Latest critical vulnerabilities
CVSS 9.0 and up.
- sap se manufacturing integration and intelligenceCode Injection vulnerability in Manufacturing Integration and Intelligence9.1 Critical
- sap se netweaver and abap platformMemory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform9.8 Critical
- No product listedAn issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the...9.8 Critical
- dai-shi react18-usereact18-use was vulnerable to malicious code execution via compromised commits9.3 Critical
- dai-shi react-trackedreact-tracked was vulnerable to malicious code execution via compromised commits9.3 Critical
- frappe erpnextERPNext: Possibility of server-side template injection due to missing validation9.9 Critical
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.3 +1 more +3 moreFeast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server9.9 Critical
- red hat openshift ai (rhoai), openshift ai 3.4 +1 moreMaas-billing: maas api: privilege escalation via forged http headers due to missing authentication9.9 Critical
- firecrawlFirecrawl: Arbitrary file read via JSON Schema $ref expansion9.3 Critical
- dokployDokploy: Authenticated RCE via Command Injection in registry.testRegistry / registry.testRegistryById9.9 Critical
- dokployDokploy: Remote Code Execution via volume-backup9.9 Critical
- dokployDokploy: Non-admin member gains root on the host by bypassing the owner/admin check on server-level schedules (incomplete fix of CVE-2026-45632)9.9 Critical
- tbea tlogger (tbea communication box 3rd generation)Insufficient Webserver Authentication9.2 Critical
- dokployDokploy: Authenticated blind command injection via file mounts leads to direct remote host RCE on managed servers9.9 Critical
- tbea tlogger (tbea communication box 3rd generation)Unauthenticated SQL Injection9.3 Critical
- tbea tlogger (tbea communication box 3rd generation)Backdoor / default root credentials9.3 Critical
- dokployDokploy: Arbitrary File Write + Remote OS Command Injection via `certificatePath`9.9 Critical
- dokployDokploy: Command Injection via Registry Credentials in Swarm Upload9.4 Critical
- dokployDokploy: OS Command Injection in backup/restore pipeline via unescaped user-controlled shell arguments9.6 Critical
- dokployDokploy: Command Injection via dockerImage in buildRemoteDocker9.6 Critical
- dokployDokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.*9.9 Critical
- dokployDokploy: OS Command Injection via Bitbucket `owner`/`repository` in `git clone`9.9 Critical
- dokployDokploy: Authenticated OS command injection in backup.restoreBackupWithLogs (databaseName) leading to host RCE9.9 Critical
- dokployDokploy: Member-role RCE as host root via destination.testConnection rclone shell injection9.9 Critical
- dokployDokploy: Incomplete fix of CVE-2026-45628: Command Injection via Unvalidated Branch Fields in Compose Deployment Pipeline (server-side regex missing in compose.ts)9.9 Critical
- dokployDokploy: OS Command Injection via compose `composePath`9.9 Critical
- dokployDokploy Broken Access Control on docker-container-terminal WebSocket (Member -> Root in Arbitrary Containers)9.9 Critical
- dokployDokploy: Missing authorization in WebSocket handlers allows a low-privilege member to gain root on the Docker host9.9 Critical
- jaspersoft jasperreports serverJasperReports Server: XXE Injection Vulnerability (Unauthenticated)9.3 Critical
- dokployDokploy: OS Command Injection via dockerImage field in database service deployment functions → HOST RCE9.9 Critical
- metabaseMetabase SQL injection via public card or dashboard10.0 Critical
- metabaseMetabase SQL injection via password reset endpoint10.0 Critical
- dokployDokploy: OS Command Injection via SSH-form `customGitUrl` domain in `ssh-keyscan`9.9 Critical
- dai-shi use-reducer-asyncuse-reducer-async was vulnerable to malicious code execution via compromised commits9.3 Critical
- dokployDokploy: Authenticated RCE via Command Injection in backup.listBackupFiles search Parameter9.9 Critical
- dokployDokploy: Cross-organization IDOR in Dokploy backup destinations exposes another tenant's S3 credentials and backups9.6 Critical
- dokployDokploy: OS Command Injection in registry credential testing and Swarm cluster management → HOST RCE9.9 Critical
- dokployDokploy: Command injection in writeTraefikConfigRemote via shell interpolation of unescaped YAML in SSH remote execution9.9 Critical
- dokployDokploy: OS Command Injection via `databaseName` / `backupFile` in database restore9.9 Critical
- dai-shi use-context-selectoruse-context-selector was vulnerable to malicious code execution via compromised commits9.3 Critical
- nceas metacatunauthenticated path traversal in Metacat 2.x9.3 Critical
- opencartThe OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability9.1 Critical
- razinsoft ready ecommerceReadyEcommerce < 4.5.2 Unauthenticated SQL Injection via ProductController.php9.3 Critical
- zyxel networks wah7601Multiple Vulnerabilities in Zyxel's WAH7601 - OS Command Injection9.8 Critical
- linuxxfrm: fix stale skb->prev after async crypto steals a GSO segment9.8 Critical
- linuxsmb/client: handle overlapping allocated ranges in fallocate9.8 Critical
- linuxs390/checksum: Fix csum_partial() without vector facility9.8 Critical
- linuxksmbd: pin conn during async oplock break notification9.8 Critical
- linuxwatchdog: pretimeout: Fix UAF in watchdog_unregister_governor()9.8 Critical
- linuxsmb: client: validate DFS referral PathConsumed9.1 Critical
- Show moreLoading…