Security updates this week
Named products with a severity, updated in the last seven days. Open a technology hub when you need the vendor timeline.
50 records
- Critical10.0vBulletin vBulletin Improper Protection of Alternate PathPatch nowKEVEPSS 75.84%May 26, 2025
- Critical10.0WSO2 Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 0.59%Aug 6, 2026
- Critical10.0Cisco Identity Services Engine Incorrect Use of Privileged APIs VulnerabilityPatch nowKEVEPSS 14.03%Sep 16, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityPatch nowKEVEPSS 92.96%Sep 11, 2026
- Critical10.0Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine VulnerabilityPatch nowKEVEPSS 3.95%Sep 7, 2026
- Critical10.0N-able N-central Static Code Injection VulnerabilityPatch nowKEVEPSS 13.35%Sep 5, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 8.04%Sep 1, 2026
- Critical10.0Metabase SQL Injection VulnerabilityPatch nowKEVEPSS 97.34%Aug 6, 2026
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue affects The Grid: from n/a through 2.8.1.Patch nowKEVEPSS 0.98%Oct 16, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityPatch nowKEVEPSS 2.10%Jun 26, 2026
- Critical10.0Balbooa Forms Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 14.85%Jul 8, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityPatch nowKEVEPSS 30.87%Jun 27, 2026
- Critical10.0Adobe ColdFusion Path Traversal VulnerabilityPatch nowKEVEPSS 42.39%Jun 30, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 16.19%Jun 5, 2026
- Critical10.0LiteSpeed cPanel Plugin Privilege Escalation VulnerabilityPatch nowKEVEPSS 1.01%May 20, 2026
- Critical10.0Unrestricted Upload of File with Dangerous Type vulnerability in WP Swings Gift Cards For WooCommerce Pro allows Using Malicious Files.Patch nowKEVEPSS 0.52%May 20, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Patch nowKEVEPSS 7.36%Apr 23, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityPatch nowKEVEPSS 45.77%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityPatch nowKEVEPSS 1.79%May 21, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityPatch nowKEVEPSS 15.21%May 21, 2026
- Critical10.0WWBN AVideo is an open source video platform.Patch nowKEVEPSS 11.24%Mar 23, 2026
- Critical10.0Improper Access ControlPatch nowKEVEPSS 1.17%Apr 16, 2026
- Critical10.0CtrlPanel is open-source billing software for hosting providers.Patch nowKEVEPSS 4.54%May 19, 2026
- Critical10.0Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control VulnerabilityPatch nowKEVEPSS 73.19%Jan 20, 2026
- Critical10.0Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials VulnerabilityPatch nowKEVEPSS 13.53%Feb 17, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.18%Mar 4, 2026
- Critical10.0Arista VeloCloud Orchestrator On-Prem OS Command Injection VulnerabilityPatch nowKEVEPSS 1.00%Jul 27, 2026
- Critical10.0SonicWall SMA1000 Appliances Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 6.79%Jul 14, 2026
- Critical10.0Ivanti Sentry OS Command Injection VulnerabilityPatch nowKEVEPSS 99.91%Jun 9, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityPatch nowKEVEPSS 91.82%May 14, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 43.17%Mar 4, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityPatch nowKEVEPSS 88.48%Feb 25, 2026
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityPatch nowKEVEPSS 2.49%Jun 24, 2025
- Critical10.0Craft CMS Code Injection VulnerabilityPatch nowKEVEPSS 99.79%Apr 18, 2025
- Critical10.0SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 85.66%Dec 28, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.80%Dec 3, 2025
- Critical10.0Adobe Experience Manager Forms Code Execution VulnerabilityPatch nowKEVEPSS 88.26%Aug 5, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 86.35%Aug 28, 2025
- Critical10.0Apple iOS, iPadOS, and macOS Out-of-Bounds Write VulnerabilityPatch nowKEVEPSS 32.50%Aug 20, 2025
- Critical10.0Wing FTP Server Improper Neutralization of Null Byte or NUL Character VulnerabilityPatch nowKEVEPSS 93.88%Jul 10, 2025
- Critical10.0Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function VulnerabilityPatch nowKEVEPSS 98.79%Apr 16, 2025
- Critical10.0SAP NetWeaver Unrestricted File Upload VulnerabilityPatch nowKEVEPSS 99.49%Apr 22, 2025
- Critical10.0versa-networks concerto Time-of-check Time-of-use (TOCTOU) Race ConditionPatch nowKEVEPSS 45.82%May 21, 2025
- Critical10.0Adobe Flash Player Arbitrary Code ExecutionPatch nowKEVEPSS 6.19%Oct 15, 2014
- Critical10.0netalertx netalertx Missing Authentication for Critical FunctionPatch nowKEVEPSS 62.39%May 13, 2025
- Critical10.0SAP NetWeaver Remote Code Execution VulnerabilityPatch nowKEVEPSS 17.77%May 13, 2016
- Critical10.0Mozilla Firefox and Thunderbird Sandbox Escape VulnerabilityPatch nowKEVEPSS 55.87%Jun 20, 2019
- Critical10.0Ivanti Pulse Connect Secure Arbitrary File Read VulnerabilityPatch nowKEVEPSS 100.00%May 1, 2019