Latest critical
Latest 500 of 3,839 qualifying records in the 90-day window through 22 Oct 2026. CNA-reported CVSS 9.0 to 10.0. Page 13 of 20.
- CVE-2026-890799.8 / CVSS 3.1
jfarthing84 Theme My Login
· CNA: Wordfence
- CVE-2026-1047989.8 / CVSS 3.1
joedolson My Calendar – Accessible Event Manager
· CNA: Wordfence
- CVE-2026-1095159.8 / CVSS 3.1
properfraction MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.
· CNA: Wordfence
- CVE-2026-1092199.8 / CVSS 3.1
kitae-park Mang Board
· CNA: Wordfence
- CVE-2026-1114449.8 / CVSS 3.1
Wheels
· CNA: mitre
- CVE-2026-1113569.1 / CVSS 4.0
magicblack MacCMS
· CNA: VulnCheck
- CVE-2026-1113299.3 / CVSS 4.0
JuggleIM
· CNA: VulnCheck
- CVE-2026-1113229.3 / CVSS 4.0
coleam00 Archon
· CNA: VulnCheck
- CVE-2026-1113129.2 / CVSS 4.0
OpenHealthForAll OpenHealth
· CNA: VulnCheck
- CVE-2026-1112839.5 / CVSS 4.0
BMC Helix BMC Helix Network Management
· CNA: VulnCheck
- CVE-2026-1112819.3 / CVSS 4.0
Jooan JA-A12
· CNA: VulnCheck
- CVE-2026-1050399.6 / CVSS 3.1
EnergizeLab station-middleware
· CNA: AHA
- CVE-2026-1050389.8 / CVSS 3.1
EnergizeLab FastAPI AI inference server
· CNA: AHA
- CVE-2026-1050379.9 / CVSS 3.1
EnergizeLab station-middleware
· CNA: AHA
- CVE-2026-1050329.1 / CVSS 3.1
EnergizeLab FastAPI AI inference server
· CNA: AHA
- CVE-2026-1027649.3 / CVSS 4.0
BeyondTrust Remote Support
· CNA: BT
- CVE-2026-1112359.1 / CVSS 3.1
The OpenNMS Group Meridian · The OpenNMS Group Horizon
· CNA: OpenNMS
- CVE-2026-574969.6 / CVSS 3.1
Labs64 NetLicensing-MCP
· CNA: GitHub_M
- CVE-2026-1029469.1 / CVSS 3.1
authlib joserfc
· CNA: GitHub_M
- CVE-2026-472189.3 / CVSS 4.0
containerd runwasi
· CNA: GitHub_M
- CVE-2026-552409.1 / CVSS 3.1
msgbyte tianji
· CNA: GitHub_M
- CVE-2026-847319.3 / CVSS 4.0
Nutanix Acropolis Operating System (AOS)
· CNA: Nutanix
- CVE-2026-1108129.4 / CVSS 4.0
AWS Amazon Neptune Engine
· CNA: AMZN
- CVE-2026-11095810.0 / CVSS 4.0
Wavlink WN530HG4B
· CNA: VulDB
- CVE-2026-1054749.4 / CVSS 4.0
WebPros SolusVM 2
· CNA: hackerone
CVSS version preference: 4.0, then 3.1, then 3.0; highest score within the chosen version. Unscored records are excluded. Severity does not establish exploitation or patch status. Official CVE source · Attribution