Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Filtered Results
2,734 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-62325 |
critical | 9.1 | 0.0043 | 2026-07-28 | goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2 | |
CVE-2026-64863 |
critical | 9.1 | 0.0042 | 2026-07-28 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, th | |
CVE-2026-63229 |
critical | 9.1 | 0.0052 | 2026-07-29 | A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated att | |
CVE-2026-63230 |
critical | 9.1 | 0.0052 | 2026-07-29 | A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticat | |
CVE-2026-14488 |
critical | 9.1 | 0.0052 | 2026-07-29 | The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization via the template_redire | |
CVE-2026-17666 |
critical | 9.1 | 0.0017 | 2026-07-30 | Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a pr | |
CVE-2026-18363 |
critical | 9.1 | 0.0048 | 2026-07-30 | A logic vulnerability in the password reset token validation routine implemented by osTicket in vers | |
CVE-2026-53431 |
critical | 9.1 | 0.0051 | 2026-07-30 | Authentication Bypass by Capture-replay vulnerability in malach-it Boruta allows an attacker who has | |
CVE-2026-16503 |
critical | 9.1 | 0.0043 | 2026-07-31 | Deployment of the VPS.org one-click Supabase template deploys a PostgreSQL instance that is publishe | |
CVE-2026-9390 |
critical | 9.1 | 0.0050 | 2026-08-03 | XML::Sig versions before 0.71 for Perl allow XPath injection in ID lookup. verify() and _get_signed | |
CVE-2026-9487 |
critical | 9.1 | 0.0028 | 2026-08-03 | XML::Sig versions before 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xml() | |
CVE-2026-48031 |
critical | 9.1 | 0.0063 | 2026-08-03 | go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In v | |
CVE-2026-18753 |
critical | 9.1 | 0.0044 | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web serve | |
CVE-2026-18754 |
critical | 9.1 | 0.0044 | 2026-08-04 | The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web serve | |
CVE-2026-14804 |
critical | 9.1 | 0.0040 | 2026-08-04 | Use of hard-coded cryptographic key vulnerability in Bilin Software and Informatics Consultancy Inc. | |
CVE-2026-60007 |
critical | 9.1 | 0.0055 | 2026-08-04 | In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing returns distinguishable erro | |
CVE-2026-71238 |
critical | 9.1 | 0.0044 | 2026-08-05 | DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the committed webcrm/settings.py ra | |
CVE-2026-71263 |
critical | 9.1 | 0.0050 | 2026-08-05 | The LINUXTCP port of FreeModbus contains an off-by-one bounds check in xMBPortTCPPool (demo/LINUXTCP | |
CVE-2026-71277 |
critical | 9.1 | 0.0042 | 2026-08-05 | rust-iot-platform's AuthToken request-guard implementation (api/src/main.rs) only checks whether the | |
CVE-2026-60053 |
critical | 9.1 | 0.0057 | 2026-08-05 | Insufficient Session Expiration vulnerability in Apache Answer. This issue affects Apache Answer: t | |
CVE-2026-7557 |
critical | 9.1 | 0.0046 | 2026-08-05 | An improper verification of cryptographic signature vulnerability in the SAML authentication module | |
CVE-2026-9190 |
critical | 9.1 | 0.0074 | 2026-08-05 | An HTTP request smuggling vulnerability in the HTTP App Server of Progress MarkLogic Server before 1 | |
CVE-2026-8470 |
critical | 9.1 | 0.0011 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through | |
CVE-2026-61466 |
critical | 9.1 | 0.0071 | 2026-08-06 | In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and st | |
CVE-2026-63687 |
critical | 9.1 | 0.0028 | 2026-08-06 | Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization | |
CVE-2026-65583 |
critical | 9.1 | 0.0028 | 2026-08-06 | Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcin | |
CVE-2026-64993 |
critical | 9.1 | 0.0024 | 2026-08-06 | Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in t | |
CVE-2026-32327 |
critical | 9.1 | 0.0046 | 2026-08-06 | A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library co | |
CVE-2026-34191 |
critical | 9.1 | 0.0059 | 2026-08-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i | |
CVE-2026-71560 |
critical | 9.1 | 0.0077 | 2026-08-07 | Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. This issue affects Apache Fory | |
CVE-2026-48039 |
critical | 9.1 | 0.0059 | 2026-08-07 | Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assistants run Meta Ads. Prior to | |
CVE-2026-72569 |
critical | 9.1 | 0.0074 | 2026-08-10 | A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated | |
CVE-2026-72575 |
critical | 9.1 | 0.0053 | 2026-08-10 | An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote att | |
CVE-2026-47702 |
critical | 9.1 | 0.0030 | 2026-08-11 | TypeBot is a chatbot builder tool. In version 3.16.1, API tokens (bearer credentials used to authent | |
CVE-2026-69223 |
critical | 9.1 | 0.0078 | 2026-08-11 | Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). This issue affects A | |
CVE-2026-71362 |
critical | 9.1 | 0.9049 | 2026-08-11 | KEV | Adobe Commerce and Magento contains an incorrect authorization vulnerability that could allow an att |
CVE-2026-66145 |
critical | 9.1 | 0.0066 | 2026-08-11 | An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) | |
CVE-2026-71290 |
critical | 9.1 | 0.0033 | 2026-08-11 | Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. Hostn | |
CVE-2026-73501 |
critical | 9.1 | 0.0043 | 2026-08-12 | kin-openapi is a Go project for handling OpenAPI files. Prior to 0.144.0, ValidationHandler.Load() i | |
CVE-2026-59503 |
critical | 9.1 | 0.0043 | 2026-08-13 | : Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Informat | |
CVE-2026-59504 |
critical | 9.1 | 0.0043 | 2026-08-13 | : Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon t | |
CVE-2026-53791 |
critical | 9.1 | 0.0050 | 2026-08-13 | rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated | |
CVE-2026-53793 |
critical | 9.1 | 0.0039 | 2026-08-13 | rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to es | |
CVE-2026-70452 |
critical | 9.1 | 0.0046 | 2026-08-13 | rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attacker | |
CVE-2026-73567 |
critical | 9.1 | 0.0044 | 2026-08-13 | sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and | |
CVE-2026-71479 |
critical | 9.1 | 0.0065 | 2026-08-17 | New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management sys | |
CVE-2026-51346 |
critical | 9.1 | 0.0070 | 2026-08-17 | SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote att | |
CVE-2026-73381 |
critical | 9.1 | 0.0055 | 2026-08-18 | Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions. | |
CVE-2026-18963 |
critical | 9.1 | 0.0468 | 2026-08-18 | A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core | |
CVE-2026-52723 |
critical | 9.1 | 0.0038 | 2026-08-18 | ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to |