Latest critical vulnerabilities
CVSS 9.0 and up.
- jma plugins woocommerce designer proWordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability9.9 Critical
- bookingwp woocommerce appointmentsWordPress WooCommerce Appointments plugin <= 5.3.2 - SQL Injection vulnerability9.3 Critical
- schmooze dating mobile applicationInformation Disclosure Vulnerability in Schmooze dating mobile Application9.3 Critical
- tenda ac5Tenda AC5 Wifi setWifi stack-based overflow9.4 Critical
- murrelektronik software aas edge client all versionsMissing authentication for critical function in the aas-edge-client REST API9.3 Critical
- totolink x6000rTOTOLINK X6000R UploadFirmwareFile cstecgi.cgi firmware_check os command injection10.0 Critical
virtualboxUbuntuOracle VM VirtualBox before 7.2.8 allows guest OS users to cause an out-of-bounds write in the...9.1 Critical- No product listedDbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from...9.8 Critical
- viewsonic vcastCVE-2026-829899.8 Critical
- twentyhq twentyTwenty: Plaintext IMAP/SMTP/CalDAV password disclosure to any workspace member via /metadata GraphQL9.6 Critical
- atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 moreh3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira...9.3 Critical
- os4ed opensis-classicopenSIS Classic 9.3 - Insecure Direct Object Reference (IDOR)9.3 Critical
- langflow-ai langflowLangflow: Authenticated RCE via MCP Stdio transport allows any user to execute arbitrary OS commands on the server9.9 Critical
- camunda 7Camunda 7.24.0 < 7.24.15 Incorrect Authorization via SetupResource Endpoint9.2 Critical
- langflow-ai langflow, langflow-base, lfx +2 moreLangflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration9.9 Critical
- penpotPenpot: Authenticated OS Command Injection in Penpot SVG Exporter via Legacy fill-color9.9 Critical
- apache strutsApache Struts: OGNL injection in the legacy RESTful action mapper9.8 Critical
- makeplane planePlane: Hardcoded SECRET_KEY and LIVE_SERVER_SECRET_KEY shipped in aio/cli community deployment manifests — session forgery and live-server auth bypass9.8 Critical
- makeplane planePlane: Account Takeover via Unverified OAuth Email Match (Gitea, self-managed GitLab)9.1 Critical
- makeplane planePlane: Pre-auth workspace invitation hijack via email-squat and self-served invitation token leak in Plane9.8 Critical
- makeplane planePlane: Magic-code verifier endpoint has no rate limit, enabling 6-digit OTP brute force9.1 Critical
- liquid web / stellarwp advanced post managerWordPress Advanced Post Manager plugin <= 4.5.5 - PHP Object Injection vulnerability9.8 Critical
- hakan ozevin wp base booking, wp base booking +1 moreWordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability9.3 Critical
- makeplane planePlane: Cross-Project Asset Hijacking via 'ProjectBulkAssetEndpoint' (sibling of CVE-2026-46558)9.6 Critical
- makeplane planePlane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)9.9 Critical
- ordasoft joomla cck, ordasoft.com ordasoft joomla cck +1 moreJoomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.169.3 Critical
- hewlett packard enterprise (hpe) hpe integrated lights-out (ilo) 7A remote user validation failure vulnerability exists in HPE Integrated Lights-Out (iLO) 7 firmware.9.0 Critical
- totolink a3002muTotolink A3002MU QoS Rule formIpQoS stack-based overflow10.0 Critical
- totolink a3002muTotolink A3002MU Authentication Check boa sub_40FCFC improper authorization10.0 Critical
- perforce p4 (helix core)Authentication bypass via blank auth token in P4Search9.5 Critical
- perforce p4 (helix core)RCE via exposed JDWP debug agent in P4Search9.5 Critical
- perfoce p4 (helix core)Authentication bypass via default auth token in P4Search10.0 Critical
libyaml-perlDebian,perl-YAMLAlmaLinux +1 moreYAML versions before 1.30 for Perl allow a loaded document to trigger the DESTROY method of arbitrary classes9.1 Critical- legcordLegcord 1.1.0 through 1.3.0 Chromium Switch Injection via settings.setConfig9.1 Critical
- legcordLegcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers9.2 Critical
- maclof kubernetes-clientmaclof kubernetes-client 0.17.0 before 0.32.0 Disabled TLS Certificate Verification9.1 Critical
- No product listedFineAdmin v1.0 was discovered to contain a SQL injection vulnerability via the field/order...9.8 Critical
- No product listedGouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the...9.8 Critical
- No product listedWookTeam v1.6.6 and before is vulnerable to RCE in the project task export interface /api/project...9.8 Critical
- No product listedNorthstar (dromara/northstar, quantitative trading platform) <= 9.1.1 enables the H2 Console but...9.8 Critical
- No product listedAn issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary...9.8 Critical
- alexpechkarev google-mapsalexpechkarev/google-maps through 12.16 Disabled TLS Certificate Verification via ssl_verify_peer9.1 Critical
- defunkt gistGist RubyGem before 6.1.0 Disabled TLS Certificate Verification9.1 Critical
- go-pay gopaygopay before 1.5.119 Disabled TLS Certificate Verification in xhttp Client9.1 Critical
- micro go-microgo-micro before 6.0.0 Disabled TLS Certificate Verification via tls.Config Helper9.1 Critical
- wwbn avideoWWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title9.3 Critical
- wwbn avideoWWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates9.3 Critical
- zitadelZITADEL before 4.16.2 Account Pre-Hijacking via Forged External IdP Callback9.3 Critical
- zitadelZITADEL before 4.17.1 Authentication Bypass via Login V2 OTP returnCode9.2 Critical
- zitadelZITADEL before 3.4.15 and 4.17.1 Cross-Organization Account Takeover via Passkey Enrollment9.3 Critical
- Show moreLoading…