CVE-2026-90864 |
critical
|
9.1 |
0.0048
|
Progress Software |
WS_FTP Server |
0
< 2024.0.7
|
|
CVE-2026-90863 |
critical
|
9.1 |
0.0066
|
Progress Software |
WS_FTP Server |
0
< 2025.0.4
|
|
CVE-2026-90864 |
critical
|
9.1 |
0.0048
|
Progress Software |
WS_FTP Server |
0
< 2025.0.4
|
|
CVE-2026-90866 |
critical
|
9.1 |
0.0073
|
Progress Software |
WS_FTP Server |
0
< 2025.0.4
|
|
CVE-2026-103882 |
critical
|
9.1 |
0.0079
|
acadlix |
Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress |
0
|
|
CVE-2026-120518 |
critical
|
9.1 |
0.0078
|
kalengi |
BuddyPress XProfile Custom Image Field |
0
|
|
CVE-2024-5805 |
critical
|
9.1 |
0.0676
|
Progress |
MOVEit Gateway |
2024.0.0
< 2024.0.1
|
|
CVE-2024-5805 |
critical
|
9.1 |
0.0676
|
progress |
moveit_gateway |
2024.0
|
|
CVE-2026-112362 |
critical
|
9.1 |
0.0037
|
@fastify/express |
@fastify/express |
4.0.5
< 4.0.9
|
|
CVE-2026-118170 |
critical
|
9.1 |
0.0029
|
Strapi |
Strapi Open Source and Enterprise Headless CMS |
5.51.0
|
|
CVE-2026-108015 |
critical
|
9.1 |
0.0013
|
HCLSoftware |
Notes Client |
<1=2.0.2 FP8, <=14.0 FP5, 14.5, <=14.5.1 FP1
|
|
CVE-2026-122220 |
critical
|
9.1 |
0.0033
|
wpo365 |
WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN) |
0
< 45.2
|
|
CVE-2025-61546 |
critical
|
9.1 |
0.0054
|
edubusinesssolutions |
print_shop_pro_webdesk |
18.34
|
|
CVE-2025-68715 |
critical
|
9.1 |
0.0071
|
pandawireless |
pwru01_firmware |
2.2.9
|
|
CVE-2026-116790 |
critical
|
9.1 |
0.0034
|
signalwire |
freeswitch |
< 1.11.2
|
|
CVE-2026-116785 |
critical
|
9.1 |
0.0109
|
signalwire |
freeswitch |
< 1.11.2
|
|
CVE-2025-63416 |
critical
|
9.1 |
0.0039
|
selfbest |
selfbest |
2023.3
|
|
CVE-2025-60964 |
critical
|
9.1 |
0.0121
|
endruntechnologies |
sonoma_d12_firmware |
6010-0071-000
|
|
CVE-2025-60965 |
critical
|
9.1 |
0.0121
|
endruntechnologies |
sonoma_d12_firmware |
6010-0071-000
|
|
CVE-2026-114630 |
critical
|
9.1 |
0.0132
|
elextensions |
ELEX WordPress HelpDesk & Customer Ticketing System |
0
|
1 PoC
|
CVE-2026-74756 |
critical
|
9.1 |
0.0039
|
Apache Software Foundation |
Apache James |
0
< 3.9.1
|
|
CVE-2026-76171 |
critical
|
9.1 |
0.0037
|
Apache Software Foundation |
Apache James |
3.9.0
< 3.9.1
|
|
CVE-2026-118066 |
critical
|
9.1 |
0.0226
|
latepoint |
Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress |
0
|
|
CVE-2026-109798 |
critical
|
9.1 |
0.0028
|
SAP_SE |
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) |
ENTERPRISE 430
|
|
CVE-2026-109798 |
critical
|
9.1 |
0.0028
|
SAP_SE |
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) |
2025
|
|
CVE-2026-109798 |
critical
|
9.1 |
0.0028
|
SAP_SE |
SAP BusinessObjects Business Intelligence Platform (Web Intelligence) |
2027
|
|
CVE-2024-5535 |
critical
|
9.1 |
0.0613
|
netapp |
management_services_for_element_software_and_netapp_hci |
-
|
1 PoC
|
CVE-2024-5535 |
critical
|
9.1 |
0.0613
|
siemens |
scalance_wub762-1_ifeatures_firmware |
< 3.0.0
|
1 PoC
|
CVE-2026-91241 |
critical
|
9.1 |
0.0034
|
oracle |
business_intelligence |
8.2.0.0.0
|
|
CVE-2026-91241 |
critical
|
9.1 |
0.0034
|
oracle |
business_intelligence |
12.2.1.4.0
|
|
CVE-2026-91241 |
critical
|
9.1 |
0.0034
|
oracle |
business_intelligence |
26.01.0.0.0
|
|
CVE-2026-116785 |
critical
|
9.1 |
0.0109
|
freeswitch |
freeswitch |
< 1.11.2
|
|
CVE-2026-116790 |
critical
|
9.1 |
0.0034
|
freeswitch |
freeswitch |
< 1.11.2
|
|
CVE-2026-125331 |
critical
|
9.1 |
0.0030
|
HarnessRouter |
harnessrouter |
< 0.31.8
|
|
CVE-2026-85632 |
critical
|
9.1 |
0.0022
|
Sipay Electronic Money and Payment Services Inc. |
WooCommerce Virtual POS Module |
26.8.3
< 26.9.1
|
|
CVE-2026-33656 |
critical
|
9.1 |
0.0050
|
espocrm |
espocrm |
< 9.3.4
|
1 PoC
|
CVE-2026-12507 |
critical
|
9.1 |
0.0944
|
Zohocorp |
ServiceDesk Plus |
0
< 15290
|
|
CVE-2026-12507 |
critical
|
9.1 |
0.0944
|
Zohocorp |
ServiceDesk Plus MSP |
0
< 15150
|
|
CVE-2026-61201 |
critical
|
9.0 |
0.0039
|
oracle |
peoplesoft_enterprise_crm_common_objects |
9.2.23
|
|
CVE-2026-61204 |
critical
|
9.0 |
0.0018
|
oracle |
peoplesoft_enterprise_fin_program_management |
9.2
|
|
CVE-2026-61029 |
critical
|
9.0 |
0.0039
|
oracle |
webcenter_sites |
12.2.1.4.0
|
|
CVE-2026-61029 |
critical
|
9.0 |
0.0039
|
oracle |
webcenter_sites |
14.1.2.0.0
|
|
CVE-2026-90865 |
critical
|
9.0 |
0.0114
|
Progress Software |
WS_FTP Server |
0
< 2024.0.7
|
|
CVE-2026-61707 |
critical
|
9.0 |
0.0024
|
socfortress |
CoPilot |
< 0.1.76
|
|
CVE-2026-90865 |
critical
|
9.0 |
0.0114
|
Progress Software |
WS_FTP Server |
0
< 2025.0.4
|
|
CVE-2026-122120 |
critical
|
9.0 |
0.0051
|
Yealink |
Plug-in Softwares |
0
< 2.35.219.0
|
|
CVE-2026-27540 |
critical
|
9.0 |
0.0275
|
Rymera Web Co Pty Ltd. |
Woocommerce Wholesale Lead Capture |
0
|
1 PoC
|
CVE-2026-41196 |
critical
|
9.0 |
0.0037
|
minetest |
minetest |
< 5.15.2
|
|
CVE-2026-61719 |
high
|
8.9 |
0.0024
|
LabRedesCefetRJ |
WeGIA |
< 3.8.7
|
|
CVE-2026-102802 |
high
|
8.9 |
0.0039
|
regularlabs.com |
Articles Anywhere extension for Joomla |
1.4.5-20.1.0
|
|