Latest critical vulnerabilities
CVSS 9.0 and up.
- hitachi jp1/automatic job management system 3 - managerStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreHeap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - manager, jp1/automatic job management system 3 - agent minimal edition +2 moreStack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreOut-of-bounds Write Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreHeap-based Buffer Overflow Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/automatic job management system 3 - agent, jp1/automatic job management system 3 - agent minimal edition, jp1/automatic job management system 3 - manager +2 more +4 moreStack-based Buffer Overflow Vulnerability in JP1 Products9.4 Critical
- hitachi jp1/baseHeap-based Buffer Overflow Vulnerability in JP1/Base9.8 Critical
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.29.3 Critical
- balbooa.com gridbox extension for joomlaJoomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.29.3 Critical
- qode themes membershipQode Membership <= 2.0.6.2 - Authentication Bypass via Social Login9.8 Critical
- smci x12spiSupermicro BMC contains Unprotected IPMI Commands Accepted on Active RMCP+ Sessions vulnerability9.8 Critical
- No product listedAidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and...9.8 Critical
- rajnandan1 kenerKener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret9.2 Critical
- totolink a950rgTOTOLINK A950RG Device-Information CGI infostat.cgi sub_402340 stack-based overflow10.0 Critical
- totolink a950rgTOTOLINK A950RG firewall.so apmib_set command injection9.4 Critical
- totolink a950rgTOTOLINK A950RG device-information udhcpd.leases getDeviceInfo command injection9.4 Critical
- apple macosAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...9.8 Critical
- apple macosAn out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in...9.8 Critical
- apple ipados, macos, tvos +4 more +6 moreA use-after-free issue was addressed with improved memory management. This issue is fixed in iOS...9.1 Critical
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...9.3 Critical
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed with improved input validation. This issue is fixed in iOS 26.7.2 and...10.0 Critical
- apple macosA path traversal issue was addressed with improved path validation. This issue is fixed in macOS...9.0 Critical
- apple macosAn out-of-bounds read issue was addressed by removing the vulnerable code. This issue is fixed in...9.0 Critical
- apple macosThis issue was addressed with improved permissions checking. This issue is fixed in macOS Golden...9.0 Critical
- apple macosA buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS...9.8 Critical
- apple macosThe issue was addressed with improved memory handling. This issue is fixed in macOS Golden Gate...9.1 Critical
- apple ipados, macos, safari +3 more +5 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in Safari 27.2, iOS...10.0 Critical
- totolink a950rgTOTOLINK A950RG Cloud Upgrade upgrade.so setCloudUpgradeFW command injection9.4 Critical
- hashicorp toolingConsul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules9.9 Critical
- esri arcgis serverBUG-000187511 - ArcGIS Server has a security vulnerability.9.8 Critical
- padok-team burritoBurrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset9.9 Critical
- zip-rs zip2zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCE10.0 Critical
- openhands software agent sdkOpenHands Software Agent SDK < 1.52.0 Unauthenticated Sandbox Agent Server RCE9.3 Critical
- boneio black debian imagesImproper Privilege Assignment in boneIO9.3 Critical
- google mcp toolbox for databases (googleapis/mcp-toolbox)Missing Authorization in MCP Toolbox for Databases allows Arbitrary File Read and Write9.3 Critical
- vertiv avocent acs8000Avocent ACS8000 wsserver command injection9.8 Critical
- benoitc hackneyCustom cacerts or cacertfile do not restrict trust to the pinned CA in hackney9.1 Critical
- fortinet fortisandbox, fortisandbox paas +1 moreAn authentication bypass using an alternate path or channel vulnerability in Fortinet...9.6 Critical
- wolfvision cynap pro, cynap core pro, cynap, cynap core +1 moreShared SSH Authentication Key in vSolution Matrix File Sharing9.2 Critical
- wolfvision cynap pro, cynap core pro, cynap receiver, cynap pure, cynap pure mini, cynap pure pro, cynap pure (next gen), cynap bridge, cynap videobar, firmware version +1 more +3 moreUnauthenticated RCE Vulnerability in WolfProt interface implementation9.3 Critical
- huangxd- danmu apidanmu_api before 1.21.7 Authentication Bypass via Default Token in Env Endpoints9.3 Critical
- maccmspro maccms10MacCMS v10 before 2026.1000.4054 Account Takeover via Unbound Password Recovery Code9.3 Critical
- No product listedAn unrestricted file upload vulnerability exists in the campaign import feature of Mautic 7. When processing an uploaded campaign archive, the application copies the bundled asset files into a publicl…9.9 Critical
- creditnirvana collections platform (collectionworkz)Improper Authentication Vulnerability in CreditNirvana Collections Platform9.3 Critical
- oray pugongying x5 proOray Pugongying X5 Pro Dnsmasq crlf injection9.3 Critical
- oray pugongying x5 proOray Pugongying X5 Pro L2TP Authentication crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro IPsec Policy ipsec.conf crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro Dnsmasq crlf injection9.4 Critical
- oray pugongying x5 proOray Pugongying X5 Pro SNMP snmp_set crlf injection9.4 Critical
- Show moreLoading…