Critical
9.8
OS Command Injection in Camunda
CVE-2026-109432
Vulnerability explainers
Major vulnerabilities explained: who is affected and what to do.
Explainers are published in Japanese only.
Critical
9.8
Vulnerability in mercury
CVE-2026-111058
Critical
9.8
SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL...
SQL injection reported (CVE-2026-107083). Successful exploitation can lead to full system takeover.
CVE-2026-107083
Critical
9.8
Vulnerability in Rank Math SEO PRO for WordPress
CVE-2026-111862
Critical
9.8
Vulnerability in Cognition
CVE-2026-109437
Critical
9.8
Authorization Flaw in Craft CMS
Vulnerability in Craft CMS (CVE-2026-112776). Successful exploitation can lead to full system takeover.
CVE-2026-112776
Critical
9.8
Vulnerability in Grav API plugin
CVE-2026-112779
Critical
9.9
Code Injection in HivePress
CVE-2026-110887
Critical
9.9
Unrestricted File Upload in MapSVG
Vulnerability in MapSVG (CVE-2026-111406). Successful exploitation can lead to full system takeover.
CVE-2026-111406
Critical
9.9
Command Injection in H3C Magic NX15
CVE-2026-112370
Critical
9.9
Vulnerability in H3C Magic NX15 NX15V100R017
CVE-2026-112371
Critical
10.0
Vulnerability in mercury
CVE-2026-111057