Week 23, 2026

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 9.6
  CVE-2026-8037 OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

  Progress Software · LoadMaster · Object Scale Connection Manager · MOVEit WAF

  EPSS 100%
• Critical 10.0
  CVE-2026-48907 Joomla Extension - joomlacontenteditor.net - Remote Code Execution in JCE extension for Joomla < 2.9.99.5

  joomlacontenteditor.net · Joomla Content Editor (JCE) extension for Joomla

  EPSS 85%
• Critical 9.2
  CVE-2026-0826 Poly Voice – Possible Remote Control of Certain Poly Devices

  HP · poly_trio_8300 · poly_trio_8800 · poly_trio_8500

  EPSS 32%
• Critical 9.6
  CVE-2026-10886 Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.…

  Google · Chrome

  EPSS 5.9%
• Critical 9.6
  CVE-2024-27890 On affected platforms running Arista EOS with OpenConfig configured, a gNMI Set request can be run when it should have been rejected (No SSL Profiles Enabled).

  Arista Networks · EOS

  EPSS 4.4%
• Critical 9.8
  CVE-2026-10580 Hippoo Mobile App for WooCommerce <= 1.9.4 - Unauthenticated Authentication Bypass to Administrator Account Takeover via REST API

  hippooo · Hippoo Mobile App for WooCommerce

  EPSS 2.9%
• Critical 9.6
  CVE-2026-32625 LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

  danny-avila · LibreChat

  EPSS 2.8%
• Critical 9.9
  CVE-2026-45744 Termix has an OS Command Injection in File Manager resolvePath endpoint

  Termix-SSH · Termix

  EPSS 2%
• Critical 9.8
  CVE-2026-45748 Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection

  Termix-SSH · Termix

  EPSS 1.7%
• Critical 10.0
  CVE-2026-49777 WordPress Product Slider Pro for WooCommerce plugin < 3.5.4 - Backdoor vulnerability

  ShapedPlugin · Product Slider Pro for WooCommerce

  EPSS 1.7%
• Critical 9.8
  CVE-2026-36576 An OS command injection vulnerability in the app.py component of openlabs docker-wkhtmltopdf-aas up to commit 9f50579 allows attackers to execute arbitrary com…
  EPSS 1.5%
• Critical 9.8
  CVE-2026-8206 Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

  Themeum · Kirki – Freeform Page Builder, Website Builder & Customizer

  EPSS 1.3%
• Critical 10.0
  CVE-2026-11429 Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution

  Altium · Altium Enterprise Server · Altium 365

  EPSS 1.1%
• Critical 10.0
  CVE-2026-48567 Azure HorizonDB Elevation of Privilege Vulnerability

  Microsoft · Azure HorizonDB

  EPSS 1%
• Critical 9.8
  CVE-2025-67447 The network diagnosis (ping) module in Neterbit NW-431F Router 20241014-IR03 and before is vulnerable to OS command injection. The application does not properl…
  EPSS 1%

All 145 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• High 8.6
  CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

  Cisco · Cisco Unified Communications Manager

  EPSS 89%
• High 7.5
  CVE-2026-28318 SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

  SolarWinds · Serv-U

  EPSS 48%
• High 7.8
  CVE-2026-20245 Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

  Cisco · Cisco Catalyst SD-WAN Manager · Cisco Catalyst SD-WAN Controller

  EPSS 25%
• Medium 6.0
  CVE-2026-25622 Arista Edge Threat Management NGFW Captive Portal Custom Handler Command Injection

  Arista Networks · Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)

  EPSS 9.3%
• Medium 6.0
  CVE-2026-25620 Arista Edge Threat Management NGFW Captive Portal Encrypted Password Command Injection

  Arista Networks · Arista Edge Threat Management - Arista Next Generation Firewall (NGFW)

  EPSS 9.3%
• High 7.2
  CVE-2026-8438 All-In-One Security (AIOS) <= 5.4.7 - Unauthenticated Stored Cross-Site Scripting via REST API Request Path

  davidanderson · All-In-One Security (AIOS) – Security and Firewall

  EPSS 8.3%
• Medium 6.5
  CVE-2026-42824 M365 Copilot Information Disclosure Vulnerability

  Microsoft · Microsoft 365 Copilot

  EPSS 7.6%
• Medium 5.3
  CVE-2026-7665 Essential Addons for Elementor <= 6.6.4 - Missing Authorization to Unauthenticated Information Exposure via 'load_more' AJAX Handler

  wpdevteam · Essential Addons for Elementor – Popular Elementor Templates & Widgets

  EPSS 6.8%