Browse CVEs by Ecosystem and Severity
2,578 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.
CRITICAL
CVE-2026-40076
OpenMRS Module Upload Vulnerable to Path Traversal (Zip Slip)
CRITICAL
CVE-2026-24118
VM2 Sandbox Breakout Through __lookupGetter__
CRITICAL
CVE-2026-42778
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41409 Incomplete Fix)
CRITICAL
CVE-2026-42779
Apache MINA vulnerable to Deserialization of Untrusted Data (CVE-2026-41635 Incomplete Fix)
CRITICAL
CVE-2026-42560
auth: Patreon provider assigns the same local user ID to every authenticated Patreon account, enabling cross‑user impersonation
CRITICAL
CVE-2026-42354
Sentry's improper authentication on SAML SSO process allows user identity linking
CRITICAL
CVE-2026-36767
Shopizer has a path traversal issue
CRITICAL
CVE-2026-40281
Gotenberg has ExifTool stdin argument injection via metadata value newlines (bypass of key sanitization fix)
CRITICAL
CVE-2026-42232
n8n has XML Node Prototype Pollution that to RCE
CRITICAL
CVE-2026-42231
n8n has Prototype Pollution in XML Webhook Body Parser that Leads to RCE
CRITICAL
CVE-2026-41586
fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE
CRITICAL
CVE-2026-34084
PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled
CRITICAL
CVE-2026-38992
Cockpit is vulnerable to arbitrary code execution
CRITICAL
CVE-2026-42523
Jenkins GitHub Plugin has an XSS vulnerability
CRITICAL
CVE-2026-24178
NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system
CRITICAL
CVE-2026-40976
Spring Boot's default security filter chain has no authorization rule with Actuator but without Health
CRITICAL
CVE-2026-33454
Apache Camel's Camel-Mail component is vulnerable to Camel message header injection
CRITICAL
CVE-2026-33453
Apache camel-coap allows header injection that can lead to remote code execution
CRITICAL
CVE-2026-41409
Apache MINA Vulnerable to Deserialization of Untrusted Data (CVE-2024-52046 Incomplete Fix)
CRITICAL
CVE-2026-41635
Apache MINA vulnerable to Deserialization of Untrusted Data
CRITICAL
CVE-2026-40453
Apache Camel has an incomplete fix for CVE-2025-27636
CRITICAL
CVE-2026-40860
Apache camel-jms, camel-sjms, camel-sjms2 and camel-amqp: Unsafe Deserialization of JMS ObjectMessage
CRITICAL
CVE-2026-41571
Note Mark: OIDC-registered users authenticated by submitting password "null"
CRITICAL
CVE-2026-41501
electerm has Command Injection via runLinux funtion
CRITICAL
CVE-2026-12537
Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypasses
CRITICAL
CVE-2026-42208
LiteLLM has SQL Injection in Proxy API key verification
CRITICAL
CVE-2026-41492
Dgraph: Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars
CRITICAL
CVE-2026-41328
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field
CRITICAL
CVE-2026-41327
Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field
CRITICAL
CVE-2025-62373
Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
CRITICAL
CVE-2026-39087
ntfy.sh allows a remote attacker to execute arbitrary code via the parseActions function
CRITICAL
CVE-2026-40372
Microsoft Security Advisory CVE-2026-40372 – ASP.NET Core Elevation of Privilege
CRITICAL
CVE-2026-42088
OpenC3 COSMOS: Permissions Bypass Provides User Access to Unassigned Administrative Actions via Script Runner Tool
CRITICAL
CVE-2026-42087
OpenC3 COSMOS has SQL Injection in QuestDB Time-Series Database
CRITICAL
CVE-2026-3960
CRITICAL
CVE-2026-42076
Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution
CRITICAL
CVE-2026-42072
NornicDB has Improper Network Binding in its Bolt Server, allowing unauthorized remote access
CRITICAL
CVE-2026-33471
nimiq-block has skip block quorum bypass via out-of-range BitSet indices & u16 truncation
CRITICAL
CVE-2026-41203
CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE
CRITICAL
CVE-2026-41202
CI4MS Backup::restore is vulnerable to Zip Slip leading to RCE
CRITICAL
CVE-2026-41179
RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution
CRITICAL
CVE-2026-41176
Rclone: Unauthenticated options/set allows runtime auth bypass, leading to sensitive operations and command execution
CRITICAL
CVE-2026-41070
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, allowing unauthenticated VPN access
CRITICAL
CVE-2026-41264
Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
CRITICAL
CVE-2026-41197
Brillig: Heap corruption in foreign call results with nested tuple arrays
CRITICAL
CVE-2026-32613
Spinnaker: RCE via expression parsing due to unrestricted context handling
CRITICAL
CVE-2026-32604
Spinnaker: RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths
CRITICAL
CVE-2026-33557
Apache Kafka does not validate JWT tokens in its OAUTHBEARER authentication implementation
CRITICAL
CVE-2026-41583
Zebra Vulnerable to Consensus Divergence in Transparent Sighash Hash-Type Handling
CRITICAL
CVE-2026-41584
Zebra has rk Identity Point Panic in Transaction Verification