| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-81735 | startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was g | CRITICAL | 10.0 | NVD | 2026-08-27 |
| CVE-2026-18885 | ServiceNow has remediated a code injection vulnerability that was identified in the ServiceNow AI platform. This vulnera | CRITICAL | 10.0 | NVD | 2026-08-27 |
| CVE-2026-18886 | ServiceNow has remediated an improper access control vulnerability that was identified in the ServiceNow AI platform. Th | CRITICAL | 10.0 | NVD | 2026-08-27 |
| CVE-2026-6876 | ServiceNow has remediated a sandbox escape security issue that was identified in the ServiceNow AI Platform. This securi | CRITICAL | 10.0 | NVD | 2026-08-27 |
| CVE-2026-74820 | ServiceNow has remediated a SQL injection vulnerability that was identified in in the ServiceNow AI platform. This vulne | CRITICAL | 10.0 | NVD | 2026-08-27 |
| CVE-2026-82222 | Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP GiveWP allows Object Injection.
This issue af | CRITICAL | 10.0 | NVD | 2026-08-28 |
| CVE-2026-54745 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the | CRITICAL | 10.0 | NVD | 2026-08-28 |
| CVE-2026-82456 | argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller c | CRITICAL | 10.0 | NVD | 2026-08-29 |
| CVE-2026-82970 | Unrestricted Upload of File with Dangerous Type vulnerability in WP Legal Pages WP Cookie Notice for GDPR, CCPA & ePriva | CRITICAL | 10.0 | NVD | 2026-08-31 |
| CVE-2026-81779 | Improper Validation of Specified Quantity in Input vulnerability in Silk Themes Newspapers X allows Malicious Software I | CRITICAL | 10.0 | NVD | 2026-08-31 |
| CVE-2026-81780 | Unauthenticated Arbitrary File Upload in Hash Form <= 1.4.2 versions. | CRITICAL | 10.0 | NVD | 2026-08-31 |
| CVE-2026-84147 | This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation | CRITICAL | 10.0 | NVD | 2026-09-01 |
| CVE-2026-76657 | Vulnerabilities have been identified in the API of HPE Networking Fabric Composer that could potentially allow an unauth | CRITICAL | 10.0 | NVD | 2026-09-01 |
| CVE-2026-76658 | A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthentica | CRITICAL | 10.0 | NVD | 2026-09-01 |
| CVE-2026-83548 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended altern | CRITICAL | 10.0 | NVD | 2026-09-01 |
| CVE-2026-4357 | The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as wel | CRITICAL | 10.0 | NVD | 2026-09-02 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-56191 | Microsoft Exchange Online Tampering Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-57106 | Data Quality Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58275 | Azure DNS Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58630 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-62825 | Azure Key Vault Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-66803 | Azure Cosmos DB Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2026-48567 | Azure HorizonDB Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |
| CVE-2026-32186 | Microsoft Bing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32213 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33105 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33107 | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33819 | Microsoft Bing Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-35431 | Microsoft Entra ID Entitlement Management Spoofing Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2017-20230 | Storable versions before 3.05 for Perl has a stack overflow | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-39821 | Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42960 | Possible cache poisoning via promiscuous records for the authority section | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-46595 | Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-40412 | Azure Orbital Spatio Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-23652 | Microsoft Power Pages Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-47280 | Azure Resource Manager Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42822 | Azure Local Disconnected Operations (ALDO) Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |
| CVE-2026-42826 | Azure DevOps Information Disclosure Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-05-12 |