Critical CVEs
3,516 CVEs with CVSS 9.0+ severity, ranked by exploitation probability.
| CVE | CVSS | EPSS | Percentile | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-110799 |
9.8 | — | — | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-112905 |
9.0 | — | — | 2026-10-30 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecom | |
CVE-2026-119660 |
9.3 | — | — | 2026-10-30 | MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthent | |
CVE-2026-61728 |
9.9 | — | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-93327 |
9.4 | — | — | 2026-10-30 | A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud | |
CVE-2026-61737 |
9.8 | — | — | 2026-10-30 | ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a ha | |
CVE-2026-61738 |
10.0 | — | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61729 |
9.4 | — | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-61730 |
9.3 | — | — | 2026-10-30 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security oper | |
CVE-2026-119706 |
9.3 | — | — | 2026-10-30 | InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution v | |
CVE-2026-119716 |
9.2 | — | — | 2026-10-30 | pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-119717 |
9.2 | — | — | 2026-10-30 | pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that | |
CVE-2026-112816 |
10.0 | — | — | 2026-10-30 | Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.2 | |
CVE-2026-61826 |
10.0 | — | — | 2026-10-30 | Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_n | |
CVE-2026-118697 |
9.0 | — | — | 2026-10-30 | In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, | |
CVE-2026-119978 |
9.0 | — | — | 2026-10-30 | Flowise through 3.1.4 contains a sandbox escape vulnerability that allows authenticated us |