Latest critical vulnerabilities
CVSS 9.0 and up.
- cert/cc vinceCVE-2026-187499.8 Critical
- mongodb bi connector odbc driverMongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names9.5 Critical
- canonical lxdPath traversal via unvalidated instance name in backup tarball restore enables root file write / RCE9.9 Critical
- canonical lxdArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9 Critical
- canonical lxdRoot RCE via image backup.yaml symlink9.9 Critical
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)9.9 Critical
- ibm iIBM i is Affected By Multiple Vulnerabilities in the Debug Server9.8 Critical
- canonical lxdProject restriction bypass via instance migration config override9.9 Critical
- canonical lxdCross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9 Critical
- canonical lxdCross-project cluster migration bypasses project restrictions via cluster notification flag9.9 Critical
- scada-lts scadalts, scada-lts +1 moreScadaLTS Authenticated Remote Code Execution9.9 Critical
- owen2345 camaleoncmsCamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field9.2 Critical
- canonical lxdCross-project instance move bypasses all project restrictions allowing host command execution9.9 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Authentication Bypass via Graph Endpoints9.2 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Information Disclosure via renderAttributeView9.2 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Information Disclosure via Embed Block9.2 Critical
- siyuan-note siyuansiyuan before v3.7.4 Session Cookie Key Disclosure via getConf9.2 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Information Disclosure via /api/system/getConf9.2 Critical
- siyuan-note siyuanSiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks9.2 Critical
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injection9.9 Critical
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local sa9.9 Critical
- owen2345 camaleoncmsCamaleonCMS Stored XSS via Draft Post Title Creation Endpoint9.2 Critical
- centarro commerce paypalCommerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-0959.1 Critical
- ibm iIBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []9.8 Critical
- ibm db2 mirror for iIBM Db2 Mirror for i is vulnerable to OS command injection []9.8 Critical
- ibm iIBM i is Affected By Remote Code Execution Vulnerability []9.9 Critical
- ibm iIBM i is Affected By Multiple Vulnerabilities in Navigator for i9.6 Critical
- apache alluraApache Allura: Git command injection9.8 Critical
- microsoft ufoMicrosoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure9.4 Critical
- semaphoreui semaphoreSemaphore U: OS Command Injection9.9 Critical
- pleskIncorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a...9.3 Critical
- progress whatsup goldWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.9.8 Critical
- prowler-cloud prowlerProwler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path9.9 Critical
- xerrors yuxiYuxi has a JWT Authentication Bypass Leading to Cross-Instance Administrator Token Reuse9.4 Critical
- joomshaper.com sp page builder extension for joomlaJoomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.09.2 Critical
- cal.com self-hosted (cal.diy)Cal.com Cal.diy 6.2.0 Stored XSS via BookingPageTagManager Analytics Tracking ID9.3 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.810.0 Critical
- phoenix contact axc f 1152, axc f 1252, axc f 2152 +12 more +14 moreUnauthenticated Buffer Overflow in PROFINET Service9.3 Critical
- essekia tablesome tableWordPress Tablesome Table plugin <= 1.2.9 - SQL Injection vulnerability9.3 Critical
- unknown woocommerce subscriptionsWooCommerce Subscriptions < 9.1.0 - Unauthenticated RCE via PHP Object Injection9.8 Critical
- pixelite events managerEvents Manager < 7.4.1 - Unauthenticated Privilege Escalation to Administrator9.8 Critical
- subratamal wallet for woocommerceTeraWallet - Wallet for WooCommerce < 1.6.10 - Subscriber+ Wallet Balance Inflation via Discounted Top-Up9.1 Critical
- unknown wpmudev-updatesWPMU DEV Dashboard < 5.0.1 - Remote Code Execution via Hub Install Action9.8 Critical
- unknown giftwareGift Cards For WooCommerce Pro < 4.2.10 - Unauthenticated Arbitrary File Upload9.8 Critical
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-integrations: multicloud-integrations: gitopscluster.spec.argoserver.argonamespace writes spoke bearer tokens to attacker-chosen namespace9.6 Critical
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreMulticloud-integrations: multicloud-integrations: pull-model propagation allows hub tenant to target arbitrary spoke cluster via unvalidated ocm-managed-cluster annotation9.9 Critical
- linuxksmbd: validate minimum PDU size for transform requests9.1 Critical
- No product listedCPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections...9.8 Critical
- No product listedCPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption...9.1 Critical
- No product listedCPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that...9.8 Critical
- Show moreLoading…