Critical CVEs
3,477 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110186 |
9.8 | — | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary c | |
CVE-2026-90865 |
9.0 | — | — | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to | |
CVE-2026-90866 |
9.1 | — | — | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0 | |
CVE-2026-90868 |
9.9 | — | — | 2026-10-29 | An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to | |
CVE-2026-84295 |
10.0 | — | — | 2026-10-29 | Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and | |
CVE-2026-90863 |
9.1 | — | — | 2026-10-29 | Missing authorization in the administrative interface of Progress Software WS_FTP Server v | |
CVE-2026-90864 |
9.1 | — | — | 2026-10-29 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0 | |
CVE-2026-111732 |
9.3 | — | — | 2026-10-29 | P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data le | |
CVE-2026-112256 |
9.2 | — | — | 2026-10-29 | Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanc | |
CVE-2026-107032 |
9.1 | — | — | 2026-10-29 | Insecure permissions in Bulk Share : Location Sender v2.1.0 (versionCode 5) allows unautho | |
CVE-2026-119128 |
9.1 | — | — | 2026-10-29 | ZITADEL 4.0.0 before 4.19.5 contains an authentication bypass vulnerability in the Login V | |
CVE-2026-119145 |
9.4 | — | — | 2026-10-29 | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability bec | |
CVE-2026-107058 |
9.8 | — | — | 2026-10-29 | An issue in Shelter versionCode 445 allows attackers to register their own auth_key and ex | |
CVE-2026-118762 |
9.3 | — | — | 2026-10-29 | Monkeytype is a minimalistic and customizable typing test. Prior to 26.43.0, the .github/w | |
CVE-2026-118769 |
9.2 | — | — | 2026-10-29 | Botan is a C++ cryptography library. From 2.1.0 until 3.13.0, the Botan C API function bot | |
CVE-2026-103093 |
9.4 | — | — | 2026-10-29 | ServiceNow has remediated a sandbox escape security issue that was identified in the Servi | |
CVE-2026-61707 |
9.0 | — | — | 2026-10-29 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61645 |
9.1 | — | — | 2026-10-29 | Docat is a tool for hosting versioned static documentation. In the affected implementation | |
CVE-2023-22793 |
9.3 | — | — | 2026-10-29 | A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE | |
CVE-2026-103039 |
9.8 | — | — | 2026-10-30 | The Gravity Forms plugin for WordPress is vulnerable to PHP Object Injection in all versio | |
CVE-2026-82104 |
9.4 | — | — | 2026-10-30 | In Teltonika Networks RUTOS devices running versions from 7.22 through 7.24.2 and TSWOS de | |
CVE-2025-31704 |
9.8 | — | — | 2026-10-30 | A vulnerability has been found in the Dahua Intelligent Connection Center. A remote attack | |
CVE-2026-116366 |
9.5 | — | — | 2026-10-30 | An issue has been discovered in ClickHouse Server that, under certain conditions, could al | |
CVE-2026-119418 |
9.2 | — | — | 2026-10-30 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inj | |
CVE-2026-119419 |
9.2 | — | — | 2026-10-30 | CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inj | |
CVE-2026-119568 |
9.1 | — | — | 2026-10-30 | vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() | |
CVE-2026-119597 |
9.3 | — | — | 2026-10-30 | OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows |