Browse by product

Browse by weakness

Recent Critical & High-Severity CVEs

• CVE-2026-65145: NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentica[CRITICAL 10.0]
• CVE-2026-105781: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in a[CRITICAL 10.0]
• CVE-2026-61564: AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint `install/[CRITICAL 10.0]
• CVE-2026-61567: AVideo is a video-sharing Platform. Prior to 8.1.0, the live-streaming endpoint `view/videosListToLi[CRITICAL 10.0]
• CVE-2026-61991: Unauthenticated Remote Code Execution (RCE) in AjaxLoadMore Cache <= 3.1.1 versions.[CRITICAL 10.0]
• CVE-2026-84295: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 o[CRITICAL 10.0]
• CVE-2026-61738: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations nee[CRITICAL 10.0]
• CVE-2026-112816: Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 b[CRITICAL 10.0]
• CVE-2026-61826: Bazarr is a companion application to Sonarr and Radarr. Prior to 1.5.7-beta.14, the `api_ns_plex` na[CRITICAL 10.0]
• CVE-2026-120338: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to Web[CRITICAL 10.0]
• CVE-2026-97229: Integer Overflow or Wraparound in GitLab[CRITICAL 10.0]
• CVE-2026-110264: Integer Overflow or Wraparound in GitLab[CRITICAL 10.0]
• CVE-2026-110063: VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-83938: Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-96207: Microsoft Partner Center Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-97785: AAD App Proxy Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-94603: Podman: The `podman run` command can be instructed to disable almost all sandboxing by image annotat[CRITICAL 10.0]
• CVE-2025-65041: Microsoft Partner Center Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2025-65037: Azure Container Apps Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2025-53767: Azure OpenAI Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-62874: Azure Billing Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69843: Microsoft Fabric Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69865: Microsoft Container Registry Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-70200: Azure Logic Apps Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-70352: Azure AI Language Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-83711: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-83944: Azure Logic Apps Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-85889: Azure AI Foundry Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-56162: Azure SQL Database Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-63508: Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65667: Microsoft Teams Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65770: Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-65801: Microsoft Exchange Online Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-65816: Azure Arc Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69502: Azure SQL Database Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69555: Azure Arc Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-69836: Microsoft Entra ID Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-45480: Azure Active Directory Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-48567: Azure HorizonDB Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2025-49752: Azure Bastion Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-39821: Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna[CRITICAL 10.0]
• CVE-2026-42960: Possible cache poisoning via promiscuous records for the authority section[CRITICAL 10.0]
• CVE-2026-23652: Microsoft Power Pages Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-40412: Azure Orbital Spatio Remote Code Execution Vulnerability[CRITICAL 10.0]
• CVE-2026-41104: Microsoft Planetary Computer Pro Information Disclosure Vulnerability[CRITICAL 10.0]
• CVE-2026-42822: Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-42826: Azure DevOps Information Disclosure Vulnerability[CRITICAL 10.0]
• CVE-2026-42901: Microsoft Entra ID Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-47280: Azure Resource Manager Elevation of Privilege Vulnerability[CRITICAL 10.0]
• CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh[CRITICAL 10.0]