Latest critical vulnerabilities
CVSS 9.0 and up.
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.8 Critical
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: Trust-store whitelist by Issuer+Serial only9.1 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.8 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.8 Critical
- webpros wp toolkit for cpanelArgument injection in WP Toolkit for cPanel 6.11.2-10794 and earlier allows remote authenticated...9.4 Critical
- webpros cpanelExecution with unnecessary privileges in cPanel allows remote authenticated users to execute...9.4 Critical
- webpros plesk extension "site import"OS command injection in Plesk allows remote authenticated users to execute arbitrary code with...9.4 Critical
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAutomation-controller: automation-controller: workflowjobtemplate /copy/ deep-copy sanitizer omits instance_groups authorization (instancegroup use_role bypass to control-plane)9.9 Critical
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAwx: awx: privilege escalation to openshift namespace via pod_spec_override injection in container groups9.1 Critical
- temporal technologies, inc. s2s-proxys2s-proxy accepts untrusted client certificates9.3 Critical
- openc3 cosmosOpenC3 COSMOS: Authenticated remote code execution via the user-writable config overlay (table definitions, cmd/tlm definitions, and script suites)9.9 Critical
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAutomation-controller: automation-controller-container: automation-controller: project scm_url argument injection into `git ls-remote --upload-pack` yields rce on the controller-task control-plane pod9.9 Critical
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAutomation-controller: automation-controller-container: automation-controller: view_jobtemplate to execute privilege escalation via host_config_key exposure and x-forwarded-for spoofing of provisionin…9.9 Critical
- wbw plugins product filter by wbwWordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability9.3 Critical
- claris filemaker serverAn authorization bypass vulnerability in the FileMaker Server Web Publishing Engine allowed...9.1 Critical
- claris filemaker serverAn out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a...9.1 Critical
- drupal webformWebform - Critical - Remote Code Execution - SA-CONTRIB-2026-1759.1 Critical
- orval-labs orvalorval before 8.29.0 Code Injection via operationId9.3 Critical
- orval-labs orvalorval @orval/core before 8.28.0 Code Injection via Form-Data9.3 Critical
- orval-labs orvalorval before 8.29.0 Code Injection via unescaped OpenAPI media-type9.3 Critical
- orval-labs orvalorval before 8.30.0 Code Injection via Factory Generation9.2 Critical
- orval-labs orvalorval @orval/effect 8.14.0 through 8.28.1 Code Injection9.3 Critical
- orval-labs orvalorval @orval/hono before 8.29.0 Code Injection via OpenAPI Path9.3 Critical
- moquetteMoquette fails open when configured authentication or authorization classes cannot load9.3 Critical
- moquetteMoquette pattern ACL wildcard injection allows cross-tenant authorization bypass9.6 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.3 Critical
- jihong88 suneditorSunEditor: Critical XSS vulnerability - sanitizer bypass10.0 Critical
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel9.3 Critical
- zohocorp manageengine applications managerSensitive data exposure10.0 Critical
- zohocorp manageengine opmanagerRemote Code Execution vulnerability9.9 Critical
- apache tomcat nativeApache Tomcat Native: Insecure OpenSSL options enabled9.1 Critical
- apache software foundation buildstreamApache BuildStream: tar source extraction escape9.8 Critical
- unknown wp oauth server ( login with wordpress )WP OAuth Server < 6.4.0 - Subscriber+ Cross-User Account Takeover via OIDC ID Token Substitution9.0 Critical
- unknown yahman add-onsYAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache9.0 Critical
- fast fac1203r gigabit editionFast FAC1203R Gigabit Edition Device Discovery Service copy_msg_element stack-based overflow10.0 Critical
- No product listedSQL injection vulnerability in Moodle Socialwall plugin v.3.0 through v.3.3 allows an attacker to...9.8 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.9 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.8 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.8 Critical
- google mcp-toolbox-sdk-pythonToken Cache Reuse in mcp-toolbox-sdk-python9.1 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.1 Critical
- ibm financial transaction manager, financial transaction manager (ftm) for redhat openshift +1 moreIBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities9.1 Critical
- ibm concertMultiple Vulnerabilities in IBM Concert Software9.6 Critical
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities9.9 Critical
- github enterprise serverGitHub Enterprise Server notebook viewer vulnerable to Server-side request forgery9.3 Critical
- openbaoOpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack9.2 Critical
- lwip tcp/ip stack mqttOut-of-bounds write in lwIP TCP/IP Stack MQTT Client Application9.3 Critical
- ltsecurity ltk3500sfLTSecurity LTK3500SF Hard-coded Credentials via Telnet/SSH9.2 Critical
- apache http server project lounge windowsCVE-2026-892829.1 Critical
- arubanetworks analytics and location engine, hewlett packard enterprise (hpe) ale +1 moreUnauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)9.8 Critical
- Show moreLoading…