Latest critical vulnerabilities
CVSS 9.0 and up.
- argoproj argo-cdArgo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks9.9 Critical
- ivanti neurons patch for intuneAn exposed dangerous endpoint in Ivanti Neurons Patch for Intune allows a remote authenticated...9.9 Critical
- zarestia-dev rclone-managerRClone Manager: Unauthenticated RClone Daemon Enables Remote Attack via Malicious Web Page9.6 Critical
- jhuckaby cronicleCronicle: Stored XSS in admin Activity Log via account full_name field9.0 Critical
- @tanstack react-start, solid-start, start-server-core +2 more +4 moreTanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses9.3 Critical
- ivanti xtractionAn External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4...9.9 Critical
- esri portal for arcgisBUG-000187331 Portal for ArcGIS has a security vulnerability9.8 Critical
- fearlessgeekmedia fearlesscmsFearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater9.1 Critical
- metabaseMetabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions9.3 Critical
- xenx86/AMD: ineffectual Zenbleed workaround9.8 Critical
- saltyorg docsSalty documentation workflow executes fork-controlled Python build hooks with deployment secrets10.0 Critical
- dragonflydb dragonflyDragonflyDB stream RDB deserialization double-free9.6 Critical
- ibm mcp-context-forgeMCP Context Forge: Hardcoded default JWT_SECRET_KEY shipped in source and .env.example enables pre-authentication platform admin token forgery9.8 Critical
- commvault cloud, grid(hsx) cvfs +1 moreCVFS Command Execution9.3 Critical
- apache software foundation fesod (incubating)Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding9.1 Critical
- colorful igamecenterColorful iGameCenter Dispatch AMDRyzenMasterDriver.sys MmMapIoSpace privilege defined with unsafe actions9.3 Critical
- wazuh wazuh-managerWazuh 3.9.0 before 4.14.8 Arbitrary File Overwrite RCE via process_files_from_worker9.4 Critical
- nvidia aistore frameworkNVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation...9.1 Critical
- nvidia aistore frameworkNVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec...10.0 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Core & HTML component9.8 Critical
- mozilla firefox, thunderbird +1 moreInvalid pointer, undefined behavior in the DOM: Notifications component9.8 Critical
- mozilla firefox, thunderbird +1 moreSame-origin policy bypass in the DevTools component9.1 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape in the DOM: Content Processes component9.6 Critical
- mozilla firefox, thunderbird +1 moreSite isolation issue in the DOM: Web Authentication component9.6 Critical
- trendnet tew-432brpTRENDnet TEW-432BRP formTcpipSetup stack-based overflow9.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly validate and sanitize visual marker data contained in imported...9.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly sanitize comment fields contained in imported trace files before...9.4 Critical
- siemens simatic drive controller cpu 1504d tf, simatic drive controller cpu 1507d tf, simatic et 200sp cpu 1510sp f-1 pn +100 more +102 moreAffected devices do not properly restrict executable content contained in imported trace files. ...9.4 Critical
- jtl sw gmbh jtl-wmsMissing Authentication Vulnerability in JTL-WMS10.0 Critical
- wavlink wl-wn592ax6Wavlink WL-WN592AX6 wmapd system os command injection10.0 Critical
- wavlink wl-wn530be1-aWavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow10.0 Critical
- wavlink wl-wn530be1-aWavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection9.4 Critical
- d-link dcs-930lD-Link DCS-930L Emergency HTTP Recovery Server bootloader_region.bin mpfd_decode signature verification9.4 Critical
- perforce helix authentication servicePerforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM...9.3 Critical
- gitlab, gitlab community edition and enterprise edition, ruby-lang ruby +2 moreInteger Overflow or Wraparound in GitLab10.0 Critical
- rapid7 metasploit frameworkMetasploit Framework Web Service REST API Missing Authentication on Credential Endpoints9.8 Critical
- sap se cloudOAuth2 SSRF vulnerability in SAP Cloud SDK for Python10.0 Critical
- sap se netweaver visual composerBroken Access Control in SAP NetWeaver Visual Composer9.9 Critical
- sap se manufacturing integration and intelligence (configuration service)Missing Authorization check in SAP Manufacturing Integration and Intelligence (Configuration Service)9.1 Critical
- sap se s/4hana (manage substitution/validation rules)Code Injection vulnerability in SAP S/4HANA (Manage Substitution/Validation Rules)9.9 Critical
- microsoft asp.net core, asp.net core 10.0, asp.net core 11.0 +6 more +8 moreASP.NET Core Tampering Vulnerability9.4 Critical
- No product listedAn issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3...9.8 Critical
- No product listedDirectory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000...9.8 Critical
- microsoft asp.net core 10.0, asp.net core 11.0, asp.net core 8.0 +3 more +5 moreASP.NET Core Security Feature Bypass Vulnerability9.1 Critical
- No product listedDeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.9.1 Critical
- No product listedAn issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed...9.8 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to uninitialized memory in the DOM: Web Serial component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to incorrect boundary conditions in the Networking component9.6 Critical
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Networking component9.6 Critical
- Show moreLoading…