CVE-2026-2053 |
critical
|
10.0 |
0.0039
|
wso2 |
api_manager |
< 3.1.0.360
|
|
CVE-2026-5936 |
critical
|
9.8 |
0.0019
|
foxit |
pdf_services_api |
< 2026-04-07
|
|
CVE-2026-8592 |
critical
|
9.8 |
0.0120
|
rapid7 |
insightconnect_awk |
< 1.2.2
|
|
CVE-2026-8660 |
critical
|
9.8 |
0.0120
|
rapid7 |
insightconnect_ping |
< 1.0.4
|
|
CVE-2026-8665 |
critical
|
9.8 |
0.0120
|
rapid7 |
insightconnect_translate |
< 2.0.3
|
|
CVE-2026-8666 |
critical
|
9.8 |
0.0120
|
rapid7 |
insightconnect_traceroute |
< 1.0.3
|
|
CVE-2026-3144 |
critical
|
9.8 |
0.0041
|
ibm |
api_connect |
< 12.1.1.0
|
|
CVE-2026-9074 |
critical
|
9.8 |
0.0051
|
ibm |
api_connect |
< 10.0.8.10
|
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
neilcochran |
wot-api |
0.8.1
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
neilcochran |
wot-api |
0.8.2
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
neilcochran |
wot-api |
0.8.4
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
uipath |
uipath\/api-workflow-tool |
1.0.1
|
KEV
|
CVE-2026-45321 |
critical
|
9.6 |
0.0328
|
uipath |
uipath\/packager-tool-apiworkflow |
0.0.19
|
KEV
|
CVE-2026-61451 |
critical
|
9.4 |
0.0031
|
getgrav |
grav-plugin-api |
0
< 1.0.4
|
|
CVE-2026-22599 |
critical
|
9.3 |
0.0118
|
strapi |
strapi |
< 4.26.1
|
|
CVE-2025-13590 |
critical
|
9.1 |
0.0077
|
WSO2 |
WSO2 API Manager |
4.2.0
< 4.2.0.179
|
|
CVE-2026-31908 |
critical
|
9.1 |
0.0052
|
apache |
apisix |
< 3.16.0
|
|
CVE-2026-6290 |
critical
|
9.1 |
0.0022
|
rapid7 |
velociraptor |
< 0.76.3
|
|
CVE-2026-97406 |
critical
|
9.1 |
0.0022
|
Xerj |
Console API |
v1.0.0-rc.11
|
|
CVE-2026-13380 |
critical
|
9.0 |
0.0039
|
vsee |
clinic_api |
1.3.0
|
|
CVE-2026-42843 |
high
|
8.8 |
0.0035
|
getgrav |
grav-plugin-api |
1.0.0
|
|
CVE-2026-8659 |
high
|
8.8 |
0.0129
|
rapid7 |
insightconnect_sqlmap |
< 2.0.1
|
|
CVE-2026-8663 |
high
|
8.8 |
0.0129
|
rapid7 |
insightconnect_rpm |
< 1.0.2
|
|
CVE-2026-8664 |
high
|
8.8 |
0.0129
|
rapid7 |
insightconnect_finger |
< 1.0.3
|
|
CVE-2026-8658 |
high
|
8.8 |
0.0129
|
rapid7 |
insightconnect_tcpdump |
< 2.0.0
|
|
CVE-2026-83943 |
high
|
8.7 |
0.0054
|
Microsoft |
Azure API Center |
-
|
|
CVE-2026-3415 |
high
|
8.7 |
0.0049
|
WSO2 |
WSO2 API Manager |
3.2.0
< 3.2.0.472
|
|
CVE-2026-55471 |
high
|
8.7 |
0.0057
|
hapifhir |
hl7_fhir_core |
< 6.9.10
|
|
CVE-2026-13381 |
high
|
8.7 |
0.0037
|
vsee |
clinic_api |
1.3.0
|
|
CVE-2026-119028 |
high
|
8.7 |
—
|
oapi-codegen |
oapi-codegen |
2.0.0
< 2.8.1
|
|
CVE-2026-72826 |
high
|
8.7 |
0.0047
|
getgrav |
grav-plugin-api |
0
< 1.0.13
|
|
CVE-2026-118668 |
high
|
8.6 |
0.0037
|
langchain-ai |
langgraph-api |
>= 0.1.2, < 0.15.0
|
|
CVE-2026-40520 |
high
|
8.6 |
0.0138
|
freepbx |
api |
< 17.0.8
|
|
CVE-2026-6482 |
high
|
8.5 |
0.0018
|
rapid7 |
insight_agent |
< 4.1.0.2
|
|
CVE-2025-14260 |
high
|
8.3 |
0.0028
|
WSO2 |
WSO2 API Manager |
3.1.0
< 3.1.0.354
|
|
CVE-2026-41432 |
high
|
8.2 |
0.0085
|
newapi |
new_api |
< 0.12.10
|
|
CVE-2026-35425 |
high
|
8.0 |
0.0070
|
Microsoft |
Azure API Management (APIM) |
-
|
|
CVE-2026-35425 |
high
|
8.0 |
0.0070
|
microsoft |
azure_api_management |
-
|
|
CVE-2026-115805 |
high
|
7.8 |
—
|
Rapid7 |
Insight Agent |
0
< 4.1.4.43
|
|
CVE-2026-40180 |
high
|
7.7 |
0.0039
|
quarkiverse |
quarkus_openapi_generator |
< 2.15.0
|
|
CVE-2026-40180 |
high
|
7.7 |
0.0039
|
quarkiverse |
quarkus_openapi_generator |
2.15.0
|
|
CVE-2026-33655 |
high
|
7.7 |
0.0044
|
newapi |
new_api |
< 0.12.0
|
|
CVE-2026-119027 |
high
|
7.7 |
—
|
oapi-codegen |
oapi-codegen |
2.5.0
< 2.8.1
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_control_plane |
4.5.0
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_control_plane |
4.6.0
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_manager |
3.1.0
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_manager |
3.2.0
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_manager |
3.2.1
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_manager |
4.1.0
|
|
CVE-2024-6832 |
high
|
7.5 |
0.0041
|
wso2 |
api_manager |
4.2.0
|
|