| CVE-2026-9311 | 9 | — | — | — | ibm / websphere application server | IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to remote code execution caused by the bypass of securi | 143d ago |
| CVE-2026-45630 | 9 | — | — | — | — | Dokploy is a free, self-hostable Platform as a Service (PaaS). | 146d ago |
| CVE-2026-9891 | 9 | — | — | — | google / chrome | Use after free in Extensions in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised | 147d ago |
| CVE-2026-9881 | 9 | — | — | — | google / chrome | Use after free in Bluetooth in Google Chrome on Mac prior to 148.0.7778.216 allowed an attacker who convinced a use | 147d ago |
| CVE-2026-46833 | 9 | — | — | — | oracle / database server | Vulnerability in the Net Service component of Oracle Database Server. | 147d ago |
| CVE-2026-4408 | 9 | — | — | — | redhat / openshift container platform | A flaw was found in Samba. | 147d ago |
| CVE-2026-32999 | 9 | — | — | — | — | Insufficient character filtering in backup agent signing module on Comet Backup server allows authenticated tenant | 148d ago |
| CVE-2026-48150 | 9 | — | — | — | — | Budibase is an open-source low-code platform. | 148d ago |
| CVE-2026-45721 | 9 | — | — | — | — | Algernon is a small self-contained pure-Go web server. | 149d ago |
| CVE-2026-4480exploited | 9 | 13.9% | 1/3 | +55d | redhat / openshift container platform | A flaw was found in the Samba printing subsystem. | 149d ago |
| CVE-2026-2651 | 9 | — | — | — | lfprojects / mlflow | A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints whe | 151d ago |
| CVE-2026-22314 | 9 | — | — | — | — | Improper Control of Generation of Code ('Code Injection') vulnerability in Mesalvo Meona Client Launcher Component | 155d ago |
| CVE-2026-45375 | 9 | — | — | — | — | SiYuan is an open-source personal knowledge management system. | 161d ago |
| CVE-2026-42457 | 9 | — | — | — | — | vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing | 161d ago |
| CVE-2026-41901exploited | 9 | 0.54% | 1/3 | +151d | — | Thymeleaf is a server-side Java template engine for web and standalone environments. | 163d ago |
| CVE-2026-44221 | 9 | — | — | — | — | ArcadeDB is a Multi-Model DBMS. | 163d ago |
| CVE-2026-33067 | 9 | — | — | — | b3log / siyuan | SiYuan is a personal knowledge management system. | 216d ago |
| CVE-2026-33066 | 9 | — | — | — | b3log / siyuan | SiYuan is a personal knowledge management system. | 216d ago |
| CVE-2026-32891 | 9 | — | — | — | openvessl / anchorr | Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a | 217d ago |
| CVE-2026-32751 | 9 | — | — | — | b3log / siyuan | SiYuan is a personal knowledge management system. | 217d ago |
| CVE-2026-27540zero day | 9 | 1.6% | 1/3 | 27d before | — | Unrestricted Upload of File with Dangerous Type vulnerability in Rymera Web Co Pty Ltd. | 218d ago |
| CVE-2026-32703 | 9 | — | — | — | openproject / openproject | OpenProject is an open-source, web-based project management software. | 218d ago |
| CVE-2026-3564zero day | 9 | 0.29% | 1/3 | same day | — | A condition in ScreenConnect may allow an actor with access to server-level cryptographic material used for authent | 219d ago |
| CVE-2026-32635 | 9 | — | — | — | angular / angular cli | Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and | 220d ago |
| CVE-2025-67041 | 7.2 | — | — | — | lantronix / eds3016ps1ns firmware | An issue was discovered in Lantronix EDS3000PS 3.1.0.0R2. | 225d ago |
| CVE-2025-67035 | 7.2 | — | — | — | lantronix / eds5032 firmware | An issue was discovered in Lantronix EDS5000 2.1.0.0R3. | 225d ago |
| CVE-2025-70082 | 2.7 | — | — | — | lantronix / eds3016ps1ns firmware | An issue in Lantronix EDS3000PS v.3.1.0.0R2 allows an attacker to execute arbitrary code and obtain sensitive info | 225d ago |
