| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-86152 | A flaw has been found in Tenda CP3 27.5.57.101. The impacted element is the function CAutoAddWifi::ThreadProc of the fil | CRITICAL | 10.0 | NVD | 2026-09-06 |
| CVE-2026-86218 | N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. | CRITICAL | 10.0 | NVD | 2026-09-06 |
| CVE-2026-75650 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability tha | CRITICAL | 10.0 | NVD | 2026-09-07 |
| CVE-2026-44756 | A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditio | CRITICAL | 10.0 | NVD | 2026-09-08 |
| CVE-2026-82004 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co | CRITICAL | 10.0 | NVD | 2026-09-08 |
| CVE-2026-28659 | In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could | CRITICAL | 10.0 | NVD | 2026-09-08 |
| CVE-2026-49883 | In checkReadPermission of PermissionsManager.java, there is a possible way to monitor sensitive device state data due to | CRITICAL | 10.0 | NVD | 2026-09-08 |
| CVE-2026-79696 | A Code Injection vulnerability in adk web in Google Cloud Agent Development Kit (ADK) for Python versions 2.0.0 through | CRITICAL | 10.0 | NVD | 2026-09-09 |
| CVE-2026-85978 | An unauthenticated remote code execution vulnerability exists in the Policy Manager console of Akana API Platform. A pat | CRITICAL | 10.0 | NVD | 2026-09-09 |
| CVE-2026-87827 | Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfac | CRITICAL | 10.0 | NVD | 2026-09-09 |
| CVE-2026-77770 | The miniOrange 2FA WordPress plugin before 6.3.1, miniOrange 2FA WordPress plugin before 19.3 does not require a valid | CRITICAL | 10.0 | NVD | 2026-09-10 |
| CVE-2026-14560 | The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a cl | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-80462 | A vulnerability in the Chef Automate API gateway and identity validation path may allow an unauthenticated actor to gain | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-87985 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using A | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-87986 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using s | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-87987 | An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using e | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-87988 | An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through comma | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-82617 | The two built-in name-finder patterns exposed by
opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX_NAME_FIND | CRITICAL | 10.0 | NVD | 2026-09-11 |
| CVE-2026-59971 | MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution (DNS Rebinding / | CRITICAL | 10.0 | GitHub | 2026-09-11 |
| CVE-2026-85061 | MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize() via Live NamedNodeMap Removal Skip | CRITICAL | 10.0 | GitHub | 2026-09-08 |
| CVE-2026-70352 | Azure AI Language Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-83711 | Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-09-08 |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65801 | Microsoft Exchange Online Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65816 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69502 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69555 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69836 | Microsoft Entra ID Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-56191 | Microsoft Exchange Online Tampering Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-57106 | Data Quality Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58275 | Azure DNS Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58630 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-62825 | Azure Key Vault Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-66803 | Azure Cosmos DB Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-32169 | Azure Cloud Shell Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-03-10 |
| CVE-2026-45480 | Azure Active Directory Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-06-09 |