 | Deserialization of untrusted data in SQL Server allows an unauthorized attacker to execute | |
CVE-2026-69836 |
10.0 |
0.0153
|
74.7% | 2026-08-20 | 2 PoC | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to |
CVE-2025-63706 |
9.8 |
0.0152
|
74.6% | 2026-05-07 | NPM package next-npm-version1.0.1 is vulnerable to Command injection. | |
CVE-2023-31039 |
9.8 |
0.0152
|
74.6% | 2023-05-08 | Security vulnerability in Apache bRPC <1.5.0 on all platforms allows attackers to execute | |
CVE-2026-0650 |
9.3 |
0.0152
|
74.5% | 2026-01-07 | OpenFlagr versions prior to and including 1.1.18 contain an authentication bypass vulnerab | |
CVE-2026-65700 |
9.3 |
0.0152
|
74.5% | 2026-07-23 | h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible file | |
CVE-2026-41042 |
9.1 |
0.0151
|
74.4% | 2026-07-08 | Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, | |
CVE-2026-48168 |
10.0 |
0.0150
|
74.3% | 2026-08-05 | PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, the bundled Claude G |