Latest critical vulnerabilities
CVSS 9.0 and up.
- zitadelZITADEL before 4.17.3 Account Takeover via External IdP Linking9.3 Critical
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.20 - SQL Injection vulnerability9.3 Critical
- internlm mindsearchInternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection10.0 Critical
- ahsay ahsaycbs, cloud backup suite +1 moreAhsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection10.0 Critical
- nasa-ammos ait-coreUnauthenticated ZeroMQ command/telemetry bus in AIT-Core allows remote spacecraft command injection and telemetry exfiltration9.8 Critical
- legion of the bouncy castle inc. bc-javaMLS X.509 credential not bound to the LeafNode signature key9.2 Critical
- beaverbuilder beaver builder page builder – drag and drop website builderBeaver Builder Page Builder <= 2.11.0.5 - Unauthenticated Arbitrary Shortcode Execution via Sidebar Module Widget Output9.1 Critical
- e4j s.r.l. vikappointments services booking calendarVikAppointments Services Booking Calendar <= 1.2.21 - Unauthenticated Arbitrary File Deletion via 'old_vapcfN' Parameter9.1 Critical
- c4illin convertxIn ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes...9.4 Critical
- hkuds vibe-tradingHKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE9.3 Critical
- triggerdotdev trigger.devTrigger.dev before 4.5.6 Authentication Bypass via Hardcoded Default Secrets9.2 Critical
- mikrotik routerosMikroTik RouterOS Integer Underflow9.3 Critical
- monta monta.appMonta monta.app Missing Authentication for Critical Function9.3 Critical
- digi international anywhereusb plus family, connect ez family, connect it family +9 more +11 moreOS Command Injection in Digi Accelerated Linux (DAL OS)9.4 Critical
- utmstackUTMStack < 11.2.16 Authentication Bypass via InternalApiKeyFilter9.3 Critical
- aws sagemaker-distributionOS command injection in the Studio Space startup validation script in Amazon SageMaker Distribution when running on Amazon SageMaker Unified Studio9.3 Critical
- aws loomMissing authentication for critical function in Loom for AWS10.0 Critical
- h3c cvmH3C CVM Unauthenticated File Upload via fileUpload/upload Token9.3 Critical
- tinylibs tinypoolTinypool: Prototype Pollution Gadget to RCE in run() options9.5 Critical
- tinylibs tinypoolTinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution9.5 Critical
- google chromeUse after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...9.6 Critical
- google chromeIncorrect authorization in FileSystem in Google Chrome on on Windows prior to 154.0.8037.97...9.6 Critical
- google chromeOut of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to...9.6 Critical
- demsking image-downloaderImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in image-downloader9.1 Critical
- lxsmnsyc serovalSeroval: `fromJSON()` Promise thenable assimilation invokes plugin-produced callables (bypass of CVE-2026-59940)9.8 Critical
- gitlab ai gatewayImproper Neutralization of Special Elements Used in a Template Engine in GitLab AI Gateway9.9 Critical
- diviengine divi membershipDivi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter9.8 Critical
- apache software foundation thriftApache Thrift: C++ THttpTransport grows its line buffer without bound9.2 Critical
- tenda ac9Tenda AC9 POST Request fast_setting_internet_set stack-based overflow9.4 Critical
- tenda hg10, hg7, hg9 +2 moreTenda HG7/HG9/HG10 Boa Web Server formLoopBack boaGetVar stack-based overflow10.0 Critical
- bytecodealliance wasmtimeWasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow9.4 Critical
- yeswikiYesWiki before 4.6.7 Authorization Bypass via Public API Mode9.2 Critical
- apache software foundation thriftApache Thrift: C++ `THeaderTransport::transform()` heap buffer overflow (write direction)9.2 Critical
- moxa mgate mb3170 series, mgate mb3270 series +1 moreA stack-based buffer overflow vulnerability exists in protocol gateways' account management...9.4 Critical
- apache software foundation directory ldap apiApache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements9.8 Critical
- amauric wpmobile.app – android and ios app builderWPMobile.App <= 11.82 - Unauthenticated Admin Account Takeover via 'wpapp_category[]' Parameter9.8 Critical
- parorrey json api authJSON API Auth <= 3.1.2 - Unauthenticated Authentication Bypass via Cached 'generate_auth_cookie' Response9.8 Critical
- bouncycastle bc-csharpMTI/A0 DHAgreement does not validate the peer's ephemeral value9.1 Critical
- webpros cpanel, wp squared +1 moreThere is a stored XSS vulnerability allowing arbitrary code execution in the WHM Manage SSL Hosts...9.0 Critical
- webpros cpanel, wp squared +1 moreThere is a stored XSS vulnerability allowing arbitrary code execution in the WHM Mass Modify...9.0 Critical
- webpros cpanel, wp squared +1 moreInsufficient validation allows arbitrary commands to be executed via the Multilang adminbin.9.9 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter9.1 Critical
- diviengine divi membershipDivi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter9.8 Critical
- dplugins devkit proDevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow9.8 Critical
- discord libdaveImproper MLS Welcome roster validation in Discord libdave allows unauthorized group membership9.4 Critical
- No product listedagentscope v1.0.20 contains code injection in execute_shell_command (src/agentscope/tool/_coding...9.8 Critical
- No product listedFinRobot 1.0.0 contains code injection in CodingUtils.create_file_with_code ().9.8 Critical
- No product listedTransformerOptimus SuperAGI v0.0.14 is vulnerable to Incorrect Access Control in the tool...9.8 Critical
- No product listedvanna v2.0.2 contains a code injection vulnerability in VannaBase.get_plotly_figure (src/vanna...9.8 Critical
- No product listedIn TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path...9.1 Critical
- Show moreLoading…