Critical CVEs
3,395 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-29204 |
9.1 |
0.0032
|
24.8% | 2026-05-12 | Insufficient ownership check in `clientarea.php` allows an authenticated client area user | |
CVE-2026-27041 |
9.9 |
0.0032
|
24.8% | 2026-06-17 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 v | |
CVE-2026-13028 |
9.6 |
0.0032
|
24.9% | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remo | |
CVE-2026-13032 |
9.6 |
0.0032
|
24.9% | 2026-06-24 | Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remo | |
CVE-2026-13775 |
9.8 |
0.0032
|
24.9% | 2026-06-30 | Use after free in GPU in Google Chrome prior to 150.0.7871.47 allowed a remote attacker wh | |
CVE-2026-13782 |
10.0 |
0.0032
|
24.9% | 2026-06-30 | Use after free in Browser in Google Chrome prior to 150.0.7871.47 allowed a remote attacke | |
CVE-2026-13785 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remot | |
CVE-2026-13796 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.47 allowed a remote at | |
CVE-2026-13797 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7 | |
CVE-2026-14056 |
9.6 |
0.0032
|
24.8% | 2026-06-30 | Insufficient validation of untrusted input in Media in Google Chrome prior to 150.0.7871.4 | |
CVE-2026-14093 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Use after free in Cast in Google Chrome prior to 150.0.7871.47 allowed a remote attacker w | |
CVE-2026-14095 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Insufficient policy enforcement in Browser in Google Chrome prior to 150.0.7871.47 allowed | |
CVE-2026-14097 |
9.6 |
0.0032
|
24.9% | 2026-06-30 | Inappropriate implementation in WebAppInstalls in Google Chrome on Mac prior to 150.0.7871 | |
CVE-2026-64877 |
9.4 |
0.0032
|
24.8% | 2026-07-21 | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API | |
CVE-2026-17803 |
9.6 |
0.0032
|
24.8% | 2026-07-30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151. | |
CVE-2026-17848 |
9.6 |
0.0032
|
24.8% | 2026-07-30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attack | |
CVE-2026-17987 |
9.6 |
0.0032
|
24.8% | 2026-07-30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151. | |
CVE-2026-17990 |
9.6 |
0.0032
|
24.8% | 2026-07-30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.792 | |
CVE-2026-100752 |
9.3 |
0.0032
|
24.8% | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Fr | |
CVE-2026-101108 |
9.3 |
0.0032
|
24.8% | 2026-09-28 | Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) | |
CVE-2026-114612 |
9.9 |
0.0032
|
24.8% | 2026-10-22 | LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From | |
CVE-2026-5288 |
9.6 |
0.0032
|
24.7% | 2026-04-01 | Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a re | |
CVE-2026-5290 |
9.6 |
0.0032
|
24.7% | 2026-04-01 | Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote at | |
CVE-2026-44015 |
9.9 |
0.0032
|
24.7% | 2026-05-12 | Nginx UI is a web user interface for the Nginx web server. In 2.3.4 and earlier, an authen | |
CVE-2026-55413 |
9.4 |
0.0032
|
24.7% | 2026-06-25 | ToolJet is the open-source foundation am AI-native platform for building and deploying int | |
CVE-2026-35157 |
9.8 |
0.0032
|
24.6% | 2026-05-11 | Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, | |
CVE-2026-41258 |
9.1 |
0.0032
|
24.6% | 2026-05-15 | OpenMRS is an open source electronic medical record system platform. From 2.7.0 to before | |
CVE-2026-45323 |
9.6 |
0.0032
|
24.6% | 2026-05-28 | MeshCore Card provides MeshCore Lovelace card for Home Assistant. Prior to 0.3.3, Meshcore | |
CVE-2026-11751 |
9.1 |
0.0032
|
24.6% | 2026-08-19 | A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS ups | |
CVE-2026-91241 |
9.1 |
0.0032
|
24.6% | 2026-10-20 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Ana | |
CVE-2026-75595 |
9.1 |
0.0032
|
24.4% | 2026-08-19 | Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fin | |
CVE-2026-42160 |
10.0 |
0.0032
|
24.4% | 2026-05-08 | Data Space Portal is an open-source Software as a Service (SaaS) solution designed to stre | |
CVE-2026-48930 |
9.8 |
0.0032
|
24.4% | 2026-06-26 | A flaw in Node.js TLS hostname handling can cause Embedded-nul hostnames can lead to silen | |
CVE-2026-57498 |
9.6 |
0.0032
|
24.4% | 2026-06-29 | Coolify is an open-source and self-hostable tool for managing servers, applications, and d | |
CVE-2026-12665 |
9.8 |
0.0032
|
24.4% | 2026-10-19 | IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overf | |
CVE-2026-116199 |
9.2 |
0.0032
|
24.4% | 2026-10-25 | Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoo | |
CVE-2026-102789 |
9.3 |
0.0032
|
24.4% | 2026-10-27 | Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in | |
CVE-2026-15183 |
9.2 |
0.0031
|
24.2% | 2026-07-14 | Multiple input validation vulnerabilities in the Snowflake Spark Connector (spark-snowflak | |
CVE-2026-65057 |
9.2 |
0.0031
|
24.3% | 2026-07-21 | Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows una | |
CVE-2026-112712 |
9.1 |
0.0031
|
24.3% | 2026-10-20 | @fastify/middie is the Express-style middleware engine for Fastify. In versions from 9.0.0 | |
CVE-2026-40190 |
9.8 |
0.0031
|
24.2% | 2026-04-10 | LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to | |
CVE-2026-41691 |
9.1 |
0.0031
|
24.2% | 2026-05-07 | Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript libr | |
CVE-2026-32999 |
9.0 |
0.0031
|
24.2% | 2026-05-28 | Insufficient character filtering in backup agent signing module on Comet Backup server all | |
CVE-2026-79871 |
9.6 |
0.0031
|
24.2% | 2026-10-22 | A sensitive information disclosure vulnerability in the command line interface of AOS-10 c | |
CVE-2026-112846 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allo | |
CVE-2026-112847 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object | |
CVE-2026-112848 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows O | |
CVE-2026-112851 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows O | |
CVE-2026-112854 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-ce | |
CVE-2026-112855 |
9.8 |
0.0031
|
24.2% | 2026-10-23 | Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Inj |