| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-100382 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Wikimedia Fo | CRITICAL | 10.0 | NVD | 2026-09-25 |
| CVE-2026-97163 | Joomla Extension - lomart.fr - Unauthenticated remote code installation in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29 | CRITICAL | 10.0 | NVD | 2026-09-26 |
| CVE-2026-96587 | The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These cr | CRITICAL | 10.0 | NVD | 2026-09-29 |
| CVE-2026-71379 | The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO | CRITICAL | 10.0 | NVD | 2026-09-29 |
| CVE-2026-96349 | Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions. | CRITICAL | 10.0 | NVD | 2026-09-30 |
| CVE-2026-76570 | Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables 1.21.1 - The fron | CRITICAL | 10.0 | NVD | 2026-09-30 |
| CVE-2026-102427 | Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader. | CRITICAL | 10.0 | NVD | 2026-09-30 |
| CVE-2026-55107 | Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted | CRITICAL | 10.0 | NVD | 2026-09-30 |
| CVE-2026-101148 | The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, tre | CRITICAL | 10.0 | NVD | 2026-10-01 |
| CVE-2026-55393 | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo | CRITICAL | 10.0 | NVD | 2026-10-01 |
| CVE-2026-69085 | SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with | CRITICAL | 10.0 | GitHub | 2026-10-01 |
| CVE-2026-92940 | vm2 exposes host HTTPS credentials and TLS traffic through globalAgent | CRITICAL | 10.0 | GitHub | 2026-10-01 |
| CVE-2026-92937 | vm2: GHSA-m283-3h24-438v fix bypass leads to host RCE via call/apply indirection | CRITICAL | 10.0 | GitHub | 2026-10-01 |
| CVE-2026-92941 | vm2 NodeVM can replace the host process TLS trust store | CRITICAL | 10.0 | GitHub | 2026-10-01 |
| CVE-2025-53767 | Azure OpenAI Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-08-12 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-56191 | Microsoft Exchange Online Tampering Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-57106 | Data Quality Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58275 | Azure DNS Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58630 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-62825 | Azure Key Vault Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-66803 | Azure Cosmos DB Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2025-55241 | Azure Entra ID Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-09-09 |
| CVE-2025-54914 | Azure Networking Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-09-09 |
| CVE-2024-24576 | Rusts's `std::process::Command` did not properly escape arguments of batch files on Windows | CRITICAL | 10.0 | Microsoft | 2024-04-09 |
| CVE-2025-62168 | Squid vulnerable to information disclosure via authentication credential leakage in error handling | CRITICAL | 10.0 | Microsoft | 2025-10-14 |
| CVE-2025-59503 | Azure Compute Resource Provider Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2025-10-14 |
| CVE-2022-49043 | xmlXIncludeAddNode in xinclude.c in libxml2 before 2.11.0 has a use-after-free. | CRITICAL | 10.0 | Microsoft | 2025-01-14 |
| CVE-2026-82377 | Missing Authorization in Apache Roller 6.1.5 allows an authenticated user to read, modify, or delete weblog content belo | CRITICAL | 9.9 | NVD | 2026-09-28 |
| CVE-2026-85526 | Path traversal in the Btrfs storage driver (unpackVolume) in Canonical LXD on Linux allows an authenticated user with in | CRITICAL | 9.9 | NVD | 2026-09-28 |
| CVE-2026-87799 | Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, | CRITICAL | 9.9 | NVD | 2026-09-28 |
| CVE-2026-84154 | A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release | CRITICAL | 9.9 | NVD | 2026-09-29 |
| CVE-2026-79901 | In deployments using BoKS keytab management, affected versions of boks_keytabmd generate Active Directory service-accoun | CRITICAL | 9.9 | NVD | 2026-10-01 |
| CVE-2026-96658 | A flaw was found in Foreman. An authenticated attacker with low-level permissions can achieve remote code execution (RCE | CRITICAL | 9.9 | NVD | 2026-10-01 |
| CVE-2026-92948 | vm2: NodeVM builtin allowlist bypass via node:test.run() execArgv allows sandbox escape | CRITICAL | 9.9 | GitHub | 2026-10-01 |
| CVE-2026-92951 | vm2 Custom Module Resolver Can Bypass the External Package Allowlist by Loading a Colliding Host Package | CRITICAL | 9.9 | GitHub | 2026-10-01 |
| CVE-2026-92957 | vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process | CRITICAL | 9.9 | GitHub | 2026-10-01 |
| CVE-2026-92938 | vm2 allows a sandboxed plugin to execute native code through `node:sqlite` | CRITICAL | 9.9 | GitHub | 2026-10-01 |
| CVE-2026-92939 | vm2 crypto builtin loads attacker native code through setEngine | CRITICAL | 9.9 | GitHub | 2026-10-01 |
| CVE-2025-49747 | Azure Machine Learning Elevation of Privilege Vulnerability | CRITICAL | 9.9 | Microsoft | 2025-07-08 |