Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedAn OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of...9.8 Critical
alloyopenSUSE,amazon-cloudwatch-agentopenSUSE,azl-otel-collectorAzure Linux +30 more +32 moregrpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X...9.8 Critical- adobe dimensionWatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs9.3 Critical
- wazuhWazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)9.1 Critical
- watchguard fireware osFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint9.3 Critical
- xiiaozet lk100wXiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel9.3 Critical
- xiiaozet lk100wXiiaozet LK100W Missing Authentication for Critical Function9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Cleartext Transmission of Sensitive Information9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Use of GET Request Method With Sensitive Query Strings9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Use of Client-Side Authentication9.3 Critical
- ebyte na111-m firmwareEbyte NA111-M Missing Authentication for Critical Function9.3 Critical
- cephCeph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users9.1 Critical
- zoneminderZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)9.0 Critical
- labring fastgptFastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization9.3 Critical
- applied systems engineering ase2000 v2Improper Certificate Validation in ASE 20009.1 Critical
- triliumnext triliumTrilium: Note Import to RCE via Book Note9.3 Critical
- triliumnext triliumTrilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml9.3 Critical
- servicenow ai platformUnauthenticated SQL Injection via Dynamic Schema ORDER BY Clause10.0 Critical
- servicenow ai platformUnauthenticated Privilege Escalation via System Configuration Image Upload Processor10.0 Critical
- servicenow ai platformUnauthenticated Remote Code Execution in GraphQL Composite Data API10.0 Critical
- servicenow ai platformSandbox Escape in ServiceNow AI Platform10.0 Critical
- spring framework, vmware spring framework +1 moreServer Sent Event stream corruption in Spring MVC functional web framework9.8 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Safety Guard Bypass via SpEL Expression Compilation9.1 Critical
- triliumnext triliumTrilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client9.3 Critical
- themeum tutor lmsTutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing9.8 Critical
- bytedance ui-tars-desktopUI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution10.0 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Remote Code Execution via Plugin9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Integrity Bypass via Added Files9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Load9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 GPG Signature Verification Bypass9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Shell Injection via info command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Terminal Injection via info Command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Terminal Injection via key_id9.3 Critical
- jahlives openssl encryptopenssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Text Injection via Recovery Slot Metadata9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 False Encryption via Cleartext Storage9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Authentication Bypass via Recovery Slot Removal9.3 Critical
- team-telnyx telnyx-mcpTelnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport9.3 Critical
- mims-harvard tooluniverseToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape9.3 Critical
- mcp-routermcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication9.3 Critical
- dassault systèmes 3dswymerImproper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x9.3 Critical
- limanmys coreLiman: OS Command Injection in LogRotationController allows authenticated admin to execute arbitrary commands (RCE)9.1 Critical
- flowintelFlowintel Fails to Invalidate Active Sessions After Password Change9.1 Critical
- Show moreLoading…