Latest critical vulnerabilities
CVSS 9.0 and up.
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...9.4 Critical
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +12 more +14 moreIpa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci9.8 Critical
- linksys re7000Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection9.4 Critical
- d-link dir-605D-Link DIR-605 L2TP Control Message tunnel.c tunnel_set_params off-by-one9.2 Critical
- d-link dir-822aD-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow10.0 Critical
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Node-RED nodered_lib_apply command injection9.4 Critical
- advantech wise-6610-cb, wise-6610-eb, wise-6610-el-cb +10 more +12 moreAdvantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection9.4 Critical
- nec corporation univerge ix-r/ix-vAn authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. A user...9.3 Critical
- No product listedMojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchor9.8 Critical
libauthen-sasl-perlDebian,perl-authen-saslAlpaquita,rootio-libauthen-sasl-perlRoot +2 moreAuthen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_step9.8 Critical- thu-maic openmaicOpenMAIC before 1.0.1 SSRF via Environment-Gated URL Validation9.0 Critical
- tenda hg10Tenda HG10 Boa formgponConf os command injection9.4 Critical
- tenda hg10Tenda HG10 formURL buffer overflow9.3 Critical
- shabti frontend admin by dynamiappsFrontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier9.8 Critical
- learndash memberdashMemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' Parameter9.8 Critical
- n-able n-centralpre-authentication remote code execution10.0 Critical
- tenda cp3Tenda CP3 Redirect.cpp SetRedirectEnable privileges management9.4 Critical
- tenda cp3Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection10.0 Critical
- tenda cp3Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection9.4 Critical
- tenda cp3Tenda CP3 NetCheckPing.cpp os command injection9.4 Critical
- tenda cp3Tenda CP3 Kylin system.c SystemAsh os command injection9.4 Critical
- mikrotik routerosSSH session privilege manipulation via a crafted username in Mikrotik RouterOS9.2 Critical
- mikrotik routerosSSH user impersonation possible in Mikrotik RouterOS9.2 Critical
- wwbn avideoWWBN AVideo Broken Access Control via videoViewsInfo hash Parameter9.3 Critical
- wwbn avideoWWBN AVideo Unauthenticated Path Traversal via notify.ffmpeg.json.php9.3 Critical
- laradashboardLara Dashboard before 1.3.0 Missing Authentication in screenshot-login Route9.3 Critical
- getwpfunnels mail mint – email marketing, newsletter, email automation & woocommerce emailsMail Mint <= 1.31.0 - Unauthenticated PHP Object Injection in Arbitrary Form Fields9.8 Critical
- hkuds autoagentAutoAgent Unauthenticated Remote Code Execution via the Sandbox TCP Command Server9.3 Critical
- sqlchatSQL Chat Unauthenticated Database-Connection Proxy in the /api/connection Endpoints9.4 Critical
- trycua cua-computer-serverCua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control9.3 Critical
- webstudio-is webstudioWebstudio through 0.296.0 SSRF via /cgi proxy routes9.2 Critical
- coollabsio coolifyCoolify through 4.3.17 OAuth Account Takeover via Unverified Email Matching9.2 Critical
- pickplugins post gridPost Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection9.8 Critical
local-operatorPyPIPath traversal and arbitrary directory deletion/overwrite via agent profile import in local-operator9.1 Critical- lupsonline seo flow by lupsonlineSEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication9.8 Critical
- wpmudev hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdnHummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log9.8 Critical
- inspireui mstore api – create native android & ios apps on the cloudMStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery9.8 Critical
- ixon vpn clientIXON VPN Client CRLF Injection9.4 Critical
- sonicwall network security manager (nsm)A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and...9.1 Critical
- sonicwall network security manager (nsm)A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem...9.1 Critical
- sonicwall network security manager (nsm)An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...9.1 Critical
- nangohq nangoNango < 0.71.6 Missing Authentication RCE via runner tRPC server9.2 Critical
- ibm operational decision managerIBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed9.8 Critical
- linuxusb: gadget: f_tcm: keep port count until LUN teardown completes9.8 Critical
- linuxipv6: seg6: clear IPv4 control block on IPIP decapsulation9.2 Critical
- ibm observability with instana (agent)IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image9.6 Critical
- voltronic power snmp web proVoltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi9.3 Critical
- linuxfbdev: Wrap user-invoked calls to fb_set_var() in helper9.8 Critical
- opentalker sadtalkerSadTalker OS Command Injection via Audio Filename9.3 Critical
- lm-sys fastchatFastChat Unauthenticated Worker Registration SSRF and Model Spoofing9.3 Critical
- Show moreLoading…