CVE-2026-64620 — Critical vulnerability brief
FreeRDP before 3.28.0 (affected
Tag: Critical CVE
CVE-2026-8297 — Critical vulnerability brief
Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Gis Informatics Engineering Consulting Laboratory R&D and Software…
CVE-2026-12692 — Critical vulnerability brief
Unverified password change vulnerability in Vimesoft Inc. Enterprise Video Platform allows Authentication Bypass. This issue affects Enterprise Video Platform: from 3.11.0.0 before…
CVE-2026-45568 — Critical vulnerability brief
zrok is software for sharing web services, files, and network resources. Prior to 2.0.3, zrok's Python SDK ProxyShare Flask proxy route accepts…
CVE-2026-54052 — Critical vulnerability brief
n8n-MCP is an MCP server that provides AI assistants access to n8n node documentation, properties, and operations. Prior to 2.56.1, in HTTP…
CVE-2026-53512 — Critical vulnerability brief
Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the legacy oidcProvider and mcp plugins expose OAuth token…
CVE-2026-56400 — Critical vulnerability brief
open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. Attackers…
CVE-2026-48284 — Critical vulnerability brief
ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current…
CVE-2026-48319 — Critical vulnerability brief
ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary…
CVE-2026-48358 — Critical vulnerability brief
Adobe Commerce is affected by an Improper Encoding or Escaping of Output vulnerability that could result in arbitrary code execution in the…