Latest critical
Latest 500 of 3,839 qualifying records in the 90-day window through 22 Oct 2026. CNA-reported CVSS 9.0 to 10.0. Page 3 of 20.
- CVE-2026-976319.5 / CVSS 4.0
TianoCore EDK2
· CNA: TianoCore
- CVE-2026-1114979.2 / CVSS 4.0
Google Brotli
· CNA: Google
- CVE-2026-10278510.0 / CVSS 4.0
yootheme.com YOOtheme Pro extension for Joomla
· CNA: Joomla
- CVE-2026-1128329.8 / CVSS 3.1
CozyThemes Rootblox
· CNA: Patchstack
- CVE-2026-1153249.2 / CVSS 4.0
mem0ai mem0
· CNA: VulnCheck
- CVE-2021-480169.3 / CVSS 4.0
DedeCMS
· CNA: VulnCheck
- CVE-2021-480149.3 / CVSS 4.0
FanRuan FineReport
· CNA: VulnCheck
- CVE-2026-1122419.8 / CVSS 3.1
Brainstorm Force SureCart
· CNA: Patchstack
- CVE-2026-1123279.3 / CVSS 3.1
TMS Amelia
· CNA: Patchstack
- CVE-2026-1142209.3 / CVSS 4.0
NewType Infortech NT OneAPP
· CNA: twcert
- CVE-2026-1142199.1 / CVSS 4.0
NewType Infortech NT OneAPP
· CNA: twcert
- CVE-2026-1146619.0 / CVSS 4.0
openremote
· CNA: VulnCheck
- CVE-2026-11457510.0 / CVSS 4.0
TOTOLINK A950RG
· CNA: VulDB
- CVE-2026-11026410.0 / CVSS 3.1
GitLab
· CNA: GitLab
- CVE-2026-1145099.2 / CVSS 4.0
laravel framework
· CNA: GitHub_M
- CVE-2026-11438310.0 / CVSS 4.0
TOTOLINK EX200
· CNA: VulDB
- CVE-2026-11438210.0 / CVSS 4.0
TOTOLINK EX200
· CNA: VulDB
- CVE-2026-914039.1 / CVSS 3.1
Oracle Corporation Oracle Java SE · Oracle Corporation Oracle GraalVM for JDK
· CNA: oracle
- CVE-2026-966399.8 / CVSS 3.1
python-pillow Pillow
· CNA: GitHub_M
- CVE-2026-1141399.1 / CVSS 4.0
getsentry sentry-javascript
· CNA: GitHub_M
- CVE-2026-1124089.4 / CVSS 4.0
AWS Amazon SageMaker Python SDK
· CNA: AMZN
- CVE-2026-1118119.4 / CVSS 4.0
Apache Software Foundation Apache Traffic Server
· CNA: apache
- CVE-2026-1142689.4 / CVSS 4.0
Tenda BE3L Pro
· CNA: VulDB
- CVE-2026-1118169.2 / CVSS 4.0
Apache Software Foundation Apache Traffic Server
· CNA: apache
- CVE-2025-316999.1 / CVSS 4.0
Apache Software Foundation Apache Traffic Server
· CNA: apache
CVSS version preference: 4.0, then 3.1, then 3.0; highest score within the chosen version. Unscored records are excluded. Severity does not establish exploitation or patch status. Official CVE source · Attribution