Critical CVEs
3,393 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-23560 |
9.4 |
0.0017
|
5.9% | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-23561 |
9.4 |
0.0017
|
5.9% | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-23562 |
9.4 |
0.0017
|
5.9% | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-42486 |
9.4 |
0.0017
|
6.0% | 2026-07-09 | [This CNA information record relates to multiple CVEs; the text explains which aspects/vul | |
CVE-2026-0082 |
10.0 |
0.0016
|
5.7% | 2026-06-17 | In tryStartActivity of NfcDispatcher.java, there is a possible automatic special app acces | |
CVE-2026-41872 |
9.1 |
0.0016
|
5.1% | 2026-05-12 | "Kura Sushi Official App" provided by EPG, Inc. is vulnerable to improper certificate vali | |
CVE-2026-113617 |
9.9 |
0.0016
|
4.9% | 2026-10-29 | The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a us | |
CVE-2026-44592 |
9.4 |
0.0016
|
4.8% | 2026-05-14 | Gradient is a nix-based continuous integration system. In 1.1.0, when GRADIENT_DISCOVERABL | |
CVE-2026-33867 |
9.1 |
0.0015
|
4.6% | 2026-03-27 | WWBN AVideo is an open source video platform. In versions up to and including 26.0, AVideo | |
CVE-2026-0063 |
10.0 |
0.0015
|
4.6% | 2026-06-17 | In setAllowedCarriers of PhoneInterfaceManager.java, there is a possible way to disable ca | |
CVE-2026-0071 |
10.0 |
0.0015
|
4.6% | 2026-06-17 | In SettingsLib, there is a possible missing permission check due to a logic error in the c | |
CVE-2026-86411 |
9.1 |
0.0015
|
4.4% | 2026-10-20 | An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control conn | |
CVE-2026-8072 |
9.2 |
0.0015
|
4.3% | 2026-05-12 | Insecure generation of credentials in the local SAT (Technical Support) access functionali | |
CVE-2026-11535 |
9.4 |
0.0015
|
4.3% | 2026-06-12 | An unauthorized access vulnerability exists in the PcSuite APP. The vulnerability can be e | |
CVE-2026-7875 |
9.3 |
0.0015
|
4.0% | 2026-05-06 | NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerabili | |
CVE-2026-44523 |
10.0 |
0.0015
|
4.0% | 2026-05-14 | Note Mark is an open-source note-taking application. Prior to 0.19.4, no minimum length or | |
CVE-2026-0081 |
10.0 |
0.0015
|
4.0% | 2026-06-17 | In NFC, there is a possible way to spoof an NFC event due to a missing permission check. T | |
CVE-2026-113616 |
9.8 |
0.0015
|
3.9% | 2026-10-29 | The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-t | |
CVE-2026-98464 |
9.3 |
0.0014
|
3.6% | 2026-10-18 | In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM: Synchron | |
CVE-2026-13385 |
9.5 |
0.0014
|
3.4% | 2026-07-15 | An Improper Validation of Integrity Check Value and Improper Certificate Validation in cer | |
CVE-2026-46913 |
9.3 |
0.0014
|
3.4% | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (componen | |
CVE-2026-28573 |
10.0 |
0.0014
|
3.2% | 2026-06-18 | In AndroidManifest.xml, there is a possible persistent denial of service due to a missing | |
CVE-2026-23556 |
9.4 |
0.0014
|
3.1% | 2026-07-09 | When oxenstored is tearing a domain down, the node data is cleaned up but the usage counts | |
CVE-2026-76527 |
9.8 |
0.0013
|
2.9% | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has | |
CVE-2026-16416 |
9.3 |
0.0013
|
2.7% | 2026-07-21 | Integer overflow in Chromecast in Google Chrome prior to 150.0.7871.182 allowed a local at | |
CVE-2026-108014 |
9.1 |
0.0013
|
2.5% | 2026-10-27 | Private keys for eight eMudhra intermediate CA certificates have been compromised https:/ | |
CVE-2026-108015 |
9.1 |
0.0013
|
2.5% | 2026-10-27 | Private keys for eight eMudhra intermediate CA certificates have been compromised https:/ | |
CVE-2026-42193 |
9.1 |
0.0013
|
2.4% | 2026-05-08 | Plunk is an open-source email platform built on top of AWS SES. Prior to version 0.9.0, th | |
CVE-2026-28575 |
10.0 |
0.0013
|
2.2% | 2026-06-17 | In PackageInstaller.Session#transfer of frameworks/base/services/core/java/com/android/ser | |
CVE-2026-0068 |
10.0 |
0.0012
|
2.1% | 2026-06-17 | In createSessionInternal of PackageInstallerService.java, there is a possible method to re | |
CVE-2026-28615 |
10.0 |
0.0012
|
2.1% | 2026-06-17 | In Telecomm, there is a possible way to initiate an unauthorized phone call due to a permi | |
CVE-2026-0064 |
10.0 |
0.0012
|
2.0% | 2026-06-17 | In multiple places, there is a possible persistent denial of service due to resource exhau | |
CVE-2026-0083 |
10.0 |
0.0012
|
1.9% | 2026-06-17 | In Nfc::eventCallback() of Nfc.h, there is a possible use after free due to a race conditi | |
CVE-2026-28587 |
10.0 |
0.0011
|
1.5% | 2026-06-17 | In MmsSmsProvider of MmsSmsProvider.java, there is a possible way to retrieve sensitive in | |
CVE-2026-8470 |
9.1 |
0.0011
|
1.3% | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0 | |
CVE-2025-30054 |
9.3 |
0.0010
|
0.8% | 2026-10-23 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incom | |
CVE-2026-77055 |
9.3 |
0.0009
|
0.5% | 2026-10-26 | boneIO black_debian_images gives the boneio service account excessive privileges, includin | |
CVE-2026-116116 |
9.3 |
0.0009
|
0.4% | 2026-10-26 | A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown | |
CVE-2026-115964 |
9.3 | — | — | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-97854 |
9.3 | — | — | 2026-10-29 | Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command in | |
CVE-2026-119050 |
9.2 | — | — | 2026-10-29 | Agno through 3.1.11 contains an unsafe reflection vulnerability in PandasTools that allows | |
CVE-2026-107015 |
9.1 | — | — | 2026-10-29 | Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers t | |
CVE-2026-104339 |
9.8 | — | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary c | |
CVE-2026-107327 |
9.9 | — | — | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107328 |
9.9 | — | — | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-107329 |
9.9 | — | — | 2026-10-29 | 1 PoC | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execu |
CVE-2026-54856 |
9.8 | — | — | 2026-10-29 | Unauthenticated PHP Object Injection in RexCoin <= 1.2.6 versions. | |
CVE-2026-54857 |
9.8 | — | — | 2026-10-29 | Unauthenticated PHP Object Injection in Quirky <= 1.23 versions. | |
CVE-2026-54858 |
9.8 | — | — | 2026-10-29 | Unauthenticated PHP Object Injection in Printy <= 1.13.0 versions. | |
CVE-2026-54859 |
9.8 | — | — | 2026-10-29 | Unauthenticated PHP Object Injection in Preservation <= 1.15 versions. |