Skip to main content
cve.nowby Sazabi
Back

Rankings: This month's worst CVEs

CVEs scored 0-100 on exploitation, exposure, reach, severity and patch status. How the score works.

Severity
    Technology
      Ecosystem
        1. 194Remote command execution via authentication bypassIvanti Connect Secure · CVE-2026-104935KEVNo patch listed yetPublished
        2. 292Code execution via SQL injection in REST API batch endpointWordPress · CVE-2026-63030KEVExploit publicNucleiFix availableExploit published
        3. 392Out-of-bounds write in decompression decoderGoogle Brotli · node +7 · CVE-2026-111497KEVExploit publicFix availableExploit published
        4. 489Remote code execution in CI/CD regex handlingGitLab · CVE-2026-97229KEVExploit publicNucleiFix availableExploit published
        5. 589Remote code execution in out-of-memory handlingPHP Group PHP · CVE-2026-109618KEVExploit publicNucleiFix availableAdded to KEV
        6. 689Remote code execution via stale global statePHP Group PHP · CVE-2026-109619KEVNucleiFix availableAdded to KEV
        7. 788Remote code execution via race in core upgrade installerWordPress Foundation WordPress · CVE-2026-119977KEVExploit publicFix availableExploit published
        8. 885Remote code execution in diffpatch API via Git hooksGitea · gitea.dev +1 · CVE-2026-60004KEVExploit publicNucleiFix availableExploit published
        9. 984Privilege escalation in netfilter nf_tablesLinux Kernel · CVE-2024-1086KEVExploit publicFix availableExploit published
        10. 1084Privilege escalation in skbuff shared-frag handlingLinux · CVE-2026-46300KEVExploit publicFix availableAdded to KEV
        11. 1183File overwrite in file update API via symlinksGogs · gogs.io/gogs · CVE-2025-8110KEVExploit publicNucleiNo patch listed yetExploit published
        12. 1282Local privilege escalation to root in dsinvoked brokerIvanti Connect Secure · CVE-2026-111357KEVNo patch listed yetAdded to KEV
        13. 1382Authenticated remote code execution in management interfacePalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1 · CVE-2026-0322KEVFix availablePublished
        14. 1481Authenticated remote file upload via predictable filenamesIvanti Connect Secure · CVE-2026-118527KEVNo patch listed yetPublished
        15. 1580Remote code execution in DNS serverMicrosoft Windows Server · Microsoft Windows Server, · CVE-2020-1350KEVExploit publicNo patch listed yetExploit published
        16. 1680Remote file write and root execution in file reputationCisco Secure Email · CVE-2026-76519KEVExploit publicNo patch listed yetExploit published
        17. 1780Remote code execution in template engineAdobe Commerce · Adobe Magento Open Source · CVE-2026-75650KEVNucleiNo patch listed yetEPSS crossed 10%
        18. 1880Data leak via authentication bypass in web serverHikvision Cameras · CVE-2017-7921KEVExploit publicNucleiNo patch listed yetExploit published
        19. 1980Path traversal in CLI allows file write and deletionFortinet FortiOS · Fortinet FortiProxy +2 · CVE-2025-61624KEVNo patch listed yetAdded to KEV
        20. 2080Unauthorized file operations in internal messagingBeyondTrust Remote Support · CVE-2026-102764KEVNucleiNo patch listed yetAdded to KEV
        21. 2179Denial of service in SSL remote access VPNCisco Secure Firewall Adaptive Security Appliance (ASA) Sof… · CVE-2026-76418KEVNo patch listed yetAdded to KEV
        22. 2277Unauthenticated file access in web application rootAtlassian Bamboo Data Center · Atlassian Bitbucket Data… +6 · CVE-2026-21589KEVNucleiNo patch listed yetAdded to KEV
        23. 2375Pre-auth remote code execution in SSH servererlang otp · CVE-2025-32433KEVExploit publicFix availableExploit published
        24. 2475Authentication bypass in SSLVPN serviceSonicWall SonicOS · CVE-2026-19868KEVNo patch listed yetProvisionalPublished
        25. 2575Remote code execution via SQL injection in email parsingCisco Secure Email · CVE-2026-76461KEVExploit publicFix availableExploit published
        26. 2675Admin actions can evade logging in ESXVMware Cloud Foundation · VMware vSphere Foundation +2 · CVE-2026-41709KEVFix availableAdded to KEV
        27. 2775Remote command execution in proxy.phpCollabora Online - Built-in CODE Server · CVE-2026-110447KEVNucleiFix availableAdded to KEV
        28. 2875Remote OS command injection in replication receiverAhsayCBS · CVE-2026-105134KEVFix availableAdded to KEV
        29. 2972Remote code execution via unrestricted file uploadAdobe Commerce · Adobe Magento Open Source · CVE-2026-48356KEVExploit publicFix availableExploit published
        30. 3072URL injection enables calls to functions in other pluginsPlex Media Server · CVE-2026-96654KEVFix availableAdded to KEV
        31. 3172Auth bypass in API system password checkAhsayCBS · CVE-2026-105133KEVFix availableAdded to KEV
        32. 3272Security feature bypass in Windows ShellMicrosoft Edge · Microsoft Outlook.com +1 · CVE-2026-96951KEVFix availablePublished
        33. 3369Memory corruption in IPv4 TCP connection handlingLinux · CVE-2026-98432Exploit publicFix availableExploit published
        34. 3468Privilege escalation to operator in on-premises consoleArista Networks VeloCloud Orchestrator · CVE-2026-114625KEVExploit publicFix availableExploit published
        35. 3568Arbitrary file write in media serverPlex Media Server · CVE-2026-96656KEVFix availableAdded to KEV
        36. 3668Pre-Authentication Remote Code Execution via `jato.clientSession` Deserialization in OpenAMOpenIdentityPlatform OpenAM · org.openidentityplatform.open… · CVE-2026-33439Exploit publicNucleiFix availableExploit published
        37. 3768joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryptionauthlib joserfc · joserfc · CVE-2026-119283Fix availablePublished
        38. 3868pyasn1: Quadratic CPU consumption in constructed BIT STRING decodingpyasn1 · CVE-2026-119196Fix availablePublished
        39. 3968Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration countdigitalbazaar forge · node-forge · CVE-2026-118782Fix availablePublished
        40. 4066Denial of service in HTTP/2 CONTINUATION handlingnetty · io.netty:netty-codec-http2 · CVE-2026-33871Exploit publicFix availableExploit published
        41. 4165Authentication bypass in TokenGuardlaravel framework · laravel/framework · CVE-2026-114509Exploit publicNucleiFix availableExploit published
        42. 4265GraphQL Tools: Per-request connection parameters persist into later users' WebSocket authenticationsardatan graphql-tools · @graphql-tools executor-legacy-ws +1 · CVE-2026-118665Fix availablePublished
        43. 4364OS command injection in Apache httpd integrationEG Secure Solutions SiteGuard Server Edition for Apache… +1 · CVE-2026-106931KEVFix availableAdded to KEV
        44. 4464toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()BinaryMuse toml-node · toml · CVE-2026-114143Fix availablePublished
        45. 4564Django REST framework: JSONParser applies an attacker-named codec to the request streamencode django-rest-framework · djangorestframework · CVE-2026-114136Fix availablePublished
        46. 4664adm-zip before 0.6.1 Denial of Service via inflateAsync Unhandled Error Eventcthackers adm-zip · adm-zip · CVE-2026-114102Fix availablePublished
        47. 4764Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readpython-pillow Pillow · pillow · CVE-2026-112896Fix availablePublished
        48. 4864Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)python-pillow Pillow · pillow · CVE-2026-112894Fix availablePublished
        49. 4964Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0python-pillow Pillow · pillow · CVE-2026-112405Fix availablePublished
        50. 5064Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixelspython-pillow Pillow · pillow · CVE-2026-112404Fix availablePublished