Critical-severity CVEs (page 22)
Page 22 of 100 — critical-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-55742 | Critical | 9.6 | 2026-06-18 | Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler. In system/admin/admin.rights.p… |
CVE-2026-55740 | Critical | 9.8 | 2026-06-18 | Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in… |
CVE-2026-12569 | Critical | 9.8 | 2026-06-18 | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the… |
CVE-2026-48768 | Critical | 9.3 | 2026-06-18 | TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/generate-upload-url is unauthenticated and uses unsanitized f… |
CVE-2026-54388 | Critical | 9.1 | 2026-06-17 | Tinyproxy through 1.11.3, fixed in commit 364cdb6, fails to reject requests containing multiple Content-Length headers with differing values, forwarding all du… |
CVE-2026-54387 | Critical | 9.1 | 2026-06-17 | Tinyproxy through 1.11.3, fixed in commit ff45d3b, fails to reconcile conflicting Content-Length and Transfer-Encoding: chunked headers, forwarding both verbat… |
CVE-2026-48814 | Critical | 9.1 | 2026-06-17 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. In versions 5.7.1 and earlier, the MCP SSE server allows unauthenticated cross-origin MCP tool inv… |
CVE-2026-55196 | Critical | 9.1 | 2026-06-17 | Hermes WebUI before 0.51.409 contains an authentication bypass vulnerability in passkey registration endpoints that allows unauthenticated remote attackers to… |
CVE-2026-53805 | Critical | 9.8 | 2026-06-17 | NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the /request-in… |
CVE-2026-3894 | Critical | 9.1 | 2026-06-17 | Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.This issue affects Connext Professional: from 7.4.0 befor… |
CVE-2026-30803 | Critical | 9.1 | 2026-06-17 | Integer Underflow (Wrap or Wraparound) vulnerability in RTI Connext Micro (Core Libraries) allows Overread Buffers.This issue affects Connext Micro: from 4.0.0… |
CVE-2026-20266 | Critical | 9.1 | 2026-06-17 | In Splunk AI Toolkit versions below 5.7.4, a user who holds the "admin" Splunk role could execute arbitrary OS commands on the host running the Splunk Enterpri… |
CVE-2026-53874 | Critical | 9.8 | 2026-06-17 | picklescan before 1.0.1 contains an unsafe deserialization vulnerability allowing unauthenticated users to execute arbitrary code by hiding eval calls nested u… |
CVE-2026-53873 | Critical | 9.8 | 2026-06-17 | picklescan before 1.0.4 contains an incomplete blocklist for the profile module that fails to block the module-level profile.run() function, allowing attackers… |
CVE-2026-3490 | Critical | 10.0 | 2026-06-17 | picklescan before 1.0.4 fails to block pkgutil.resolve_name, allowing attackers to bypass the entire blocklist by resolving any dangerous function through indi… |
CVE-2026-36418 | Critical | 9.1 | 2026-06-17 | JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeSelectApi end… |
CVE-2026-20181 | Critical | 9.1 | 2026-06-17 | A vulnerability in Cisco ISE and ISE-PIC could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an a… |
CVE-2025-71325 | Critical | 9.8 | 2026-06-17 | picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the cor… |
CVE-2025-71323 | Critical | 9.8 | 2026-06-17 | picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw me… |
CVE-2025-71321 | Critical | 9.8 | 2026-06-17 | picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by using distutils.file_util… |
CVE-2025-71320 | Critical | 9.8 | 2026-06-17 | picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to bypass se… |
CVE-2026-55743 | Critical | 9.6 | 2026-06-17 | The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execut… |
CVE-2026-54812 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors allows Blind SQL Injection. This i… |
CVE-2026-47103 | Critical | 9.8 | 2026-06-17 | Python StateMachine versions 3.0.0 before 3.2.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary code by supplying mal… |
CVE-2026-54819 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webilia Inc. Listdom allows Blind SQL Injection. This is… |
CVE-2026-54815 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cargo RD Cargo Shipping Location for WooCommerce allows B… |
CVE-2026-54809 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VillaTheme GIFT4U allows Blind SQL Injection. This issue… |
CVE-2026-54808 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel Gutenberg Blocks allows Blind SQL Inj… |
CVE-2026-49268 | Critical | 9.1 | 2026-06-17 | A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is d… |
CVE-2026-49108 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Moderno < 1.43 versions. |
CVE-2025-69127 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Plumbing <= 1.6 versions. |
CVE-2025-69111 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Reisen <= 1.4.1 versions. |
CVE-2025-60236 | Critical | 9.8 | 2026-06-17 | Deserialization of Untrusted Data vulnerability in EMV Creatify allows Object Injection. This issue affects Creatify: from n/a through 1.5. |
CVE-2025-60231 | Critical | 9.8 | 2026-06-17 | Deserialization of Untrusted Data vulnerability in EMV The Hospital nrghospital allows Object Injection. This issue affects The Hospital: from n/a through 1.8… |
CVE-2025-60230 | Critical | 9.8 | 2026-06-17 | Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9. |
CVE-2025-60229 | Critical | 9.8 | 2026-06-17 | Deserialization of Untrusted Data vulnerability in Themeton Lagom allows Object Injection. This issue affects Lagom: from n/a through 2.0. |
CVE-2025-59554 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in Advanced Ads – Tracking < 3.0.7 versions. |
CVE-2026-54811 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in WP eMember < v10.9.4 versions. |
CVE-2026-54807 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in Registration Form for WooCommerce <= 1.0.9 versions. |
CVE-2026-54806 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions. |
CVE-2026-54803 | Critical | 9.8 | 2026-06-17 | Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.4 versions. |
CVE-2026-54194 | Critical | 9.8 | 2026-06-17 | Contributor PHP Object Injection in Fusion Builder <= 3.15.4 versions. |
CVE-2026-54187 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetEngine <= 3.8.10.1 versions. |
CVE-2026-54186 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JobSearch <= 3.2.9 versions. |
CVE-2026-52706 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in JetEngine <= 3.8.10 versions. |
CVE-2026-52705 | Critical | 9.0 | 2026-06-17 | Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms <= 1.4.5 versions. |
CVE-2026-50203 | Critical | 9.1 | 2026-06-17 | A path traversal in the SFTP provider (`SFTPHook.retrieve_directory` / `SFTPOperator(operation=get)`) let a malicious or compromised remote SFTP server write f… |
CVE-2026-49767 | Critical | 9.8 | 2026-06-17 | Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions. |
CVE-2026-49107 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions. |
CVE-2026-49084 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions. |
CVE-2026-49080 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions. |
CVE-2026-49079 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions. |
CVE-2026-49076 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetEngine <= 3.8.9.1 versions. |
CVE-2026-49075 | Critical | 9.8 | 2026-06-17 | Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions. |
CVE-2026-49058 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. |
CVE-2026-48875 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions. |
CVE-2026-48781 | Critical | 9.9 | 2026-06-17 | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a sessio… |
CVE-2026-48745 | Critical | 9.3 | 2026-06-17 | Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and belo… |
CVE-2026-48616 | Critical | 9.3 | 2026-06-17 | Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads… |
CVE-2026-48055 | Critical | 10.0 | 2026-06-17 | Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability… |
CVE-2026-42380 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions. |
CVE-2026-40783 | Critical | 9.9 | 2026-06-17 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. |
CVE-2026-40749 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. |
CVE-2026-40748 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. |
CVE-2026-40747 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. |
CVE-2026-40746 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. |
CVE-2026-40725 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions. |
CVE-2026-39596 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. |
CVE-2026-39589 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. |
CVE-2026-39529 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. |
CVE-2026-39438 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. |
CVE-2026-32967 | Critical | 9.1 | 2026-06-17 | Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. U… |
CVE-2026-32966 | Critical | 9.8 | 2026-06-17 | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinSch… |
CVE-2026-27429 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions. |
CVE-2026-27395 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. |
CVE-2026-27041 | Critical | 9.9 | 2026-06-17 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. |
CVE-2026-25470 | Critical | 10.0 | 2026-06-17 | Improper Control of Generation of Code ('Code Injection') vulnerability in ACPT ACPT (Pro) - Custom Post Types Plugin for WordPress allows Remote Code Inclusio… |
CVE-2026-25446 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. |
CVE-2026-24611 | Critical | 9.1 | 2026-06-17 | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. |
CVE-2026-22340 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions. |
CVE-2026-22332 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. |
CVE-2026-22327 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. |
CVE-2026-12440 | Critical | 9.6 | 2026-06-17 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via… |
CVE-2026-10094 | Critical | 9.8 | 2026-06-17 | A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attac… |
CVE-2025-69179 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions. |
CVE-2025-69129 | Critical | 10.0 | 2026-06-17 | Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. |
CVE-2025-69122 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions. |
CVE-2025-69108 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions. |
CVE-2025-60218 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions. |
CVE-2025-60205 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions. |
CVE-2024-52488 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions. |
CVE-2026-46978 | Critical | 10.0 | 2026-06-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easi… |
CVE-2026-46964 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions t… |
CVE-2026-46963 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions t… |
CVE-2026-46949 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec… |
CVE-2026-46946 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46945 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46944 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46933 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… |
CVE-2026-46930 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported v… |