Skip to main content
cve.nowby Sazabi
Back

Rankings: This year's worst CVEs

CVEs scored 0-100 on exploitation, exposure, reach, severity and patch status. How the score works.

Severity
    Technology
      Ecosystem
        1. 195Crash or data corruption in TLS receive pathLinux · :linux_kernel: · CVE-2025-39682KEVFix availableAdded to KEV
        2. 294Remote command execution via authentication bypassIvanti Connect Secure · CVE-2026-104935KEVNo patch listed yetPublished
        3. 394Unauthenticated command injection as root in serverivanti Sentry · CVE-2026-10520KEVNo patch listed yetAdded to KEV
        4. 494Unauthenticated remote code execution in MDM serverIvanti Endpoint Manager Mobile · CVE-2026-1281KEVNo patch listed yetPublished
        5. 594Auth bypass in SAML single sign-on loginFortinet FortiSwitchManager · Fortinet FortiOS +1 · CVE-2025-59718KEVNo patch listed yetAdded to KEV
        6. 692Code execution via SQL injection in REST API batch endpointWordPress · CVE-2026-63030KEVExploit publicNucleiFix availableExploit published
        7. 792Out-of-bounds write in decompression decoderGoogle Brotli · node +7 · CVE-2026-111497KEVExploit publicFix availableExploit published
        8. 892Security check bypass via unvalidated Host headerKludex starlette · starlette · CVE-2026-48710KEVFix availableAdded to KEV
        9. 992Malware in @tanstack/* npm packages steals credentials@tanstack arktype-adapter · @tanstack eslint-plugin-rou… +82 · CVE-2026-45321KEVFix availableAdded to KEV
        10. 1092Pre-auth remote code execution in server function endpointsMeta react-server-dom-webpack · Meta react-server-dom-tu… +4 · CVE-2025-55182KEVExploit publicNucleiFix availableExploit published
        11. 1191Remote code execution in V8 via out-of-bounds writeGoogle Chrome · CVE-2026-87491KEVFix availableProvisionalPublished
        12. 1291Remote code execution in V8 sandboxGoogle Chrome · CVE-2026-85046KEVFix availableProvisionalAdded to KEV
        13. 1391Auth bypass in MCP Streamable HTTP endpointBerriAI litellm · litellm · CVE-2026-59822KEVFix availableAdded to KEV
        14. 1491Remote code execution via DNS rebinding in browser checksray-project ray · ray · CVE-2025-62593KEVFix availableAdded to KEV
        15. 1591Out-of-bounds read in V8 enables sandboxed code executionGoogle Chrome · CVE-2026-11645KEVFix availableProvisionalAdded to KEV
        16. 1691SQL injection in Proxy API key verificationBerriAI litellm · litellm · CVE-2026-42208KEVFix availablePublished
        17. 1791Unauthenticated remote code execution via code injectionIvanti Endpoint Manager Mobile · CVE-2026-1340KEVNo patch listed yetProvisionalAdded to KEV
        18. 1891Code execution via use-after-free in DawnGoogle Chrome · CVE-2026-5281KEVFix availableProvisionalPublished
        19. 1991Memory corruption in Skia graphics libraryGoogle Chrome · CVE-2026-3909KEVFix availableProvisionalAdded to KEV
        20. 2091Remote code execution in V8 JavaScript engineGoogle Chrome · CVE-2026-3910KEVFix availableProvisionalAdded to KEV
        21. 2191Sandboxed code execution via CSS use-after-freeGoogle Chrome · CVE-2026-2441KEVFix availableProvisionalAdded to KEV
        22. 2291Out-of-bounds memory access in ANGLEGoogle Chrome · CVE-2025-14174KEVFix availableProvisionalPublished
        23. 2391Remote memory corruption in V8 via type confusionGoogle Chrome · CVE-2025-13223KEVFix availableProvisionalAdded to KEV
        24. 2490Unauthenticated full-read SSRF in webhook deliverymlflow · CVE-2026-64849KEVFix availableAdded to KEV
        25. 2590Auth bypass leaks stored credentials in management consoleIvanti Endpoint Manager · CVE-2026-1603KEVNo patch listed yetProvisionalAdded to KEV
        26. 2690Authentication bypass in single sign-onFortinet FortiWeb · Fortinet FortiNAC-F +4 · CVE-2026-24858KEVNo patch listed yetPublished
        27. 2790Supply chain malware in linter config add-oneslint-config-prettier · eslint-plugin-prettier +4 · CVE-2025-54313KEVFix availableAdded to KEV
        28. 2889Remote code execution in CI/CD regex handlingGitLab · CVE-2026-97229KEVExploit publicNucleiFix availableExploit published
        29. 2989Remote code execution in out-of-memory handlingPHP Group PHP · CVE-2026-109618KEVExploit publicNucleiFix availableAdded to KEV
        30. 3089Remote code execution via stale global statePHP Group PHP · CVE-2026-109619KEVNucleiFix availableAdded to KEV
        31. 3189Unauthenticated file write via web request handlingFortinet FortiMail · CVE-2026-104286KEVFix availablePublished
        32. 3289Unauthenticated remote code execution in network applianceCitrix NetScaler ADC · Citrix NetScaler Gateway · CVE-2026-88771KEVFix availablePublished
        33. 3389Remote code execution via internal function handlingMicrosoft SQL Server 2014 Service Pack 2 for 32-bit Systems… · CVE-2019-1068KEVNo patch listed yetProvisionalAdded to KEV
        34. 3489Remote code execution in User-ID authentication portalPalo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1 · CVE-2026-0300KEVFix availablePublished
        35. 3589Code execution via SQL injection in endpoint serverFortinet FortiClientEMS · CVE-2026-21643KEVNucleiFix availableAdded to KEV
        36. 3688Remote code execution via race in core upgrade installerWordPress Foundation WordPress · CVE-2026-119977KEVExploit publicFix availableExploit published
        37. 3788Unauthenticated file inclusion in page template lookupWordPress · CVE-2026-87902KEVExploit publicFix availableExploit published
        38. 3888Remote code execution in Metro dev server@react-native-community/cli-server-api · @react-native-comm… · CVE-2025-11953KEVFix availableAdded to KEV
        39. 3988Memory read in zlib compressed protocol header lengthMongoDB Server · CVE-2025-14847KEVFix availableAdded to KEV
        40. 4087Remote code execution in exec_globalsLangflow · CVE-2026-0770KEVNo patch listed yetAdded to KEV
        41. 4187Authenticated command execution via MCP stdio testsBerriAI litellm · litellm · CVE-2026-42271KEVFix availableAdded to KEV
        42. 4287File read bypass in dev server deny listvitejs vite · vite · CVE-2025-31125KEVFix availableAdded to KEV
        43. 4386Remote code execution via memory overflowCitrix NetScaler ADC · Citrix NetScaler Gateway · CVE-2026-88772KEVFix availablePublished
        44. 4486Arbitrary file read in repository commits APIGitLab · CVE-2026-85706KEVFix availableProvisionalPublished
        45. 4586Remote code execution in Syslog serviceVMware Cloud Foundation · VMware vSphere Foundation +3 · CVE-2026-59310KEVFix availableAdded to KEV
        46. 4686SQL injection in WP_Query via author__not_inWordPress · CVE-2026-60137KEVFix availableAdded to KEV
        47. 4785Remote code execution in diffpatch API via Git hooksGitea · gitea.dev +1 · CVE-2026-60004KEVExploit publicNucleiFix availableExploit published
        48. 4885Unauthenticated command injection via web requestsFortinet FortiSandbox · CVE-2026-25089KEVFix availableAdded to KEV
        49. 4985OS command injection in input handlingFortinet FortiSandbox · CVE-2026-39808KEVFix availableAdded to KEV
        50. 5085SQL injection in the database query layerDrupal core · drupal +1 · CVE-2026-9082KEVExploit publicFix availableExploit published