Latest critical vulnerabilities
CVSS 9.0 and up.
- totolinkA stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s...9.1 Critical
- amazon kiro crewMissing authorization in the WhatsApp channel in Kiro Crew9.0 Critical
uvPyPIuv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised9.1 CriticalcertifiPyPIcertifi bundles emSign root CAs with compromised intermediate CA keys9.1 Critical- mozilla thunderbirdStanza injection in XMPP chat9.1 Critical
- xerj console apiAuthentication Bypass via Bearer Tokens to Unauthorized Credential Minting9.1 Critical
- argoproj argo-cdArgo CD: A Kustomize Helm config home can run commands in the repo-server9.9 Critical
- argoproj argo-cdArgo CD: A Kustomize remote ref can run commands in the repo-server9.9 Critical
- argoproj argo-cdArgo CD: A Jsonnet import can read files from the repo-server9.9 Critical
- wavlink wl-wn530be1-aWavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler9.3 Critical
- google adk typescript (@google/adk)Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId9.1 Critical
- No product listedaaPanel File Manager common.py ExecShell os command injection9.4 Critical
- giuseppe99barchetta suggestarrSuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing9.1 Critical
- networknt light-4jNetworknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password9.1 Critical
- froxlorFroxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron9.4 Critical
- flexgetFlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin9.2 Critical
- apache software foundation couchdbApache CouchDB: Admin credentials leading to code execution as operating system user9.3 Critical
- eclipse foundation threadx - netx duoOut-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.5099.3 Critical
- apache software foundation tomcatApache Tomcat: AJP response mix-up9.1 Critical
- apache software foundation tomcatApache Tomcat: HTTP/2 request/response mix-up after error during async processing9.1 Critical
- apache software foundation tomcatApache Tomcat: JNDIRealm bind credential validation fails open for non-GSSAPI SASL mechanisms9.1 Critical
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the SVG component9.8 Critical
- draytek vigor2960DrayTek Vigor2960 Upload Endpoint mainfunction.cgi uploadlangs command injection9.4 Critical
- eclipse foundation iofogEclipse ioFog operator WebSocket accepts an unverified JWT9.8 Critical
- draytek vigor2960DrayTek Vigor2960 CGI mainfunction.cgi sub_182B0 os command injection9.4 Critical
- draytek vigor2960DrayTek Vigor2960 CGI Process mainfunction.cgi set_table command injection9.4 Critical
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 moreConsole-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation9.9 Critical
- unblu inc. sparkUnblu Spark Authorization Bypass in Configuration Cascade Operations9.3 Critical
- advantech adam-3600A vulnerability in the password reset mechanism could allow an attacker to bypass the...9.2 Critical
- advantech adam-3600A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication...9.3 Critical
- advantech adam-3600A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to...9.2 Critical
- advantech adam-3600A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with...9.3 Critical
- signal ringrtcIn the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can...9.3 Critical
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...9.1 Critical
- letta-ai lettaLetta through 0.16.8 Insecure Default Configuration Unauthenticated API and PostgreSQL Access9.3 Critical
- eosphoros-ai db-gptDB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment9.3 Critical
- eosphoros-ai db-gptDB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent9.3 Critical
- evoscientistEvoScientist 0.1.0 before 0.2.5 Human Approval Bypass via Async Sub-Agents9.3 Critical
- chatchat-space langchain-chatchatLangchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint9.3 Critical
- tracer-cloud opensreOpenSRE through 0.1.2026.10.19 Approval Gate Bypass via shell_run Prompt Injection9.3 Critical
- cas-bigdatalab piflowpiflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell9.3 Critical
- h3c magic nx15H3C Magic NX15 RPC esps write code injection9.4 Critical
- h3c magic nx15H3C Magic NX15 usrlist sub_416874 os command injection9.4 Critical
- python pillowPillow: Argument Injection in Ghostscript call, potentially leading into RCE9.2 Critical
- python pillowPillow: Heap buffer overflow in ImagingJpegDecode9.2 Critical
- python pillowPillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution9.2 Critical
- python pillowPillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO9.2 Critical
- getgrav gravGrav 2.0.15 before 2.2.2 Arbitrary Static Method Call via Flex Form replace-name@9.3 Critical
- getgrav grav-plugin-apiGrav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass9.3 Critical
- craftcms cmsCraft CMS 5.0.0 before 5.11.0 GraphQL Site-Scope Bypass via Mutations9.3 Critical
- Show moreLoading…