Advisories to review, and the flaws attackers are using

CISA has evidence attackers are using these, whatever their score.

• MIMicrosoft OfficeCVE-2026-124194Exploited in the wild· listed 3d agoMicrosoft Office Outlook Missing User Interaction for Potentially Unsafe Action Vulnerability
• OMOpenwave Messaging Limited Webtop Media TranscoderCVE-2026-111793Exploited in the wild· listed 3d agoOpenwave Messaging Limited Webtop Media Transcoder Incorrect Resource Transfer Between Spheres Vulnerability
• CICisco BroadWorksCVE-2026-20320Exploited in the wild· listed 3d agoCisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
• BNBarracuda Networks Multiple ProductsCVE-2026-111560Exploited in the wild· listed 3d agoBarracuda Networks Multiple Products OS Command Injection Vulnerability
• BNBarracuda Email Security Gateway (ESG)CVE-2026-116606Exploited in the wild· listed 3d agoBarracuda Networks Email Security Gateway (ESG) Authentication Bypass Using an Alternate Path or Channel Vulnerability
• GOGoogle ChromiumCVE-2026-125350Exploited in the wild· listed 3d agoGoogle Chromium Use-After-Free Vulnerability
• GPGPUStackCVE-2026-102895Exploited in the wild· listed 4d agoGPUStack Improper Authentication Vulnerability
• OPOpenBSD OpenSSHCVE-2026-123158Exploited in the wild· listed 4d agoOpenBSD OpenSSH Unexpected Status Code or Return Value Vulnerability
• SISignalWire FreeSwitchCVE-2026-116779Exploited in the wild· listed 4d agoSignalWire FreeSwitch Code Injection Vulnerability
• IBIBM Aspera FaspexCVE-2026-123218Exploited in the wild· listed 4d agoIBM Aspera Faspex Incorrect Authorization Vulnerability

Current critical flaws and selected older vendor advisories, with their original publication dates, severity and score. Selection does not mean a new disclosure or confirmed exploitation. Check the affected and fixed versions.

• SCShenzhen Cudy Technology Co., Ltd. TR3000 1.02 advisoriesCritical9.2highest score, latest published 47m agoCudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none TokensShow allHide

  • CVE-2026-75491Critical9.2published 47m agoCudy TR3000 before 2.5.42 MQTT JWT Authentication Bypass via alg none Tokens
  • CVE-2026-75495Critical9.2published 47m agoCudy TR3000 before 2.5.42 OS Command Injection via TR-098 User Password Parameter
• SNsiyuan-note siyuanCVE-2026-126265Critical9.1published 47m agoSiYuan 2.1.0 before 3.8.9 CAPTCHA Bypass via Stale Login Cookie
• NOnocodb4 advisoriesCritical9.3highest score, latest published 47m agoNocoDB before 2026.09.0 Stored XSS via Attachment MIME TypeShow allHide

  • CVE-2026-126269Critical9.3published 47m agoNocoDB before 2026.09.0 Stored XSS via Attachment MIME Type
  • CVE-2026-126273Critical9.2published 47m agoNocoDB before 2026.09.0 Privilege Escalation via Incomplete Admin Bootstrap
  • CVE-2026-126274Critical9.3published 47m agoNocoDB before 2026.08.0 Stored XSS via Table Deletion Dialog
  • CVE-2026-126280Critical9.1published 47m agoNocoDB before 2026.08.0 Refresh Token Reuse via Non-Atomic Rotation
• FRfrappe hrmsCVE-2026-126315Critical9.8published 48m agoFrappe HRMS 16.14.0 before 16.20.1 Telemetry Setting Bypass Information Exposure
• GIgivanz Vvveb3 advisoriesCritical9.4highest score, latest published 48m agoVvveb through 1.0.8.6 Webshell Upload via Theme Installer validFile() BypassShow allHide

  • CVE-2026-126377Critical9.2published 48m agoVvveb before 1.0.9.0 Cookie Forgery via PHP Type Juggling in generateCookie()
  • CVE-2026-126378Critical9.4published 48m agoVvveb through 1.0.8.6 Webshell Upload via Theme Installer validFile() Bypass
  • CVE-2026-126380Critical9.4published 48m agoVvveb before 1.0.9.0 RCE via .phar Extension Denylist Bypass in Media Upload
• ELelextensions ELEX WordPress HelpDesk & Customer Ticketing SystemCVE-2026-119077Critical9.8published 49m agoELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.9 - Unauthenticated PHP Object Injection to Remote Code Execution via 'form' Parameter
• SAsameh101 Chatterbug Forms: Fast, Flexible WordPress Form BuilderCVE-2026-125055Critical9.8published 49m agoChatterbug Forms <= 1.0.2 - Unauthenticated Arbitrary File Upload via File Upload via Public Form Submission
• PIpip rucioCVE-2026-100397Low0.0published 9h agoRucio: Unauthenticated administrator impersonation through SSH challenge tokens
• RUrubygems activestorageCVE-2026-122006Low0.0published 11h agoActive Storage: Possible arbitrary file write and read in image analysis0.74% exploit odds
• NUnuget Aspire.Dashboard.Sdk.linux-x64CVE-2026-118740Low0.0published 17h agoMicrosoft Security Advisory CVE-2026-118740 - Aspire Security Feature Bypass Vulnerability0.92% exploit odds
• NPnpm react-server-dom-parcelCVE-2026-126187Critical9.5published 3d agoReact: Unauthenticated Remote Code Execution in React Server Components1.8% exploit odds
• NPnpm mongooseCVE-2026-125120Low0.0published 3d agoMongoose: sanitizeFilter not applied on countDocuments0.57% exploit odds
• NPnpm bitcoinjs-libCVE-2026-107846Critical9.3published 3d agobitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list0.18% exploit odds
• PIpip gpustackCVE-2026-102894Low0.0published 3d agoGPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover0.26% exploit odds
• NPnpm node-opcuaCVE-2026-95860Low0.0published 3d agonode-opcua: Namespace-Level RBAC Fail-Open - Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions0.60% exploit odds