CVE Database
1963 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-79898 | CRITICAL | 9.1 | Fortra BoKS Manager contains a command injection vulnerability in crlserver. An authenticated user a… | — |
|
2026-10-01 |
| CVE-2026-62071 | CRITICAL | 9.3 | Unauthenticated SQL Injection in WordPress File Upload <= 5.1.10 versions. | — |
|
2026-10-01 |
| CVE-2026-103752 | CRITICAL | 9.8 | Unauthenticated Privilege Escalation in Authorizer <= 3.15.3 versions. | — |
|
2026-10-01 |
| CVE-2026-79901 | CRITICAL | 9.9 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Dire… | — |
|
2026-10-01 |
| CVE-2026-103264 | CRITICAL | 9.1 | Fleet versions before 4.87.0 contain an authentication bypass vulnerability in the device API that a… | — |
|
2026-10-01 |
| CVE-2026-103255 | CRITICAL | 9.0 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a path… | — |
|
2026-10-01 |
| CVE-2026-103248 | CRITICAL | 9.0 | n8n versions before 1.123.80, from 2.0.0 before 2.39.6, and from 2.40.0 before 2.40.1 contain a filt… |
T1190
T1203
|
|
2026-10-01 |
| CVE-2026-103244 | CRITICAL | 9.8 | ground-station versions before 0.8.0 contain an authentication bypass vulnerability in the setup.res… | — |
|
2026-10-01 |
| CVE-2026-75957 | CRITICAL | 9.8 | The Ultimate Multisite – WordPress Multisite SaaS & WaaS Platform plugin for WordPress is vulnerable… | — |
|
2026-10-01 |
| CVE-2026-15989 | CRITICAL | 9.8 | The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Privilege Escalatio… | — |
|
2026-10-01 |
| CVE-2025-41753 | CRITICAL | 9.8 | The object name of a dynamically created BACnet File Object is interpreted as a file path without su… |
T1078
T1548
|
|
2026-10-01 |
| CVE-2026-101148 | CRITICAL | 10.0 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its … |
T1078
T1548
|
|
2026-10-01 |
| CVE-2026-92966 | CRITICAL | 9.1 | The The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for Word… | — |
|
2026-10-01 |
| CVE-2026-82829 | CRITICAL | 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Hidden Functionality vulnerability… |
T1190
T1203
|
|
2026-10-01 |
| CVE-2026-82827 | CRITICAL | 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Ke… | — |
|
2026-10-01 |
| CVE-2026-82825 | CRITICAL | 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critica… | — |
|
2026-10-01 |
| CVE-2026-82824 | CRITICAL | 9.8 | Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that … | — |
|
2026-10-01 |
| CVE-2026-92173 | CRITICAL | 9.1 | Prior to v74.0.0.878.1682 of Meta Horizon OS, MediaSyncJobReceiver could be induced to send a privil… | — |
|
2026-09-30 |
| CVE-2026-51871 | CRITICAL | 9.8 | Devika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner/runn… | — |
|
2026-09-30 |
| CVE-2026-51870 | CRITICAL | 9.8 | DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execu… | — |
|
2026-09-30 |