CVE-2026-41452 — Critical vulnerability brief
Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator…
Tag: Critical CVE
CVE-2026-39932 — Critical vulnerability brief
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component (library/classes/Tree.class.php) that allows authenticated administrators to execute…
CVE-2026-67324 — Critical vulnerability brief
GitPython 3.1.50 fails to recognize joined short-option forms such as -u (the short form of --upload-pack=) when enforcing its default unsafe-option gate.…
CVE-2026-66402 — Critical vulnerability brief
FreeRDP before 3.29.0 (affected versions
CVE-2026-67289 — Critical vulnerability brief
FreeRDP before 3.29.0 (affected versions
CVE-2026-15964 — Critical vulnerability brief
The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up…
CVE-2026-3141 — Critical vulnerability brief
The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST…
CVE-2026-68771 — Critical vulnerability brief
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by…
CVE-2026-68770 — Critical vulnerability brief
sentence-transformers contains a security control bypass vulnerability that allows attackers to achieve arbitrary code execution by exploiting a logic flaw in the…
CVE-2026-17351 — Critical vulnerability brief
The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via…