CVE-2026-18431 — Vulnerability brief
CVE-2026-18431 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
Category: Critical CVEs
Critical and exploited CVEs, vulnerability intelligence and remediation guidance.
CVE-2026-19632 — Vulnerability brief
CVE-2026-19632 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-19598 — Vulnerability brief
CVE-2026-19598 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-82222 — Vulnerability brief
CVE-2026-82222 was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber news, CVEs, malware,…
CVE-2026-82452 — Critical vulnerability brief
CVSS 9.3rust-iot-platform through commit 5df942ab contains an authentication bypass vulnerability where most REST API routes lack authentication guards in their handler signatures. Unauthenticated…
CVE-2026-82456 — Critical vulnerability brief
CVSS 10argocd-mcp 0.8.0 binds its HTTP transport to every network interface and accepts MCP sessions without requiring caller credentials when ARGOCD_API_TOKEN is configured.…
CVE-2026-14494 — Critical vulnerability brief
CVSS 9.8The Sigma Forms Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.4.5 via…
CVE-2026-3627 — Critical vulnerability brief
CVSS 9.1IBM Concert 1.0.0 through 2.3.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow…
CVE-2026-19286 — Critical vulnerability brief
CVSS 9.8IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions…
CVE-2026-19295 — Critical vulnerability brief
CVSS 9.9IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrary operating system commands in the server process by saving…