Latest critical
Latest 500 of 3,839 qualifying records in the 90-day window through 22 Oct 2026. CNA-reported CVSS 9.0 to 10.0. Page 17 of 20.
- CVE-2026-1106499.3 / CVSS 4.0
shahkashani stills
· CNA: VulnCheck
- CVE-2026-1106469.2 / CVSS 4.0
beganovich snappdf
· CNA: VulnCheck
- CVE-2026-1106459.3 / CVSS 4.0
ArsalanDotMe video-stitch
· CNA: VulnCheck
- CVE-2026-1106449.3 / CVSS 4.0
ChetanXpro nodejs-whisper
· CNA: VulnCheck
- CVE-2026-1106439.3 / CVSS 4.0
kky-ykk transcribe2texts
· CNA: VulnCheck
- CVE-2026-1106409.3 / CVSS 4.0
ariym whisper-node
· CNA: VulnCheck
- CVE-2026-1106399.3 / CVSS 4.0
mborne @mborne/extract
· CNA: VulnCheck
- CVE-2026-1106389.3 / CVSS 4.0
zepspaiva doc-recog
· CNA: VulnCheck
- CVE-2026-1106369.3 / CVSS 4.0
revolunet pypdftk
· CNA: VulnCheck
- CVE-2026-1106359.3 / CVSS 4.0
scionoftech webp-converter
· CNA: VulnCheck
- CVE-2026-1106349.3 / CVSS 4.0
danday74 git-diff
· CNA: VulnCheck
- CVE-2026-1106329.2 / CVSS 4.0
Report One MyReport Updater
· CNA: VulnCheck
- CVE-2026-1106319.3 / CVSS 4.0
moghtech komodo
· CNA: VulnCheck
- CVE-2026-1106289.2 / CVSS 4.0
kanbn kan
· CNA: VulnCheck
- CVE-2026-1106169.2 / CVSS 4.0
nullclaw NullHub
· CNA: VulnCheck
- CVE-2026-1106129.3 / CVSS 4.0
wwwlike vlife
· CNA: VulnCheck
- CVE-2020-372829.3 / CVSS 4.0
vworld4u office-converter
· CNA: VulnCheck
- CVE-2020-372819.2 / CVSS 4.0
Gravitee Gravitee API Management
· CNA: VulnCheck
- CVE-2026-1080659.8 / CVSS 3.1
Channel Software WebAlliance eCommerce
· CNA: rapid7
- CVE-2026-167409.8 / CVSS 3.1
TR7 ASP
· CNA: TR-CERT
- CVE-2026-167419.8 / CVSS 3.1
TR7 ASP
· CNA: TR-CERT
- CVE-2026-1082919.8 / CVSS 3.1
itthinx Affiliates
· CNA: Patchstack
- CVE-2026-1074249.8 / CVSS 3.1
M A Vinoth Kumar Frontend Dashboard
· CNA: Patchstack
- CVE-2026-148519.2 / CVSS 4.0
Copart Copart’s online billing service
· CNA: INCIBE
- CVE-2026-1047489.8 / CVSS 3.1
wpazleen SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications
· CNA: Wordfence
CVSS version preference: 4.0, then 3.1, then 3.0; highest score within the chosen version. Unscored records are excluded. Severity does not establish exploitation or patch status. Official CVE source · Attribution