Latest critical vulnerabilities
CVSS 9.0 and up.
- No product listedSuperAGI up to v0.0.14 contains an improper access control vulnerability in the agent execution...9.8 Critical
- No product listedsinaptik-ai pandas-ai 3.0.0 is vulnerable to Code Injection in CodeExecutor.execute.9.8 Critical
- red hat directory server 11, directory server 12, directory server 13 +5 more +7 more389-ds-base: 389-ds-base: starttls plaintext-buffer retention allows on-path attacker to forge an ldap client's authentication result9.0 Critical
- kvcache-ai mooncakeMooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport9.3 Critical
- thales sconnectSConnect: Native Host Unauthenticated Remote Code Execution Vulnerability9.4 Critical
- johnson controls easyio fs32: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows :...9.3 Critical
- teledyne flir aware2Hardcoded Passwords in Teledyne FLIR Robots running Aware29.4 Critical
- teledyne flir aware2Local File Inclusion in Teledyne FLIR Robots running Aware210.0 Critical
- teledyne flir aware2Cleartext HTTP for Control Traffic in Teledyne FLIR Robots running Aware29.4 Critical
- eummena cadmos ltiCadmos LTI exposure of sensitive information via debug mode9.2 Critical
- joyland joyland.aiJoyland AI WebView command injection9.0 Critical
- getsimplecms-ceGetSimple CMS: Missing CSRF protection in UpdateCE allows forging a privileged server-side update request9.6 Critical
- getsimplecms-ceGetSimple CMS: CSRF, SSRF, and Unrestricted Zip Extraction9.1 Critical
- getsimplecms-ceGetSimple CMS: Predictable Password Reset Password Allows Administrator Account Takeover9.1 Critical
- fortinet fortimailAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...9.8 Critical
- authlibCVE-2026-1040569.8 Critical
- dhis2 dhis2-coreDHIS2: Unsafe Java Deserialization - Remote Code Execution (RCE)9.1 Critical
- @capacitor android, ios, ionic-team capacitor +2 more +4 moreCapacitor Android and iOS: remote content can be loaded at the app origin via the internal HTTP proxy path9.3 Critical
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +4 more +6 moreForeman: excessive permissions for viewer role on preview9.1 Critical
- apache http serverApache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-function9.8 Critical
- elastic endpoint securityWatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access9.3 Critical
- apache http serverApache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy9.8 Critical
- apache http serverApache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}9.8 Critical
- foundation50 classroom50Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)9.4 Critical
- fortra fortra's core privileged access manager (boks)Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability9.8 Critical
- fortra boks managerFortra BoKS Manager crlserver command injection vulnerability9.1 Critical
- nickboss wordpress file uploadWordPress WordPress File Upload plugin <= 5.1.10 - SQL Injection vulnerability9.3 Critical
- paul ryan authorizerWordPress Authorizer plugin <= 3.15.3 - Privilege Escalation vulnerability9.8 Critical
- fortra boks manager boks-serverPredictable Active Directory service-account passwords in BoKS Manager9.9 Critical
- fleetdm fleetFleet before 4.87.0 Authentication Bypass via Device Identifiers9.3 Critical
- sgoudelis ground-stationground-station before 0.8.0 Authentication Bypass via setup.restore9.3 Critical
- mispMISP TOTP Code Replay Allows Duplicate Authentication Within Validity Period9.3 Critical
- superdav42 ultimate multisite – wordpress multisite saas & waas platformUltimate Multisite <= 2.15.0 - Unauthenticated Authentication Bypass via 'checkout_form' Parameter9.8 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Unauthenticated Privilege Escalation via 'role' Parameter9.8 Critical
- wago 0750-811x-xxxx-xxxx, 0750-821x-xxx-xxx, 0751-9x01 +8 more +10 morePath traversal in dynamically created BACnet File Objects9.3 Critical
- unknown backupsheep wordpress backup pluginBackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key10.0 Critical
- hitachi industrial equipment systems coding software suitePath traversal may allow arbitrary files to be viewed, created, modified, or deleted9.3 Critical
- hitachi industrial equipment systems coding software suiteMissing proper authentication for critical APIs may allow sensitive information to be obtained or modified, or unauthorized operations to be performed9.3 Critical
- hitachi industrial equipment systems coding software suiteA hard-coded JWT signing secret key may allow administrative functions to be abused using fraudulently generated Bearer tokens9.3 Critical
- hitachi industrial equipment systems coding software suiteHidden accounts or hard-coded credentials may permit unauthorized access without the legitimate authentication process9.3 Critical
- genians, inc genian nac 5.0.75 lts release, genian nac 5.0.85 release stable, genian nac 5.0.86 release +3 more +5 moreGenians, Inc. Genian NAC/ZTNA Improper Access Control on the Internal Interface9.3 Critical
- latepoint appointment booking plugin – latepoint | calendar & scheduling for wordpressAppointment Booking Plugin <= 5.7.0 - Unauthenticated Arbitrary Shortcode Execution via First/Last Name Field9.1 Critical
- asus routerUse of an Externally Controlled Format String in the ASUS Router modules allow a remote...9.4 Critical
- google androidIn BluetoothCccHandlerCallbackImpl of bluetooth_ccc.cc, there is a possible use-after-free due to...9.8 Critical
- No product listedRAGFlow 0.24.0 contains improper access control in get_dataset (api/apps/evaluation_app)....9.8 Critical
- No product listedinfiniflow ragflow 0.24.0 is vulnerable to Incorrect Access Control via trace_mindmap. An...9.8 Critical
langflowPyPIDuplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description9.8 Critical- No product listedThe /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3...9.8 Critical
- No product listedThe knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is...9.1 Critical
- No product listedThe OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable...9.1 Critical
- Show moreLoading…