Latest critical vulnerabilities
CVSS 9.0 and up.
- team-alembic ash authentication`require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication9.1 Critical
- ash-project ash authentication phoenix, team-alembic ash authentication +1 moreRevoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication Phoenix9.1 Critical
- team-alembic ash authenticationMagic link single-use tokens replayable via TOCTOU race in AshAuthentication9.1 Critical
- laravel pulsercourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation9.4 Critical
- fatpipe ipvpn, mpvpn, warp +2 moreFatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100...9.8 Critical
- fatpipe ipvpn, mpvpn, warp +2 moreFatPipe MPVPN, WARP, and IPVPN appliances running the end-of-life firmware version 10.1.2r60p100...9.8 Critical
- wwbn avideoAVideo Weak PRNG Activation Code Authentication Bypass9.1 Critical
- mitsubishi electric motion control setting, mitsubishi electric corporation gx works3 +1 morePassword Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting9.2 Critical
- maennchen1.de wpshopgermany it-recht kanzleiwpShopGermany IT-RECHT KANZLEI < 2.4 - Unauthenticated RCE via Predictable API Token9.0 Critical
- unknown login with qrLogin with QR <= 1.0.0 - Unauthenticated Authentication Bypass via 'autologin_code' Parameter9.8 Critical
- unknown the pressengineThe Pressengine <= 1.0 - Unauthenticated Authentication Bypass9.8 Critical
- unknown private feed keyPrivate Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter9.8 Critical
- sh1zen multi uploader for gravity formsMulti Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload9.8 Critical
- No product listedIn MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.9.8 Critical
- djust-org djustdjust has an authorization bypass on the WebSocket/SSE mount path9.1 Critical
- wwbn avideoWWBN AVideo through 29.0 Authentication Bypass via Stored Password Hash9.2 Critical
- hkuds nanobotHKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool9.2 Critical
- jasperfx martenMarten: SQL injection in Marten's LINQ provider via unescaped string literals9.1 Critical
- decaporg decap-cmsDecap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching9.3 Critical
- uvdesk community-skeletonUVdesk Community Skeleton through 1.1.8 Missing Authentication on the Installation Wizard9.3 Critical
- feast-dev feastFeast through 0.66.0 Authentication Bypass via Unverified Token9.3 Critical
- angel-ml angelAngel through 3.3.0 Unauthenticated Kryo Deserialization of Arbitrary Classes9.2 Critical
- chaitin safelineSafeLine through 9.4.1 Authentication Bypass via Weak Session Secret9.2 Critical
- cisco identity services engine softwareCisco Identity Search Engine SXP REST API SQL Injection Vulnerability9.1 Critical
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 moreCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Access Control Vulnerabilities9.9 Critical
- cisco identity services engine, identity services engine software, ise passive identity connector +1 more +3 moreCisco Identity Services Engine Authentication Bypass Vulnerability10.0 Critical
- cisco identity services engine softwareCisco Identity Services Engine Remote Code Execution Vulnerability9.1 Critical
- cisco secure firewall management center (fmc)Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability9.1 Critical
- cisco secure firewall management center (fmc)Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability9.8 Critical
- cisco ise passive identity connector, identity services engine software +1 moreCisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities9.1 Critical
- cisco identity services engine software, ise passive identity connector +1 moreCisco ISE API Authentication Bypass Vulnerability10.0 Critical
- cisco ise passive identity connector, identity services engine, identity services engine software +1 more +3 moreCisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities10.0 Critical
- cisco ise passive identity connector, identity services engine, identity services engine software +1 more +3 moreCisco Identity Services Engine Hardening Release - Access Control Vulnerabilities10.0 Critical
- cisco secure firewall management center (fmc)Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability9.9 Critical
- cisco nexus dashboardCisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command9.9 Critical
- altium enterprise serverServer-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise10.0 Critical
- cisco ise passive identity connector, identity services engine software +1 moreCisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities9.1 Critical
- cisco identity services engine softwareCisco Identity Services Engine Remote Code Execution Vulnerability9.1 Critical
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 moreCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities9.9 Critical
- cisco nexus dashboardCisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control9.9 Critical
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 moreCisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabil…9.9 Critical
- cisco nexus dashboardCisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function9.8 Critical
- hp inc ac print & scan, output central +1 moreHP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write9.3 Critical
- hp inc ac print & scan, output central +1 moreHP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write9.3 Critical
- hp linux imaging and printing, hp inc. linux imaging and printing software (hplip) +1 moreHP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities9.3 Critical
- arista networks eosUnder certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administrative control over the compromised swit…9.2 Critical
- hp linux imaging and printing, hp inc. linux imaging and printing software (hplip) +1 moreHP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities9.3 Critical
- apache software foundation myfacesApache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability9.8 Critical
- kubero-dev kuberoKubero through 3.1.1 Unauthenticated Notifications API Access9.3 Critical
- cobbr covenantCovenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub9.3 Critical
- Show moreLoading…