Critical-severity CVEs (page 47)
Page 47 of 100 — critical-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-49767 | Critical | 9.8 | 2026-06-17 | Unauthenticated Broken Authentication in wpForo Forum <= 3.1.0 versions. |
CVE-2026-49107 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Thrive Apprentice < 10.8.10.2 versions. |
CVE-2026-49084 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetEngine < 3.8.9.1 versions. |
CVE-2026-49080 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in wpDataTables <= 7.3.6 versions. |
CVE-2026-49079 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetSearch <= 3.5.17 versions. |
CVE-2026-49076 | Critical | 9.3 | 2026-06-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crocoblock JetEngine jet-engine allows Blind SQL Injectio… |
CVE-2026-49075 | Critical | 9.8 | 2026-06-17 | Contributor PHP Object Injection in JetEngine <= 3.8.9.1 versions. |
CVE-2026-49058 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in LoginPress Pro <= 6.2.2 versions. |
CVE-2026-48875 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in JetSmartFilters <= 3.8.1 versions. |
CVE-2026-48781 | Critical | 9.9 | 2026-06-17 | Postiz is an AI social media scheduling tool. In versions prior to 2.21.8, the Skool integration callback signed an attacker-controlled JSON blob into a sessio… |
CVE-2026-48745 | Critical | 9.3 | 2026-06-17 | Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and belo… |
CVE-2026-48616 | Critical | 9.3 | 2026-06-17 | Rocket.Chat versions <8.5.1, 8.4.4, 8.3.6, 8.2.6, 8.1.6, 8.0.7, 7.13.9, 7.10.13 has an access control vulnerability in Livechat files. Protected file downloads… |
CVE-2026-48055 | Critical | 10.0 | 2026-06-17 | Streambert is a cross-platform Electron Desktop App to stream and download any video media. In versions 2.4.0 and prior, a high-severity Zip Slip vulnerability… |
CVE-2026-42380 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in AI Lab < 5.4.2 versions. |
CVE-2026-40783 | Critical | 9.9 | 2026-06-17 | Contributor Remote Code Execution (RCE) in Blocksy Companion Pro <= 2.1.37 versions. |
CVE-2026-40749 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Charity Zone <= 1.1.1 versions. |
CVE-2026-40748 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Kids Gift Shop <= 0.5.4 versions. |
CVE-2026-40747 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Ecommerce Zone <= 0.9.7 versions. |
CVE-2026-40746 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurant Zone <= 0.7.8 versions. |
CVE-2026-40725 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in WooCommerce Product Filters < 2.0.6 versions. |
CVE-2026-39596 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in Blocksy Companion Pro < 2.1.29 versions. |
CVE-2026-39589 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Webenvo <= 0.0.6 versions. |
CVE-2026-39529 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Elementra <= 1.0.9 versions. |
CVE-2026-39438 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in ListingPro <= 2.9.10 versions. |
CVE-2026-32967 | Critical | 9.1 | 2026-06-17 | Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. U… |
CVE-2026-32966 | Critical | 9.8 | 2026-06-17 | DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinSch… |
CVE-2026-27429 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Nifty <= 1.4.1 versions. |
CVE-2026-27395 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in Support Board < 3.8.9 versions. |
CVE-2026-27041 | Critical | 9.9 | 2026-06-17 | Contributor Arbitrary File Upload in Unlimited Elements for Elementor (Premium) <= 2.0.6 versions. |
CVE-2026-25470 | Critical | 10.0 | 2026-06-17 | Unauthenticated Remote Code Execution (RCE) in ACPT (Pro) - Custom Post Types Plugin for WordPress <= 2.0.47 versions. |
CVE-2026-25446 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in WishList Member X <= 3.29.0 versions. |
CVE-2026-24611 | Critical | 9.1 | 2026-06-17 | Unauthenticated Broken Access Control in MetForm Pro <= 3.9.1 versions. |
CVE-2026-22340 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in WPJobster <= 6.3.5 versions. |
CVE-2026-22332 | Critical | 9.3 | 2026-06-17 | Unauthenticated SQL Injection in Tutor LMS Pro <= 3.9.6 versions. |
CVE-2026-22327 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions. |
CVE-2026-12440 | Critical | 9.6 | 2026-06-17 | Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via… |
CVE-2026-10094 | Critical | 9.8 | 2026-06-17 | A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attac… |
CVE-2025-69179 | Critical | 9.8 | 2026-06-17 | Unauthenticated Privilege Escalation in Support Ticket Management System <= 1.9 versions. |
CVE-2025-69129 | Critical | 10.0 | 2026-06-17 | Unauthenticated Arbitrary File Upload in WordPress & WooCommerce Scraper Plugin, Import Data from Any Site <= 1.0.7 versions. |
CVE-2025-69122 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in SeaFood Company <= 1.4 versions. |
CVE-2025-69108 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in Hot Coffee <= 1.7 versions. |
CVE-2025-60218 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in PT Luxa Addons <= 1.2.2 versions. |
CVE-2025-60205 | Critical | 9.8 | 2026-06-17 | Unauthenticated PHP Object Injection in ThemeREX Addons <= 2.36.1.1 versions. |
CVE-2024-52488 | Critical | 9.9 | 2026-06-17 | Subscriber Arbitrary File Upload in Grip <= 1.0.9 versions. |
CVE-2026-46978 | Critical | 10.0 | 2026-06-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon). The supported version that is affected is 11.4. Easi… |
CVE-2026-46964 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions t… |
CVE-2026-46963 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions t… |
CVE-2026-46949 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affec… |
CVE-2026-46946 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46945 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46944 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2… |
CVE-2026-46933 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are… |
CVE-2026-46930 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle In-Memory Cost Management for Discrete Industries product of Oracle E-Business Suite (component: Internal Operations). Supported v… |
CVE-2026-46919 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager). Supported versions that are affected are 17… |
CVE-2026-46918 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Internal Operations). Supported versions… |
CVE-2026-46913 | Critical | 9.3 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that are affected are… |
CVE-2026-46912 | Critical | 9.3 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). Supported versions that are affected are 9… |
CVE-2026-46911 | Critical | 9.6 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Project Costing product of Oracle JD Edwards (component: Job Costing). The supported version that is affected i… |
CVE-2026-46910 | Critical | 9.1 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46909 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46908 | Critical | 9.9 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Accounts Payable product of Oracle JD Edwards (component: Accounts Payable). The supported version that is affe… |
CVE-2026-46907 | Critical | 9.9 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Order Promising product of Oracle JD Edwards (component: Order Promising Integration). The supported version th… |
CVE-2026-46906 | Critical | 9.6 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46905 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime Security). Supported versions that are affected are 9… |
CVE-2026-46904 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46902 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46901 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46900 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46899 | Critical | 9.6 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46897 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46896 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46895 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: Core). Supported versions that are affected are… |
CVE-2026-46893 | Critical | 9.9 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne General Ledger product of Oracle JD Edwards (component: E1 Foundation). The supported version that is affected… |
CVE-2026-46892 | Critical | 9.1 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD Edwards (component: Human Resources). The supported version tha… |
CVE-2026-46890 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily e… |
CVE-2026-46889 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily e… |
CVE-2026-46887 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily e… |
CVE-2026-46884 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing). Supported versions that are affected are 17.0-26.5. Easily e… |
CVE-2026-46883 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46882 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46881 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46880 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46879 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46878 | Critical | 9.8 | 2026-06-17 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure Security). Supported versions that are… |
CVE-2026-46875 | Critical | 9.1 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Deployment Library). Supported versions that are… |
CVE-2026-46872 | Critical | 9.0 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Install). Supported versions that are affected a… |
CVE-2026-46861 | Critical | 9.6 | 2026-06-17 | Vulnerability in the MySQL NDB Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.11-8.0.46, 8… |
CVE-2026-46860 | Critical | 9.8 | 2026-06-17 | Vulnerability in the MySQL Router product of Oracle MySQL (component: Router: General). Supported versions that are affected are 9.0.0-9.7.0. Easily exploitab… |
CVE-2026-46859 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). The supported version that is affected is 9.3.6. Easily exploitab… |
CVE-2026-46858 | Critical | 9.1 | 2026-06-17 | Vulnerability in the APM - Application Performance Management product of Oracle Enterprise Manager (component: JADM, JVM Diagnostics). Supported versions that… |
CVE-2026-46857 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service). Supported versions t… |
CVE-2026-46856 | Critical | 9.6 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are af… |
CVE-2026-46855 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are af… |
CVE-2026-46854 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Target Management). Supported versions that are… |
CVE-2026-46853 | Critical | 9.6 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are af… |
CVE-2026-46852 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metadata Plugin). Supported versions that are af… |
CVE-2026-46850 | Critical | 9.9 | 2026-06-17 | Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell for VS Code). The supported version that is affected is 2026.2.0+9.6.1. Easily exp… |
CVE-2026-46847 | Critical | 9.9 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools). Supported versions that are affected are 12.2.1.4… |
CVE-2026-46846 | Critical | 10.0 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12… |
CVE-2026-46845 | Critical | 9.8 | 2026-06-17 | Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework). Supported versions that are affected are 12… |