Critical-severity CVEs (page 7)
Page 7 of 100 — critical-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-12943 | Critical | 9.8 | 2026-07-30 | IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could all… |
CVE-2026-12118 | Critical | 9.8 | 2026-07-30 | IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserializa… |
CVE-2026-13379 | Critical | 9.1 | 2026-07-30 | The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to cause persistent DNS state pollution or a service crash via a cr… |
CVE-2026-12940 | Critical | 9.8 | 2026-07-30 | IBM Langflow OSS 1.0.0 through 1.10.1 are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Pro… |
CVE-2026-52680 | Critical | 9.8 | 2026-07-30 | Apache Kyuubi REST batch multipart upload handling uses the client-supplied multipart filename when creating a temporary uploaded resource. A remote attacker w… |
CVE-2026-4978 | Critical | 9.8 | 2026-07-30 | Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in UMAI Vision Traffic Analysis System allows SQL Injection… |
CVE-2026-28812 | Critical | 9.8 | 2026-07-30 | UserManager lack of checks allows impersonation in Apache JSPWiki up to 2.12.3 which may allow attackers to escalate privileges. Users are recommended to upgra… |
CVE-2026-28323 | Critical | 9.8 | 2026-07-30 | SolarWinds Web Help Desk is found to be affected by a SAML authentication bypass vulnerability. This requires the SAML 2.0 authentication method to be enabled. |
CVE-2026-15435 | Critical | 9.8 | 2026-07-30 | IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.27 could allow a remote attacker to traverse directories on the system. An a… |
CVE-2026-11707 | Critical | 9.3 | 2026-07-30 | IBM Tivoli System Automation Application Manager 4.1 and IBM WebSphere Application Server is affected by a cross-site scripting vulnerability in the administra… |
CVE-2026-59310 | Critical | 9.8 | 2026-07-30 | VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to ex… |
CVE-2026-59309 | Critical | 9.8 | 2026-07-30 | VMware vCenter contains an authentication bypass vulnerability in the VMware Directory Service. A malicious actor with network access to vCenter may exploit th… |
CVE-2026-54363 | Critical | 9.1 | 2026-07-30 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by explo… |
CVE-2026-47876 | Critical | 9.3 | 2026-07-30 | VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adapter. A malicious actor with local administrative privileges on a vi… |
CVE-2026-17544 | Critical | 9.8 | 2026-07-30 | Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5… |
CVE-2026-17543 | Critical | 9.8 | 2026-07-30 | Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* bef… |
CVE-2026-7849 | Critical | 9.8 | 2026-07-30 | Due to improper neutralization of special elements, an unauthenticated remote attacker is able to inject a command into the system configuration which is subse… |
CVE-2026-44108 | Critical | 9.8 | 2026-07-30 | Due to a flaw in the execution order of scripts during shutdown, the firewall is terminated prematurely during system shutdown. This creates a temporary window… |
CVE-2026-44104 | Critical | 9.8 | 2026-07-30 | The firmware update process for the basemodule of the charging controller only validates the CRC32 checksum without cryptographic signature verification. This… |
CVE-2026-44101 | Critical | 9.8 | 2026-07-30 | Due to missing authentication the CHARX OCPP Agent service allows an unauthenticated remote attacker to reconfigure the backend connection. This can lead to De… |
CVE-2026-44100 | Critical | 9.4 | 2026-07-30 | The CHARX JupiCore service allows an unauthenticated remote attacker to reconfigure charging points. This can lead to disclosure of charging point UIDs, Denial… |
CVE-2026-44092 | Critical | 9.1 | 2026-07-30 | An unauthenticated remote attacker can inject malicious input into the ModbusServer application because it does not validate the input it fetches from MQTT. Th… |
CVE-2026-44091 | Critical | 9.1 | 2026-07-30 | An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration… |
CVE-2026-44090 | Critical | 9.8 | 2026-07-30 | Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This… |
CVE-2026-58066 | Critical | 9.8 | 2026-07-30 | Rocket.Chat's SAML SSO before versions 8.7.0, 8.6.1, 8.5.2, 8.4.5, 8.3.7, 8.2.7, 8.1.7, 8.0.8, and 7.10.14 verified XML signatures but did not bind the validat… |
CVE-2026-58046 | Critical | 9.9 | 2026-07-30 | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Pl… |
CVE-2026-14602 | Critical | 9.0 | 2026-07-30 | The Remote API WordPress plugin through 0.2 does not authenticate a request before deserializing user-supplied input, allowing unauthenticated attackers to inj… |
CVE-2026-16610 | Critical | 9.8 | 2026-07-30 | The Admin and Site Enhancements (ASE) Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 8.9.0 via the recur… |
CVE-2026-48449 | Critical | 10.0 | 2026-07-30 | Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curren… |
CVE-2026-18015 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a cra… |
CVE-2026-18002 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pr… |
CVE-2026-17991 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in AI in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-17990 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17987 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Notifications in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… |
CVE-2026-17947 | Critical | 9.6 | 2026-07-30 | Use after free in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2026-17940 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Picture-in-Picture in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromis… |
CVE-2026-17924 | Critical | 9.6 | 2026-07-30 | Use after free in DNS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandb… |
CVE-2026-17865 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pot… |
CVE-2026-17856 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to po… |
CVE-2026-17855 | Critical | 9.6 | 2026-07-30 | Race in DevTools in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17848 | Critical | 9.6 | 2026-07-30 | Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file… |
CVE-2026-17847 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape v… |
CVE-2026-17837 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17834 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proc… |
CVE-2026-17832 | Critical | 9.6 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17804 | Critical | 9.6 | 2026-07-30 | Use after free in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17803 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer… |
CVE-2026-17801 | Critical | 9.6 | 2026-07-30 | Out of bounds read and write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted H… |
CVE-2026-17768 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17758 | Critical | 9.6 | 2026-07-30 | Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2026-17749 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a maliciou… |
CVE-2026-17738 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer proce… |
CVE-2026-17727 | Critical | 9.6 | 2026-07-30 | Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted… |
CVE-2026-17726 | Critical | 9.6 | 2026-07-30 | Integer overflow in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HT… |
CVE-2026-17721 | Critical | 9.6 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page… |
CVE-2026-17718 | Critical | 9.6 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr… |
CVE-2026-17717 | Critical | 9.6 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (C… |
CVE-2026-17713 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Accessibility in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised th… |
CVE-2026-17711 | Critical | 9.6 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2026-17710 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in MHTML in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to pote… |
CVE-2026-17709 | Critical | 9.6 | 2026-07-30 | Race in Downloads in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2026-17708 | Critical | 9.6 | 2026-07-30 | Use after free in Audio in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17704 | Critical | 9.6 | 2026-07-30 | Use after free in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17701 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer p… |
CVE-2026-17697 | Critical | 9.6 | 2026-07-30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr… |
CVE-2026-17695 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a cr… |
CVE-2026-17692 | Critical | 9.6 | 2026-07-30 | Use after free in DataTransfer in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenti… |
CVE-2026-17691 | Critical | 9.6 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted… |
CVE-2026-17688 | Critical | 9.6 | 2026-07-30 | Use after free in Input in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17687 | Critical | 9.6 | 2026-07-30 | Type Confusion in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17684 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the r… |
CVE-2026-17682 | Critical | 9.6 | 2026-07-30 | Integer overflow in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2026-17681 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Web Authentication in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromis… |
CVE-2026-17680 | Critical | 9.6 | 2026-07-30 | Heap buffer overflow in Color in Google Chrome on ChromeOS prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potenti… |
CVE-2026-17676 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to… |
CVE-2026-17675 | Critical | 9.6 | 2026-07-30 | Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform… |
CVE-2026-17673 | Critical | 9.6 | 2026-07-30 | Integer overflow in QUIC in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sa… |
CVE-2026-17672 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer pro… |
CVE-2026-17671 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process… |
CVE-2026-17670 | Critical | 9.6 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17669 | Critical | 9.6 | 2026-07-30 | Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape… |
CVE-2026-17666 | Critical | 9.1 | 2026-07-30 | Cryptographic Flaw in Enterprise in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to bypass discretionary access co… |
CVE-2026-17656 | Critical | 9.6 | 2026-07-30 | Use after free in Ozone in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chr… |
CVE-2026-17655 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape v… |
CVE-2026-17652 | Critical | 9.6 | 2026-07-30 | Use after free in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a san… |
CVE-2026-17651 | Critical | 9.6 | 2026-07-30 | Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbo… |
CVE-2025-69943 | Critical | 9.8 | 2026-07-29 | kishan0725 Hospital Management System 4.0 is vulnerale to SQL Injection in get_doctor.php via the parameters doctor and specilizationid. |
CVE-2025-69942 | Critical | 9.8 | 2026-07-29 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /hms/doctor/view-patient.php?viewid=1. |
CVE-2025-67404 | Critical | 9.8 | 2026-07-29 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in save_stud.php via the parameters fname, lname, and student_class. |
CVE-2025-67403 | Critical | 9.8 | 2026-07-29 | Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in update_class.php via the parameter class_name. |
CVE-2025-65340 | Critical | 9.8 | 2026-07-29 | kishan0725 Hospital Management System 4.0 is vulnerable to SQL Injection in /betweendates-detailsreports.php. |
CVE-2026-67429 | Critical | 10.0 | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.6, image.download and related file-writing modules use caller-controlle… |
CVE-2026-67426 | Critical | 9.3 | 2026-07-29 | Flyto2 Core is an execution kernel for automation and AI-agent workflows. Prior to 2.26.7, the standalone flyto-verification service in src/core/verification_s… |
CVE-2026-16326 | Critical | 10.0 | 2026-07-29 | In consul-mcp-server, versions 0.1.0 up to 0.1.3 did not properly isolate session state in stateless mode, which may allow one client's Consul authentication t… |
CVE-2026-14529 | Critical | 9.4 | 2026-07-29 | IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 traditional is vulnerable to server-side… |
CVE-2026-41939 | Critical | 9.8 | 2026-07-29 | Care Everywhere Gateway 14.3.10 contains a hard-coded credentials vulnerability in the bundled WildFly 8.2.0.Final management interface that allows unauthentic… |
CVE-2026-54680 | Critical | 9.9 | 2026-07-29 | Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in… |
CVE-2026-67191 | Critical | 9.8 | 2026-07-29 | Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the… |
CVE-2026-60113 | Critical | 9.8 | 2026-07-29 | AMMOS Instrument Toolkit (AIT) Deep Space Network (DSN) Interface before 2.2.2 contains a missing authentication vulnerability in the Space Link Extension (SLE… |
CVE-2026-60112 | Critical | 9.8 | 2026-07-29 | AMMOS Instrument Toolkit (AIT) GUI before 2.5.1 contains a missing authentication vulnerability that allows any unauthenticated network attacker to obtain a va… |