Critical advisories

2,041 critical severity advisories, newest first

60 of 2,041 advisories

Issues with Babelfish for Aurora PostgreSQLAWSCVE-2026-119923no fix yet Critical 9.9Nov 6

Issue with Trusted Remote Execution Setup Guide - OS command injection in the example SSM...AWSCVE-2026-122193no fix yet Critical 9.8Oct 31

Linux kernel IPv4 TCP use-after-free IssueAWSCVE-2026-98432no fix yet Critical 9.8Oct 28

Native Brotli Decoder Remote Code Execution and Memory DisclosureAWSCVE-2026-111497no fix yet Critical 9.8Oct 27

MLflow: unsafe deserializationMLflowCVE-2026-116692fixed in 3.17.0 Critical 9.8Oct 27

Agno: Arbitrary code execution via `eval()` on `field_type` in `FunctionCall`agnoCVE-2026-35002fixed in 2.3.24 Critical 9.6Oct 27

Adobe Connect: code injectionAdobe ConnectCVE-2026-48360no fix yet Critical 9.9Oct 27

Adobe Campaign Classic: SQL injectionAdobe Campaign ClassicCVE-2026-105489no fix yet Critical 9.1Oct 27

Adobe Campaign Classic: SQL injectionAdobe Campaign ClassicCVE-2026-105779no fix yet Critical 9.9Oct 27

Adobe Campaign Classic: improper authorizationAdobe Campaign ClassicCVE-2026-105780no fix yet Critical 10.0Oct 27

Adobe Campaign Classic: SQL injectionAdobe Campaign ClassicCVE-2026-105781no fix yet Critical 9.3Oct 27

Adobe Campaign Classic: cross-site scriptingAdobe Campaign ClassicCVE-2026-104350no fix yet Critical 9.9Oct 27

Adobe Campaign Classic: code injectionAdobe Campaign ClassicCVE-2026-104351no fix yet Critical 9.9Oct 27

Adobe Campaign Classic: command injectionAdobe Campaign ClassicCVE-2026-104353no fix yet Critical 9.1Oct 27

Adobe Campaign Classic: SQL injectionAdobe Campaign ClassicCVE-2026-104354no fix yet Critical 9.2Oct 27

WatchGuard Technologies Fireware OS: integer overflowFireware OSCVE-2026-93866fixed in 2026.4 +2 Critical 9.2Oct 27

WatchGuard Technologies Fireware OS: stack buffer overflowFireware OSCVE-2026-93857fixed in 2026.4 +2 Critical 9.2Oct 27

WatchGuard Technologies Fireware OS: missing authenticationFireware OSCVE-2026-93865fixed in 2026.4 +2 Critical 9.4Oct 27

WatchGuard Technologies Fireware OS: missing authenticationFireware OSCVE-2026-90465fixed in 2026.4 +2 Critical 9.2Oct 27

WatchGuard Technologies Fireware OS: heap buffer overflowFireware OSCVE-2026-112710fixed in 2026.4 +2 Critical 9.2Oct 27

WatchGuard Technologies Fireware OS: heap buffer overflowFireware OSCVE-2026-112709fixed in 2026.4 +2 Critical 9.5Oct 27

WatchGuard Technologies Fireware OS: stack buffer overflowFireware OSCVE-2026-103594fixed in 2026.4 +1 Critical 10.0Oct 27

Nvidia NeMo Agent Toolkit: missing authenticationNeMo Agent ToolkitCVE-2026-65145no fix yet Critical 9.8Oct 27

Supermicro X12SPI: code executionX12SPICVE-2026-18450no fix yet Critical 9.0Oct 26

Apple macOS: path traversalmacOSCVE-2026-84633fixed in 27 Critical 9.8Oct 26

Apple macOS: out-of-bounds writemacOSCVE-2026-84539fixed in 26.7.2 +1 Critical 10.0Oct 26

Apple Safari: protection mechanism failureSafariCVE-2026-113897fixed in 27.2 +2 Critical 10.0Oct 26

Apple iOS and iPadOS: path traversaliOS and iPadOSCVE-2026-112690fixed in 26.7.2 +2 Critical 9.8Oct 26

Apple macOS: out-of-bounds writemacOSCVE-2026-112552fixed in 15.8.2 +2 Critical 9.3Oct 26

Apple macOS: buffer overflowmacOSCVE-2026-112521fixed in 15.8.2 +2 Critical 9.8Oct 26

Apple macOS: buffer overflowmacOSCVE-2026-112526fixed in 15.8.2 +2 Critical 9.1Oct 26

Apple iOS and iPadOS: use after freeiOS and iPadOSCVE-2026-112514fixed in 26.7.2 +2 Critical 9.0Oct 26

Apple macOS: improper access controlmacOSCVE-2026-112497fixed in 15.8.2 +2 Critical 9.0Oct 26

Apple macOS: out-of-bounds readmacOSCVE-2026-112478fixed in 26.7.2 +1 Critical 9.1Oct 26

Apple macOS: memory corruptionmacOSCVE-2026-112443fixed in 26.7.2 +1 Critical 9.9Oct 26

HashiCorp Tooling: improper authorizationToolingCVE-2026-110720fixed in 2.0.4 Critical 9.8Oct 26

Esri ArcGIS Server: SQL injectionArcGIS ServerCVE-2026-10757fixed in 12.1 Critical 9.1Oct 25

Integer overflow in tensor buffer validation in Deep Java LibraryAWSCVE-2026-85228no fix yet Critical 9.9Oct 25

Server-side request forgery in the Session Manager port forwarding functionality in AWS...AWSCVE-2026-89049no fix yet Critical 9.6Oct 25

AWS security bulletinAWSCVE-2026-87911no fix yet Critical 9.8Oct 23

Issue in Amazon Web Services Multi Model ServerAWSCVE-2026-115812no fix yet Critical 8.1Oct 22

mem0ai Databricks vector store vulnerable to SQL injectionmem0CVE-2026-115324fixed in 1.0.8 Critical 9.3Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): information disclosureArubaOS (AOS)CVE-2026-79876no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79867no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79868no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79869no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79870no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): information disclosureArubaOS (AOS)CVE-2026-79871no fix yet Critical 9.4Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): buffer overflowArubaOS (AOS)CVE-2026-79872no fix yet Critical 9.3Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79873no fix yet Critical 9.3Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): authentication bypassArubaOS (AOS)CVE-2026-79874no fix yet Critical 9.3Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): improper authenticationArubaOS (AOS)CVE-2026-79875no fix yet Critical 9.8Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): SQL injectionArubaOS (AOS)CVE-2026-79858no fix yet Critical 9.8Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): buffer overflowArubaOS (AOS)CVE-2026-79859no fix yet Critical 9.8Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): buffer overflowArubaOS (AOS)CVE-2026-79860no fix yet Critical 9.8Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): command injectionArubaOS (AOS)CVE-2026-79861no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): buffer overflowArubaOS (AOS)CVE-2026-79862no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): buffer overflowArubaOS (AOS)CVE-2026-79863no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): command injectionArubaOS (AOS)CVE-2026-79864no fix yet Critical 9.6Oct 22

Hewlett Packard Enterprise ArubaOS (AOS): memory corruptionArubaOS (AOS)CVE-2026-79865no fix yet