Week 3, 2026

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.8
  CVE-2026-23744 REC in MCPJam inspector due to HTTP Endpoint exposes

  MCPJam · inspector

  EPSS 68%
• Critical 9.3
  CVE-2025-12420 Unauthenticated Privilege Escalation in ServiceNow AI Platform

  ServiceNow · Virtual Agent API · Now Assist AI Agents

  EPSS 53%
• Critical 9.4
  CVE-2025-64155 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 throug…

  Fortinet · FortiSIEM

  EPSS 44%
• Critical 10.0
  CVE-2025-52694 Execution of arbitrary SQL commands

  Advantech · IoTSuite and IoT Edge Products

  EPSS 40%
• Critical 9.8
  CVE-2026-20963 Microsoft SharePoint Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

  EPSS 29%
• Critical 9.8
  CVE-2025-60021 Apache bRPC: Remote command injection vulnerability in heap builtin service

  Apache Software Foundation · Apache bRPC

  EPSS 26%
• Critical 10.0
  CVE-2026-23550 WordPress Modular DS plugin <= 2.5.1 - Privilege Escalation vulnerability

  Modular DS · Modular DS

  EPSS 21%
• Critical 9.3
  CVE-2026-22755 Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi

  Vivotek · Affected device model numbers are FD8365, FD8365v2, FD9165, FD9171, FD9187, FD9189, FD9365, FD9371, FD9381, FD9387, FD9389, FD9391,FE9180,FE9181, FE9191, FE9381, FE9382, FE9391, FE9582, IB93

  EPSS 14%
• Critical 9.8
  CVE-2023-54335 eXtplorer<= 2.1.14 - Authentication Bypass & Remote Code Execution (RCE)

  Extplorer · eXtplorer

  EPSS 14%
• Critical 9.8
  CVE-2020-36911 Covenant 0.5 - Remote Code Execution (RCE)

  cobbr · Covenant

  EPSS 12%
• Critical 9.7
  CVE-2026-23523 Dive allows One-click Remote Code Execution through Deep Links for MCP Install

  OpenAgentPlatform · Dive

  EPSS 7.1%
• Critical 9.1
  CVE-2026-22252 LibreChat MCP Stdio Remote Command Execution

  danny-avila · LibreChat

  EPSS 4.2%
• Critical 10.0
  CVE-2026-22240 Plaintext Passwords Vulnerability in BLUVOYIX

  Bluspark Global · BLUVOYIX

  EPSS 3.4%
• Critical 10.0
  CVE-2026-22781 TinyWeb CGI Command Injection

  maximmasiutin · TinyWeb

  EPSS 2.4%
• Critical 9.8
  CVE-2021-47812 GravCMS 1.10.7 - Arbitrary YAML Write/Update (Unauthenticated) (2)

  getgrav · GravCMS

  EPSS 2.2%

All 121 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.7
  CVE-2026-22200 osTicket (1.18.x < 1.18.3, 1.17.x < 1.17.7) PDF Export Arbitrary File Read

  Enhancesoft · osTicket

  EPSS 74%
• High 8.4
  CVE-2025-13444 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

  Progress Software · LoadMaster · Multi Tenant LoadMaster

  EPSS 27%
• High 8.4
  CVE-2025-13447 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

  Progress Software · LoadMaster

  EPSS 27%
• High 8.1
  CVE-2025-68472 MindsDB has improper sanitation of filepath that leads to information disclosure and DOS

  MindsDB · MindsDB

  EPSS 20%
• Medium 6.5
  CVE-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 20%
• High 8.8
  CVE-2026-20947 Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft · Microsoft SharePoint Server 2019 · Microsoft SharePoint Enterprise Server 2016 · Microsoft SharePoint Server Subscription Edition

  EPSS 18%
• Medium 6.5
  CVE-2026-20925 NTLM Hash Disclosure Spoofing Vulnerability

  Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

  EPSS 18%
• High 8.8
  CVE-2026-22812 OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution

  anomalyco · opencode

  EPSS 17%