Browse CVEs by Ecosystem and Severity
13 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2026-9082KEV
Drupal Core has a SQL Injection issue
CRITICAL
CVE-2025-54236KEV
Magento Community Edition Improper Input Validation vulnerability
CRITICAL
CVE-2025-54068KEV
Livewire is vulnerable to remote command execution during component property update hydration
CRITICAL
CVE-2025-49113KEV
Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization
CRITICAL
CVE-2025-32432KEV
Craft CMS Allows Remote Code Execution
CRITICAL
CVE-2024-58136KEV
yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key
CRITICAL
CVE-2024-56145KEV
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled
CRITICAL
CVE-2024-34102KEV
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability
CRITICAL
CVE-2018-7602KEV
Drupal Core Remote Code Execution Vulnerability
CRITICAL
CVE-2018-7600KEV
Drupal Core Remote Code Execution Vulnerability
CRITICAL
CVE-2017-9841KEV
Code Injection in PHPUnit
CRITICAL
CVE-2022-24086KEV
Magento improper input validation vulnerability
CRITICAL
CVE-2021-3129KEV
Unauthenticated remote code execution in Ignition