Skip to main content
cve.nowby Sazabi
Rankings

Rankings: Worst CVEs of 2026-W44

The worst CVEs published or escalated Oct 26, 2026 to Nov 1, 2026, ranked by the cve.now Index as the week closed. Movement is against the week before. How the score works.

  1. 195Integer Overflow or Wraparound in GitLabGitLab · CVE-2026-97229KEVExploit publicFix availableAdded to KEV
  2. 292Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli · node +6 · CVE-2026-111497KEVExploit publicFix availableExploit published
  3. 392RCE via OOM corruptionPHP Group PHP · CVE-2026-109618KEVExploit publicNucleiFix availableAdded to KEV
  4. 492RCE via stale global statePHP Group PHP · CVE-2026-109619KEVFix availableAdded to KEV
  5. 588Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to privilege…Ivanti Connect Secure · CVE-2026-111357KEVNo patch listed yetAdded to KEV
  6. 685Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.Gitea · gitea.dev +1 · CVE-2026-60004KEVExploit publicNucleiFix availableExploit published
  7. 784net: skbuff: preserve shared-frag marker during coalescingLinux · CVE-2026-46300KEVExploit publicFix availableAdded to KEV
  8. 881ESX insufficient logging vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +2 · CVE-2026-41709KEVFix availableAdded to KEV
  9. 979Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of…Cisco Secure Firewall Adaptive Security Appliance (ASA) Sof… · CVE-2026-76418KEVNo patch listed yetAdded to KEV
  10. 1072Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434)Adobe Commerce · Adobe Magento Open Source · CVE-2026-48356KEVFix availableAdded to KEV
  11. 1168Security Advisory 0199Arista Networks VeloCloud Orchestrator · CVE-2026-114625KEVExploit publicFix availableExploit published
  12. 1259ipv4: free inet_opt and ireq_opt after an RCU grace periodLinux · CVE-2026-98432Exploit publicFix availableExploit published
  13. 1358joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryptionauthlib joserfc · joserfc · CVE-2026-119283Fix availablePublished
  14. 1457LMCache Unauthenticated RCE in multiprocess mode via pickle deserializationLMCache · CVE-2026-105192Exploit publicFix availableExploit published
  15. 1557Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'wpopal Opal Estate Pro – Property Management and Submission · CVE-2025-6934Exploit publicNucleiNo patch listed yetExploit published
  16. 1657Rapyd Admin 9.0.0 before 9.20.0 Hard-Coded Super-Admin Credentials via AuthSeederzofe rapyd-admin · CVE-2026-109566Exploit publicFix availableExploit published
  17. 1755Insecure permissions in wbpxre150 Shopping List v11.0 (versionCode 11) allows unauthorized attackers to invoke an exported component…CVE-2026-107028No patch listed yetPublished
  18. 1855Insecure permissions in LeafPad / Leaf Note v1.21 (versionCode 21) allows unauthorized attackers to arbitrarily read another user's note…CVE-2026-107034No patch listed yetPublished
  19. 1953Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode 2026080101/versionName…CVE-2026-107039No patch listed yetPublished
  20. 2053Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging…CVE-2026-107047No patch listed yetPublished
  21. 2153An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via supplying a crafted URI…CVE-2026-107049No patch listed yetPublished
  22. 2253Nuxt Ollama: public runtime configuration discloses the configured cloud API keythoda-dev nuxt-ollama · nuxt-ollama · CVE-2026-59158Fix availablePublished
  23. 2352pac4j-jwt JwtAuthenticator Authentication Bypasspac4j-jwt · org.pac4j:pac4j-jwt · CVE-2026-29000Exploit publicFix availableExploit published
  24. 2450Langflow OSS is affected by multiple vulnerabilitiesIBM Langflow OSS · CVE-2026-93680Exploit publicFix availablePublished
  25. 2550Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any…kyverno · github.com/kyverno/kyverno · CVE-2026-54523Exploit publicFix availableExploit published

2026-W45