Latest critical vulnerabilities
CVSS 9.0 and up.
- linux, linux kernel +1 moreRDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters9.8 Critical
- kitty project kittyReflected unknown field names in the kitty colour control escape code allow command execution in the user's shell9.3 Critical
- linuxtracing: Set the trace clock before registering the histogram trigger9.8 Critical
- linuxgenetlink: pin family module during policy dump9.8 Critical
- apache qpid broker-jApache Qpid Broker-J: Missing HTTP-session renewal after successful authentication9.8 Critical
- 101gen automation web platform – notifications and otp for woocommerce, advanced country codeAutomation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter9.8 Critical
- ladela online scheduling and appointment booking system – booklyOnline Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter9.1 Critical
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter9.1 Critical
lemonldap-ngDebianLemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointAuthenticationCredentials does not verify…9.1 Criticallemonldap-ngDebianLemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPointAuthenticationCredentials does not ve…9.1 Critical- No product listedIO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL9.8 Critical
- botslab g980hBotslab G980H Dashcams Insufficient Verification of Data Authenticity9.2 Critical
- eufy omni c20Improper certificate validation in Eufy Omni C209.3 Critical
- eufy omni c20, omni x10 pro +1 moreOS command injection in Eufy Omni C20, Omni X10 Pro9.0 Critical
- servicenow ai platformUnauthenticated Sensitive Data Disclosure in ServiceNow AI Platform9.3 Critical
- servicenow ai platformUnauthenticated SQL Injection in ServiceNow AI Platform9.3 Critical
- honeywell pd45 industrial printerUnauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.0100409.8 Critical
- http4s http4s-scala-xmlhttp4s-scala-xml has an XML External Entity (XXE) processing issue9.3 Critical
- ixofoundation ixo-blockchainixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass9.3 Critical
- bittersecurity decepticon, decepticon-core, decepticon-sdk +2 moreDecepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context10.0 Critical
- bytebase dbhubDBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution9.3 Critical
- linuxRDMA/rtrs-srv: Fix integer underflow in process_read and process_write9.8 Critical
- termix-ssh termixTermix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email9.1 Critical
- dokployDokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root9.9 Critical
- linuxsvcrdma: Reject Write/Reply chunks with segcount 09.1 Critical
- linuxSUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry9.8 Critical
- openstack zaqarIn OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header. By sending...9.2 Critical
- ibm datastage on cloud pak for dataDataStage on Cloud Pak for Data has several vulnerabilities9.6 Critical
- portswigger burp suite dastIn PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an...9.2 Critical
- rejetto hfs2HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine10.0 Critical
- rejetto hfs2HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection10.0 Critical
- rapid7 velociraptorVelociraptor Investigator reaches SuperUser via hunt EffectivePrincipal9.9 Critical
automation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Criticalautomation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Criticalautomation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Critical- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter9.8 Critical
- delta electronics diaenergiePath Traversal in DIAEnergie9.1 Critical
- delta electronics diaenergieAuthentication Bypass in DIAEnergie9.8 Critical
- d-link dir-825D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write9.3 Critical
- signozSigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret9.2 Critical
- david de boer paytium: mollie payment forms & donationsPaytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter9.8 Critical
- dashbit nimble ztaImproper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy9.3 Critical
quickjsDebian,quickjs-ngDebian +1 moreQuickJS commit 04be24600 contains a heap out-of-bounds write condition in JS_ReadFunctionTag().9.8 Critical- No product listedminimp3 commit ea99364f contains an integer overflow vulnerability in mp3dec_skip_id3v1() when...9.8 Critical
mpackUbuntuAn integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms...9.8 Critical- No product listedAn issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary...9.8 Critical
- No product listedmcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF)...9.1 Critical
- gitlabDouble Free in GitLab9.9 Critical
- gitlabInteger Overflow or Wraparound in GitLab9.9 Critical
- plank laravel-mediableLaravel-Mediable 7.0.0 < 7.0.2 RCE via .pht File Upload9.3 Critical
- Show moreLoading…