Browse by product

Browse by weakness

Recent Critical & High-Severity CVEs

• CVE-2026-100103: Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a pu[CRITICAL 10.0]
• CVE-2026-105484: A security vulnerability has been detected in TOTOLINK X6000R 9.4.0cu.652_B20230116. The impacted el[CRITICAL 10.0]
• CVE-2026-32579: Unauthenticated Arbitrary File Upload in Kognetiks Chatbot for WordPress <= 2.4.9 versions.[CRITICAL 10.0]
• CVE-2026-39770: Unauthenticated Arbitrary File Upload in Doctreat <= 1.7.0 versions.[CRITICAL 10.0]
• CVE-2026-39773: Unauthenticated Privilege Escalation in Doctreat Core <= 1.7.0 versions.[CRITICAL 10.0]
• CVE-2026-63688: Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication f[CRITICAL 10.0]
• CVE-2026-63692: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Cr[CRITICAL 10.0]
• CVE-2026-105857: Payload is a free and open source headless content management system. In @payloadcms/plugin-form-bui[CRITICAL 10.0]
• CVE-2026-106102: Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 2.22.[CRITICAL 10.0]
• CVE-2026-102255: A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to [CRITICAL 10.0]
• CVE-2025-70518: The management portal's diagnostic ping tool of Fanvil x7a firmware version 2.6.0.1182 does not hand[CRITICAL 10.0]
• CVE-2026-76482: As part of Cisco's ongoing commitment to proactive security and product quality, the engineering tea[CRITICAL 10.0]
• CVE-2026-12260: SQL injection in the NetBoard CRM demo platform; specifically, the vulnerable component is the ‘user[CRITICAL 10.0]
• CVE-2026-96207: Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to eleva[CRITICAL 10.0]
• CVE-2026-94503: Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Uploa[CRITICAL 10.0]
• CVE-2026-42696: Unauthenticated Remote Code Execution (RCE) in SiteVault – Backup, Restore, Migration &amp; Cloning [CRITICAL 10.0]
• CVE-2026-108576: A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function proces[CRITICAL 10.0]
• CVE-2026-61447: PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secret[CRITICAL 10.0]
• CVE-2026-93605: vm2 contains a sandbox escape vulnerability[CRITICAL 10.0]
• CVE-2025-32433: Erlang/OTP SSH Vulnerable to Pre-Authentication RCE[CRITICAL 10.0]
• CVE-2026-45480: Azure Active Directory Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-48567: Azure HorizonDB Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2017-20230: Storable versions before 3.05 for Perl has a stack overflow[CRITICAL 10.0]
• CVE-2026-32186: Microsoft Bing Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-32213: Azure AI Foundry Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-33105: Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-33107: Azure Databricks Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-33819: Microsoft Bing Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-35431: Microsoft Entra ID Entitlement Management Spoofing Vulnerability[CRITICAL 10.0]
• CVE-2026-32169: Azure Cloud Shell Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-62874: Azure Billing Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69399: Azure Arc Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69843: Microsoft Fabric Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69865: Microsoft Container Registry Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-70200: Azure Logic Apps Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-70352: Azure AI Language Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-83711: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-83944: Azure Logic Apps Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-85889: Azure AI Foundry Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2025-68121: Unexpected session resumption in crypto/tls[CRITICAL 10.0]
• CVE-2026-27211: Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse[CRITICAL 10.0]
• CVE-2025-54914: Azure Networking Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2025-55241: Azure Entra ID Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-56162: Azure SQL Database Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-63508: Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65667: Microsoft Teams Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65770: Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-65801: Microsoft Exchange Online Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65816: Azure Arc Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69502: Azure SQL Database Elevation of Privilege Vulnerability[CRITICAL 10.0]