Search
333 CVEs · Critical severity
CVEs (333)
Showing 1–25 of 333
| CVE ID | Severity | Patch | CVSS ↑ | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-114219 | CRITICAL | 7.4 | 2026-10-22 | NT OneAPP developed by NewType Infortech has a Hard-coded Credentials vulnerability. Unauthenticated remote attackers can obtain the hard-coded cryptographic key and decryp… | |
| CVE-2026-89035 | CRITICAL | 7.4 | 2026-10-21 | MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows attackers to bypass authentication by replaying captured … | |
| CVE-2026-113682 | CRITICAL | Patched | 7.4 | 2026-10-20 | Networknt light-4j from 2.1.5 before 2.4.0 contains an authentication bypass vulnerability in BasicAuthHandler that allows unauthenticated attackers to log in as LDAP/AD-de… |
| CVE-2026-112377 | CRITICAL | 7.4 | 2026-10-19 | CCC Attestation SIG attested-tls-poc through commit 731ca82 fails to bind early attestation Evidence to the TLS connection, allowing attackers to relay valid Evidence from … | |
| CVE-2026-112005 | CRITICAL | Patched | 7.7 | 2026-10-18 | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to read and write arbitrary host files by running DuckDB filesystem functi… |
| CVE-2026-115727 | CRITICAL | 8.1 | 2026-10-23 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes Flask debug mode while binding to all interfaces. Attac… | |
| CVE-2026-111594 | CRITICAL | 8.1 | 2026-10-22 | InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device. | |
| CVE-2026-115324 | CRITICAL | Patched | 8.1 | 2026-10-22 | mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by influencing stored memory conte… |
| CVE-2026-112408 | CRITICAL | Patched | 8.1 | 2026-10-21 | Missing verification of source of a communication channel in the default_bucket() function in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow… |
| CVE-2026-109619 | CRITICAL | Patched | 8.1 | 2026-10-21 | PHP has various global state that temporarily points into request memory. In some scenarios, global state may not be correctly reset, or may be repopulated after being rese… |
| CVE-2026-114403 | CRITICAL | 8.1 | 2026-10-21 | PHPOffice PHPPresentation through 1.2.0 contains an insecure deserialization vulnerability that allows attackers to instantiate arbitrary PHP objects by supplying a crafted… | |
| CVE-2026-114087 | CRITICAL | Patched | 8.1 | 2026-10-21 | Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded… |
| CVE-2026-114053 | CRITICAL | Patched | 8.1 | 2026-10-21 | vLLM from 0.7.3 before 0.31.0 forwards the request-supplied mm_processor_kwargs.code_revision to Transformers AutoProcessor.from_pretrained, letting clients select which re… |
| CVE-2016-20101 | CRITICAL | Patched | 8.1 | 2026-10-20 | Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the… |
| CVE-2026-113613 | CRITICAL | Patched | 8.1 | 2026-10-20 | FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive … |
| CVE-2026-115372 | CRITICAL | Patched | 8.5 | 2026-10-22 | Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set block.create_options through volume update, copy, and move o… |
| CVE-2026-114661 | CRITICAL | Patched | 8.5 | 2026-10-22 | OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any authenticated user to start, stop and query gateway … |
| CVE-2026-115353 | CRITICAL | Patched | 8.6 | 2026-10-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read arbitrary files by supplying relative or absolute pa… |
| CVE-2026-114493 | CRITICAL | 8.6 | 2026-10-21 | LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that validates only the initial gallery config URL. Attackers… | |
| CVE-2026-112780 | CRITICAL | Patched | 8.8 | 2026-10-19 | Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary public static methods by renaming Flex form fields with … |
| CVE-2025-31699 | CRITICAL | Patched | 8.9 | 2026-10-21 | Apache Traffic Server can return an origin connection to the shared pool while the origin is still waiting on a request body the client declared but never fully sent, inclu… |
| CVE-2025-30046 | CRITICAL | — | 2026-10-23 | In the CGM CLININET application server, multiple processes responsible for HL7 communication with external systems run with root privileges while processing untrusted data … | |
| CVE-2026-94267 | CRITICAL | Patched | 9.0 | 2026-10-23 | The Advanced Custom Fields: Extended WordPress plugin before 0.9.2.8, Advanced Custom Fields: Extended PRO WordPress plugin before 0.9.2.8 does not perform any capability c… |
| CVE-2026-111811 | CRITICAL | Patched | 9.0 | 2026-10-21 | Apache Traffic Server's experimental tsmemcache plugin allows unauthenticated network read, write, and deletion of the shared proxy cache. This issue affects Apache Traf… |
| CVE-2026-20043 | CRITICAL | 9.0 | 2026-10-21 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive… |