Latest critical
Latest 500 of 3,839 qualifying records in the 90-day window through 22 Oct 2026. CNA-reported CVSS 9.0 to 10.0. Page 11 of 20.
- CVE-2026-1114069.9 / CVSS 3.1
PT Norther Lights Production MapSVG
· CNA: Patchstack
- CVE-2026-1030919.3 / CVSS 4.0
Google SAM
· CNA: Google
- CVE-2026-1025039.3 / CVSS 4.0
Google SAM
· CNA: Google
- CVE-2026-1089839.8 / CVSS 3.1
GeoVision Inc. GV-ASManager
· CNA: GV
- CVE-2026-1120059.2 / CVSS 4.0
clidey whodb
· CNA: VulnCheck
- CVE-2026-1119989.3 / CVSS 4.0
vanus-labs vanus
· CNA: VulnCheck
- CVE-2026-1108869.8 / CVSS 3.1
QuantumCloud Conversational Forms for ChatBot
· CNA: Patchstack
- CVE-2026-1098949.3 / CVSS 3.1
Arraytics Booktics
· CNA: Patchstack
- CVE-2026-1103729.8 / CVSS 3.1
Brainstorm Force OttoKit
· CNA: Patchstack
- CVE-2026-1119119.3 / CVSS 4.0
thorsten phpMyFAQ
· CNA: VulnCheck
- CVE-2026-1047369.8 / CVSS 3.1
thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses
· CNA: Wordfence
- CVE-2026-1106539.1 / CVSS 3.1
latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress
· CNA: Wordfence
- CVE-2026-1118239.8 / CVSS 3.1
Mage mage-ai
· CNA: mitre
- CVE-2026-966209.2 / CVSS 4.0
anthropics claude-agent-sdk-python
· CNA: GitHub_M
- CVE-2026-1026089.0 / CVSS 3.1
zoneminder
· CNA: GitHub_M
- CVE-2026-1117119.3 / CVSS 4.0
Netcore NR256CN
· CNA: VulnCheck
- CVE-2026-1117089.3 / CVSS 4.0
canove whaticket-community
· CNA: VulnCheck
- CVE-2026-1117049.3 / CVSS 4.0
langchat
· CNA: VulnCheck
- CVE-2026-1116939.3 / CVSS 4.0
databufflabs databuff
· CNA: VulnCheck
- CVE-2026-1116929.3 / CVSS 4.0
databufflabs databuff
· CNA: VulnCheck
- CVE-2026-1116919.1 / CVSS 4.0
wimoor-erp wimoor
· CNA: VulnCheck
- CVE-2026-1116909.3 / CVSS 4.0
suyuan32 simple-admin-core
· CNA: VulnCheck
- CVE-2026-1116879.3 / CVSS 4.0
rachelos we-mp-rss
· CNA: VulnCheck
- CVE-2026-1116759.1 / CVSS 4.0
xiaochong0302 course-tencent-cloud
· CNA: VulnCheck
- CVE-2026-1116739.3 / CVSS 4.0
Thecosy IceCMS
· CNA: VulnCheck
CVSS version preference: 4.0, then 3.1, then 3.0; highest score within the chosen version. Unscored records are excluded. Severity does not establish exploitation or patch status. Official CVE source · Attribution