Skip to main content
cve.nowby Sazabi
Back

Rankings: This week's worst-case CVEs

The CVEs that could do the most harm once exploited, published or escalated in the window, scored 0 to 100 on severity, reach, exposure and how far public exploit code has come. No CISA confirmation needed. How this view works.

Severity
    Technology
      Ecosystem
        1. 193Code execution via SQL injection in REST API batch endpointWordPress · CVE-2026-63030KEVExploit publicNucleiFix availableExploit published
        2. 285Remote code execution in CI/CD regex handlingGitLab · CVE-2026-97229KEVExploit publicNucleiFix availableExploit published
        3. 379Remote code execution via race in core upgrade installerWordPress Foundation WordPress · CVE-2026-119977KEVExploit publicFix availableExploit published
        4. 475Remote code execution in diffpatch API via Git hooksGitea · gitea.dev +1 · CVE-2026-60004KEVExploit publicNucleiFix availableExploit published
        5. 575Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAMOpenIdentityPlatform OpenAM · org.openidentityplatform.open… · CVE-2026-33439Exploit publicNucleiFix availableExploit published
        6. 672Payload authentication token field handling issuepayloadcms payload · payload · CVE-2026-105863Exploit publicFix availableExploit published
        7. 770Privilege escalation in netfilter nf_tablesLinux Kernel · CVE-2024-1086KEVExploit publicFix availableExploit published
        8. 866Unauthenticated code execution in DNS proxy and DNS serverPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1 · CVE-2026-0264Exploit publicFix availableExploit published
        9. 965Denial of service in HTTP/2 CONTINUATION handlingnetty · io.netty:netty-codec-http2 · CVE-2026-33871Exploit publicFix availableExploit published
        10. 1063File overwrite in file update API via symlinksGogs · gogs.io/gogs · CVE-2025-8110KEVExploit publicNucleiNo patch listed yetExploit published
        11. 1162Recipient allow list bypass in addressparsernodemailer · CVE-2026-121426Proof of conceptFix availablePublished
        12. 1260Unauthenticated RCE in multiprocess pickle decodingLMCache · CVE-2026-105192Exploit publicFix availableExploit published
        13. 1360Sandbox escape to code execution in JavaScript emitterenspirit elo · @enspirit/elo · CVE-2026-44267Proof of conceptFix availablePublished
        14. 1460Remote code execution in Ruby backendenspirit elo · @enspirit/elo · CVE-2026-44266Proof of conceptFix availablePublished
        15. 1558Distrust compromised intermediate certificates in crypto/x509Go standard library crypto/x509 · stdlib +3 · CVE-2026-111943Exploit publicFix availableExploit published
        16. 1656Denial of service and data corruption in DICOM parsingProject-MONAI MONAI · monai · CVE-2026-48705Proof of conceptFix availableProvisionalPublished
        17. 1751SQL injection in write_pandas column namessnowflake-connector-python · CVE-2026-123859No public exploitFix availableProvisionalPublished
        18. 1851Code execution outside sandbox on Mac desktopGoogle Chrome · CVE-2026-121224No public exploitFix availablePublished
        19. 1951Sandbox escape to code execution in ImagesGoogle Chrome · CVE-2026-121133No public exploitFix availablePublished
        20. 2050Remote code execution in DNS serverMicrosoft Windows Server · Microsoft Windows Server, · CVE-2020-1350KEVExploit publicNo patch listed yetExploit published
        21. 2150Remote file write and root execution in file reputationCisco Secure Email · CVE-2026-76519KEVExploit publicNo patch listed yetExploit published
        22. 2250Remote code execution in template engineAdobe Commerce · Adobe Magento Open Source · CVE-2026-75650KEVNucleiNo patch listed yetEPSS crossed 10%
        23. 2350Data leak via authentication bypass in web serverHikvision Cameras · CVE-2017-7921KEVExploit publicNucleiNo patch listed yetExploit published
        24. 2450Pre-auth remote code execution in SSH servererlang otp · CVE-2025-32433KEVExploit publicFix availableExploit published
        25. 2550Remote code execution via SQL injection in email parsingCisco Secure Email · CVE-2026-76461KEVExploit publicFix availableExploit published
        26. 2650Unauthenticated privilege escalation in user registrationwpopal Opal Estate Pro – Property Management and Submission · CVE-2025-6934Exploit publicNucleiNo patch listed yetExploit published
        27. 2750Privilege escalation in temporary user creationSecurity For WooCommerce · CVE-2026-100109Exploit publicNo patch listed yetProvisionalExploit published
        28. 2850Remote code execution via unrestricted form file uploadWP Libre Form · CVE-2026-118423Exploit publicNo patch listed yetProvisionalExploit published
        29. 2950Authentication bypass leading to RCE via share-tokenanji-plus AJ-Report · CVE-2026-120209Exploit publicNo patch listed yetExploit published
        30. 3050Remote code execution in FrameDecoderGoogle Android · CVE-2026-58868Exploit publicNo patch listed yetExploit published
        31. 3150Command injection via inbound SIP MESSAGE requestssignalwire freeswitch · CVE-2026-116779Exploit publicFix availableProvisionalExploit published
        32. 3250Unauthenticated remote code execution via 'id' parameterwedevs Project Manager – AI Powered Project Management, Tas… · CVE-2026-116512Exploit publicNo patch listed yetExploit published
        33. 3350Unauthenticated command injection in /goform/mpEdimax BR-6208AC · CVE-2026-122051Exploit publicNo patch listed yetProvisionalExploit published
        34. 3450Cost Calculator Builder PRO <= 4.0.3 - Unauthenticated Remote Code Execution via 'orderDetails' ParameterStylemixThemes Cost Calculator Builder PRO · CVE-2026-14900Exploit publicNo patch listed yetExploit published
        35. 3550Authentication bypass in global configuration restoreBarracuda Networks Barracuda Email Security Gateway · CVE-2026-116606Exploit publicFix availableExploit published
        36. 3650Remote Desktop Protocol Remote Code Execution VulnerabilityMicrosoft Windows · CVE-2026-56190Exploit publicFix availableExploit published
        37. 3750Remote code execution via SQL injection in createTableCVE-2024-57521Exploit publicFix availableExploit published
        38. 3850Unauthenticated code execution via post metadataGravity Forms · CVE-2026-103039Exploit publicFix availableExploit published
        39. 3950Privilege escalation in NamespacedMutatingPolicykyverno · github.com/kyverno/kyverno · CVE-2026-54523Exploit publicFix availableExploit published
        40. 4050GraphQL Tools: Prototype pollution in mergeIncrementalResult via non-primitive path segmentsardatan graphql-tools · @graphql-tools/utils · CVE-2026-114604No public exploitFix availableProvisionalPublished
        41. 4150Privilege escalation via auth bypass in mail serverMicrosoft Exchange Server 2016 Cumulative Update · Micro… +1 · CVE-2026-62911Exploit publicFix availableExploit published
        42. 4249Remote code execution via IPN item_name parameterclavaque s2Member – Excellent for All Kinds of Memberships,… · CVE-2026-86596Exploit publicNo patch listed yetProvisionalExploit published
        43. 4349Use-after-free in TIPC node reset tracingLinux · CVE-2026-99246No public exploitNo patch listed yetProvisionalPublished
        44. 4449Out-of-bounds read in run-end encoded arraysApache Software Foundation arrow · arrow-data · CVE-2026-111959No public exploitFix availablePublished
        45. 4547Remote code execution via unrestricted file uploadAdobe Commerce · Adobe Magento Open Source · CVE-2026-48356KEVExploit publicFix availableExploit published
        46. 4647Use-after-free in CPU timersLinux · CVE-2026-98258Exploit publicFix availableExploit published
        47. 4747Use-after-free in POSIX CPU timers during execLinux · CVE-2026-98260Exploit publicFix availableExploit published
        48. 4847Privilege escalation via SQL injection in REST routesGS JWT Authentication for WP REST API · CVE-2026-113615Exploit publicNo patch listed yetProvisionalExploit published
        49. 4947Unlimited password guessing in user loginNginxProxyManager nginx-proxy-manager · CVE-2026-102334Exploit publicFix availableExploit published
        50. 5047Remote code execution via memory overflow in SAMLNetScaler ADC · NetScaler Gateway · CVE-2026-107406Exploit publicFix availableExploit published