Sorry, you need to enable JavaScript to visit this website.
Newsletter
Latest

Vulnerability tracker

Latest critical vulnerabilities

Vulnerabilities rated critical (CVSS 9.0 or higher) published in the last 30 days, and critical ones CISA has seen exploited in attacks in the last 30 days. Each links to its official record on cve.org, and to our story when we wrote one. The list is refreshed every hour from the US National Vulnerability Database.

All critical Exploited only

  1. 10.0 CVE-2026-120198

    A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117.

    Published Nov 1

  2. 9.9 CVE-2026-120197

    A flaw has been found in WAVLINK WL-WN530HG4B M_V260724.

    Published Nov 1

  3. 10.0 CVE-2026-120195

    A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4.

    Published Nov 1

  4. 9.9 CVE-2026-120196

    A vulnerability was detected in WAVLINK WN579X3-D V250402.

    Published Nov 1

  5. 10.0 CVE-2026-120189

    A vulnerability was identified in D-Link DIR-505 1.10B02.

    Published Oct 31

  6. 9.8 CVE-2026-120209

    AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline.

    Published Oct 31

  7. 9.8 CVE-2026-120201

    Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain…

    Published Oct 31

  8. 9.8 CVE-2026-118235

    The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary…

    Published Oct 31

  9. 9.1 CVE-2026-103882

    The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion…

    Published Oct 31

  10. 9.8 CVE-2026-119096

    The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and including, 3.8.2…

    Published Oct 31

  11. 9.8 CVE-2026-116512

    The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress is vulnerable to…

    Published Oct 31

  12. 9.1 CVE-2026-89270

    The Popup Builder – Create highly converting, mobile friendly marketing popups.

    Published Oct 31

  13. 9.1 CVE-2026-116557

    The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…

    Published Oct 31

  14. 9.8 CVE-2026-109220

    The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP Object Injection in all…

    Published Oct 31

  15. 9.8 CVE-2026-119706

    InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to…

    Published Oct 30

  16. 9.8 CVE-2026-119660

    MuseBot before 2.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge admin sessions by…

    Published Oct 30

  17. 9.8 CVE-2026-119597

    OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge…

    Published Oct 30

  18. 9.8 CVE-2026-18894

    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to trigger pre-existing stored Python component code in a public…

    Published Oct 29

  19. 9.8 CVE-2026-104317

    IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute arbitrary code on the…

    Published Oct 29

  20. 10.0 CVE-2026-97229 Exploited

    GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

    Exploited, added Oct 28 · Our story

  21. 9.1 CVE-2026-117574

    A flaw was found in ai-gateway-payload-processing.

    Published Oct 28

  22. 9.8 CVE-2026-103409

    A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an unauthenticated…

    Published Oct 28

  23. 9.8 CVE-2026-103406

    An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in Juniper Networks…

    Published Oct 28

  24. 9.3 CVE-2026-118337

    Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a…

    Published Oct 27

  25. 9.3 CVE-2026-118333

    Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a…

    Published Oct 27

  26. 9.1 CVE-2026-105779

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…

    Published Oct 27

  27. 9.9 CVE-2026-105780

    Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in…

    Published Oct 27

  28. 10.0 CVE-2026-105781

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…

    Published Oct 27

  29. 9.3 CVE-2026-104350

    Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability.

    Published Oct 27

  30. 9.9 CVE-2026-104351

    Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result…

    Published Oct 27

  31. 9.9 CVE-2026-104353

    Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command…

    Published Oct 27

  32. 9.8 CVE-2026-117532

    REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows…

    Published Oct 27

  33. 9.3 CVE-2026-48356 Exploited

    Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability

    Exploited, added Oct 26

  34. 9.8 CVE-2026-111497 Exploited

    Google Brotli Unchecked Return Value Vulnerability

    Exploited, added Oct 26 · Our story

  35. 9.9 CVE-2026-116506

    A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B20221104.

    Published Oct 26

  36. 9.8 CVE-2026-115915

    vLLM is an inference and serving engine for large language models.

    Published Oct 26

  37. 9.6 CVE-2026-116370

    A security flaw has been discovered in 2K Games Sid Meier's Civilization VI 1.0.12.68.

    Published Oct 26

  38. 9.8 CVE-2026-112346

    OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and…

    Published Oct 26

  39. 9.8 CVE-2026-116485

    danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify server…

    Published Oct 26

  40. 9.1 CVE-2026-116214

    MacCMS v10 before 2026.1000.4054 contains an authentication bypass vulnerability that allows unauthenticated attackers to reset any…

    Published Oct 26

  41. 9.1 CVE-2026-116234

    A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1.

    Published Oct 26

  42. 9.9 CVE-2026-116231

    A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1.

    Published Oct 26

  43. 9.6 CVE-2026-116111

    A vulnerability was determined in 2K Games Civilization V 1.0.3.144.

    Published Oct 25

  44. 9.8 CVE-2026-109618 Exploited

    PHP Memory Corruption Vulnerability

    Exploited, added Oct 25 · Our story

  45. 9.8 CVE-2026-110447 Exploited

    Collabora Online – Built-in CODE Server OS Command Injection Vulnerability

    Exploited, added Oct 22

  46. 9.9 CVE-2026-114625 Exploited

    Arista VeloCloud Orchestrator SQL Injection Vulnerability

    Exploited, added Oct 22

  47. 9.1 CVE-2026-114615

    Authlib is a Python library which builds OAuth and OpenID Connect servers.

    Published Oct 22

  48. 9.1 CVE-2026-114616

    Authlib is a Python library which builds OAuth and OpenID Connect servers.

    Published Oct 22

  49. 9.9 CVE-2026-115375

    Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to create instances to…

    Published Oct 22

  50. 9.1 CVE-2026-85080

    In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to a crash.

    Published Oct 22

  51. 9.8 CVE-2026-94502

    In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write potentially leading to…

    Published Oct 22

  52. 9.8 CVE-2026-85079

    In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially leading to remote…

    Published Oct 22

  53. 9.1 CVE-2022-51022

    YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the…

    Published Oct 22

  54. 9.3 CVE-2026-114656

    Traefik before 2.11.58 and 3.7.13 contains an authentication bypass vulnerability that allows unauthenticated clients to skip…

    Published Oct 21

  55. 9.9 CVE-2026-101528

    Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).

    Published Oct 20

  56. 9.9 CVE-2026-101529

    Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Data Guard Management).

    Published Oct 20

  57. 9.9 CVE-2026-101501

    Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).

    Published Oct 20

  58. 9.9 CVE-2026-101503

    Vulnerability in Oracle Trusted Answer Search (component: PLSQL package).

    Published Oct 20

  59. 9.9 CVE-2026-101446

    Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    Published Oct 20

  60. 9.8 CVE-2026-77930

    EvoScientist 0.1.0 before 0.2.5 contains an approval bypass vulnerability that allows attackers to run host shell commands by delegating…

    Published Oct 19

  61. 9.8 CVE-2026-109444

    OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute shell_run commands…

    Published Oct 19

  62. 9.8 CVE-2026-112900

    Pillow is a Python imaging library.

    Published Oct 19

  63. 9.8 CVE-2026-112398

    Pillow is a Python imaging library.

    Published Oct 19

  64. 9.8 CVE-2026-112403

    Pillow is a Python imaging library.

    Published Oct 19

  65. 9.8 CVE-2026-112393

    Pillow is a Python imaging library.

    Published Oct 19

  66. 9.8 CVE-2026-12665

    IBM MQ could allow a remote attacker to execute arbitrary code due to a stack buffer overflow when processing TLS certificates with…

    Published Oct 19

  67. 9.1 CVE-2026-111375

    FreeRDP from 3.0.0 before 3.32.0 contains an out-of-bounds read vulnerability in the Windows RAIL client that allows malicious RDP…

    Published Oct 15

  68. 9.8 CVE-2026-102764 Exploited

    BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

    Exploited, added Oct 15

  69. 9.1 CVE-2026-109829

    undici is an HTTP client library for Node.js.

    Published Oct 15

  70. 9.1 CVE-2026-109383

    undici is an HTTP client library for Node.js.

    Published Oct 15

  71. 9.8 CVE-2026-111094

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was…

    Published Oct 15

  72. 9.1 CVE-2026-101307

    When the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.

    Published Oct 15

  73. 9.8 CVE-2026-76519 Exploited

    Cisco Secure Email Gateway Relative Path Traversal Vulnerability

    Exploited, added Oct 13

  74. 9.8 CVE-2026-89068

    Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).

    Published Oct 14

  75. 9.8 CVE-2026-89073

    Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.

    Published Oct 14

  76. 10.0 CVE-2026-105134 Exploited

    Ahsay AhsayCBS Command Injection Vulnerability

    Exploited, added Oct 13

  77. 9.1 CVE-2026-95695

    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due…

    Published Oct 13

  78. 9.8 CVE-2026-83888

    Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.

    Published Oct 13

  79. 9.8 CVE-2026-83789

    Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

    Published Oct 13

  80. 9.8 CVE-2026-83523

    Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

    Published Oct 13

  81. 9.8 CVE-2026-70275

    Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

    Published Oct 13

  82. 9.8 CVE-2026-70262

    Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

    Published Oct 13

  83. 9.8 CVE-2026-105723

    Untrusted pointer dereference in Windows Distributed File System (DFS) allows an unauthorized attacker to elevate privileges over a network.

    Published Oct 13

  84. 9.9 CVE-2026-82110

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper…

    Published Oct 12

  85. 9.6 CVE-2026-82101

    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path…

    Published Oct 12

  86. 9.8 CVE-2026-19622

    IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to bypass authentication and escalate privileges due to improper…

    Published Oct 12

  87. 9.8 CVE-2026-108107

    PHPNuxBill through 2025.3.20 contains an unauthenticated SQL injection vulnerability in the radius.php FreeRADIUS REST endpoint that…

    Published Oct 9

  88. 9.8 CVE-2026-76779

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive…

    Published Oct 9

  89. 9.8 CVE-2026-84035

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a stack-based buffer…

    Published Oct 8

  90. 9.8 CVE-2026-84057

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary commands due to improper neutralization…

    Published Oct 8

  91. 9.8 CVE-2026-84058

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to a buffer overrun in the TDS (Microsoft SQL Server) PRELOGIN packet…

    Published Oct 8

  92. 9.8 CVE-2026-84198

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Published Oct 8

  93. 9.8 CVE-2026-84209

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper…

    Published Oct 8

  94. 9.8 CVE-2026-84246

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Published Oct 8

  95. 9.8 CVE-2026-81932

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection.

    Published Oct 8

  96. 9.8 CVE-2026-82895

    IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to a buffer overflow.

    Published Oct 8

  97. 9.1 CVE-2026-82900

    IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a…

    Published Oct 8

  98. 9.8 CVE-2026-82344

    IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly…

    Published Oct 8

  99. 9.1 CVE-2026-82334

    IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser.

    Published Oct 8

  100. 9.8 CVE-2026-82335

    IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser.

    Published Oct 8

  101. 9.1 CVE-2026-14508

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could…

    Published Oct 8

  102. 9.8 CVE-2026-14888

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could…

    Published Oct 8

  103. 9.8 CVE-2026-14988

    IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is…

    Published Oct 8

  104. 9.8 CVE-2026-87684

    A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1.

    Published Oct 7

  105. 9.8 CVE-2026-87659

    A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1.

    Published Oct 7

  106. 10.0 CVE-2015-3306 Exploited

    ProFTPD Improper Access Control Vulnerability

    Exploited, added Oct 7

  107. 9.8 CVE-2021-3199 Exploited

    ONLYOFFICE Docs Server Path Traversal Vulnerability

    Exploited, added Oct 7

  108. 9.8 CVE-2026-76285

    As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive internal security…

    Published Oct 7

  109. 9.8 CVE-2026-76459

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a…

    Published Oct 7

  110. 9.1 CVE-2026-76454

    A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM…

    Published Oct 7

  111. 9.1 CVE-2026-92414

    : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit.

    Published Oct 7

  112. 9.1 CVE-2026-81535

    In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the…

    Published Oct 6

  113. 9.8 CVE-2026-93675

    IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary code due to an expected dependency confusion.

    Published Oct 6

  114. 9.9 CVE-2026-106486

    Backstage is an open framework for building developer portals.

    Published Oct 6

  115. 9.8 CVE-2026-82162

    Dell Command | Configure (DCC), versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability.

    Published Oct 6

  116. 9.6 CVE-2026-106237

    Information leak in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass site isolation via a crafted…

    Published Oct 6

  117. 9.1 CVE-2026-106195

    Incorrect authorization in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to bypass system…

    Published Oct 6

  118. 10.0 CVE-2026-106218

    In JetBrains TeamCity before 2026.1.3 2025.11.7 kotlin DSL sandbox escape leading to RCE on the server was possible

    Published Oct 6

  119. 9.4 CVE-2026-105863

    Payload is a free and open source headless content management system.

    Published Oct 6

  120. 9.6 CVE-2026-105848

    Payload is a free and open source headless content management system.

    Published Oct 6

  121. 9.6 CVE-2026-63691

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for…

    Published Oct 6

  122. 9.6 CVE-2026-67273

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template…

    Published Oct 6

  123. 9.8 CVE-2026-102428

    Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user…

    Published Oct 5

  124. 9.8 CVE-2026-102780

    Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The…

    Published Oct 5

Updated November 1, 2026, 3:30 am EST. This product uses data from the NVD API but is not endorsed or certified by the NVD.