Latest critical vulnerabilities
CVSS 9.0 and up.
- go standard library os, internal/syscall/windows +1 moreRoot.Mkdir(All) can follow junctions out of the root on Windows in os9.8 Critical
- microsoft partner centerMicrosoft Partner Center Elevation of Privilege Vulnerability10.0 Critical
- microsoft bookingsMicrosoft Bookings Elevation of Privilege Vulnerability9.9 Critical
- microsoft dataverseMicrosoft Dataverse Remote Code Execution Vulnerability9.8 Critical
- microsoft azure app service for linuxAzure App Service Remote Code Execution Vulnerability9.8 Critical
- microsoft azure sre agentAzure SRE Agent Elevation of Privilege Vulnerability9.6 Critical
- hazelcastHazelcast: Arbitrary member memory access by low-privileged client9.3 Critical
- nearform fast-jwtfast-jwt: Incomplete patch of CVE-2026-34950: Non-whitespace key-prefix re-enables RSA→HS256 algorithm confusion9.8 Critical
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection9.8 Critical
- ibm guardium data protectionMultiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection9.8 Critical
- ibm guardium data protectionIBM Guardium Data Protection is affected by vulnerability9.8 Critical
- netscaler adc, gateway +1 moreMemory overflow vulnerability leading to Remote Code Execution or Denial of Service9.5 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.1 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.1 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.1 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.8 Critical
- ibm security verify access, verify identity access, security verify access container +1 more +3 moreSecurity vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.8 Critical
- hewlett packard enterprise hpe intelligent management center (imc), hpe intelligent management center (imc) +1 moreAn authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to...9.1 Critical
- dromara skyeyeDromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById9.1 Critical
- dromara skyeyeDromara Skyeye Unauthenticated OS Command Injection via textToSpeech format Parameter9.3 Critical
- dromara skyeyeDromara Skyeye xxl-job-admin Missing Authentication on Job Endpoints Allows RCE9.3 Critical
- tenable, inc. tenable identity exposure (saas)Command Injection9.4 Critical
- tvu networks receiver / transceiverTVU Networks Receiver/Transceiver Missing Authentication via REST API9.3 Critical
- tvu networks receiver / transceiverTVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login9.3 Critical
- ibm guardium data protectionIBM Guardium Data Protection Cross-Site Scripting9.3 Critical
- ibm guardium data protectionIBM Guardium Data Protection Missing Authentication9.8 Critical
- jtescher image optimizerimage_optimizer 1.3.0 through 1.9.0 OS Command Injection via identify_format9.3 Critical
- enmaso @enmaso/node-convert@enmaso/node-convert through 1.0.0 OS Command Injection via filepath and convertTo9.3 Critical
- ntharim dot-accessdot-access 0.0.3 through 1.0.0 Code Injection via get() Path Argument9.3 Critical
- tzwm ppt2pngppt2png through 0.0.6 OS Command Injection via input and output paths9.3 Critical
- mjob mjobtimemJobTime 15.7.3.32 Unauthenticated SQL Execution RCE via Login.aspx9.3 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Buffer Overflow9.8 Critical
- integrics enswitchIntegrics Enswitch 3.13 through 4.4 Authentication Bypass via Password Reset API9.3 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Improper Authentication9.8 Critical
- sgl-project sglangCVE-2026-930349.8 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Write9.8 Critical
- ibm datapower gateway 10.6.0IBM DataPower Gateway affected by cross-site scripting9.3 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Write9.8 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Write9.8 Critical
- ibm datapower gateway 10.5.0, datapower gateway, datapower gateway 10.6.0 +2 more +4 moreIBM DataPower Gateway Out-of-bounds Write9.8 Critical
- akin software computer import-export industry and trade co. ltd. myrezztaPassword Reset Code Brute Force Leading to Account Takeover in AKIN Software's MyRezzta9.1 Critical
- akin software computer import-export industry and trade co. ltd. akinsoft wolvox control panelDatabase Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel9.8 Critical
- infoblox niosAuthenticated argument injection in NIOS command line leading to privilege escalation9.1 Critical
- iskratel innboxIskratel Innbox Unauthenticated Remote Code Execution via login.xgi CLI Parameter9.3 Critical
- netboard crm demo platformSQL injection in the NetBoard CRM demo platform10.0 Critical
- bricksforgeBricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter9.8 Critical
- m a vinoth kumar frontend dashboardFrontend Dashboard 3.0.0 - 3.0.4 - Unauthenticated Privilege Escalation via Arbitrary Function Call9.8 Critical
- unknown ultimate multisiteUltimate Multisite < 2.17.0 - Unauthenticated Authentication Bypass via 'email_address' Parameter9.8 Critical
- openfind secushare proOpenfind｜SecuShare Pro - OS Command Injection9.3 Critical
- webrehab super forms – drag & drop form builderSuper Forms <= 6.3.316 - Unauthenticated Arbitrary Directory Deletion via 'data[...][files][][subdir]' Parameter9.1 Critical
- Show moreLoading…