Latest critical CVEs
Vulnerabilities rated critical (CVSS 9.0 or higher), newest first. More load as you scroll.
- CVE-2026-120322Termix-SSH Termix transferToHost path traversalTermix-SSH Termix
- CVE-2026-120283Linksys E8450 portal.cgi strcpy stack-based overflowLinksys E8450
- CVE-2026-120282WAVLINK WN536AX6-A protocol.csp host_black os command injectionWAVLINK WN536AX6-A
- CVE-2026-120281WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowWAVLINK WN536AX6-A
- CVE-2026-120280WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionWAVLINK WN536AX6-A
- CVE-2026-120279WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionWAVLINK WN536AX6-A
- CVE-2026-120277WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injectionWAVLINK WN536AX6-A
- CVE-2026-120276WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injectionWAVLINK WN536AX6-A
- CVE-2026-120240WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injectionWAVLINK WN553X1-B
- CVE-2026-120239WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injectionWAVLINK WN553X1-B
- CVE-2026-120238WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injectionWAVLINK WN553X1-B
- CVE-2026-62048WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerabilityLiquid Web / StellarWP BookIt
- CVE-2026-120338Prefab UI Pyodide sandbox escape to host RCEPrefectHQ prefab-ui
- CVE-2026-120232Horizon DataSys Reboot Restore Standard Kernel Driver shield.sys sub_23908 memory corruptionHorizon DataSys Reboot Restore Standard
- CVE-2026-120231WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injectionWAVLINK WN553X1-B
- CVE-2026-120230WAVLINK WN701AE ioos Web Backend del_vlan_group os command injectionWAVLINK WN701AE
- CVE-2026-120229WAVLINK WN553X1-B ioos sub_416B50 os command injectionWAVLINK WN553X1-B
- CVE-2026-120228WAVLINK WN553X1-B ioos Service sub_416D88 os command injectionWAVLINK WN553X1-B
- CVE-2026-120308Beta9 host filesystem exposure via volume path traversalbeam-cloud Beta9 gateway · beam-cloud Beta9 worker
- CVE-2026-120307Beta9 container escape via unvalidated sandbox file pathsbeam-cloud Beta9 worker
- CVE-2026-120306Beta9 build sandbox escape via chroot-only isolationbeam-cloud Beta9 worker
- CVE-2026-120227WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injectionWAVLINK WN701AE
- CVE-2026-120225Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversalOray Pugongying X5 Pro
- CVE-2026-120224Oray Pugongying X5 Pro API Authorization run_async_task improper authorizationOray Pugongying X5 Pro
- CVE-2026-120198WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injectionWAVLINK WL-WN530BE1-A
- CVE-2026-120197WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injectionWAVLINK WL-WN530HG4B
- CVE-2026-120196WAVLINK WN579X3-D wapi.cgi port_forward os command injectionWAVLINK WN579X3-D
- CVE-2026-120195WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injectionWAVLINK WL-WN579A3-A
- CVE-2026-120189D-Link DIR-505 TFTP Upload Filename tftpd mp_upload_file stack-based overflowD-Link DIR-505
- CVE-2026-118636Apache MINA: Unsafe Deserialization (CWE-502) in JavaNativeMessageDecoderApache Software Foundation Apache MINA
30 vulnerabilities loaded