Week 25, 2026

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

• Critical 10.0
  CVE-2026-48908 Joomla Extension - joomshaper.com - Remote Code Execution in SP Pagebuilder extension for Joomla < 6.6.2

  joomshaper.net · SP Page Builder extension for Joomla

  EPSS 89%
• Critical 9.3
  CVE-2026-12569 Remote Code Execution (RCE) vulnerability in Windchill PDMlink

  PTC · Windchill PDMLink · FlexPLM

  EPSS 46%
• Critical 10.0
  CVE-2026-48939 Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

  icagenda.com · iCagenda extension for Joomla

  EPSS 20%
• Critical 9.1
  CVE-2026-20181 Cisco Identity Services Engine Remote Code Execution Vulnerability

  Cisco · Cisco Identity Services Engine Software · Cisco ISE Passive Identity Connector

  EPSS 8.9%
• Critical 9.5
  CVE-2026-48909 Joomla Extension - joomshaper.com - PHP Object injection in SP LMS extension for Joomla < 4.1.4

  joomshaper.net · SP LMS extension for Joomla

  EPSS 4.9%
• Critical 9.1
  CVE-2026-49952 Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle

  Discuz! · Discuz! X5.0

  EPSS 4.7%
• Critical 9.1
  CVE-2026-8713 Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry Value

  ThemeFusion · Avada (Fusion) Builder

  EPSS 3%
• Critical 9.8
  CVE-2026-56265 Crawl4AI - Authentication Bypass via Hardcoded JWT Signing Key

  Crawl4AI · Crawl4AI

  EPSS 2.6%
• Critical 9.8
  CVE-2026-38714 InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Py…
  EPSS 2.3%
• Critical 9.8
  CVE-2026-38715 InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the lo…
  EPSS 2.3%
• Critical 9.8
  CVE-2026-38717 InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the fi…
  EPSS 2.3%
• Critical 9.8
  CVE-2026-38716 InHand Networks IR912 V1.0.0.r20042 and IR915 V1.0.0.r20042 (including earlier versions) were discovered to contain a command injection vulnerability in the Py…
  EPSS 2.3%
• Critical 9.3
  CVE-2026-49772 WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

  Liquid Web / StellarWP · The Events Calendar

  EPSS 1.9%
• Critical 9.8
  CVE-2026-50871 An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute ar…
  EPSS 1.6%
• Critical 9.8
  CVE-2026-54419 PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query

  claudiopizzillo · PIAF-HMS

  EPSS 1.5%

All 373 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

• Medium 6.5
  CVE-2026-20262 Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability

  Cisco · Cisco Catalyst SD-WAN Manager

  EPSS 29%
• High 7.8
  CVE-2026-50656 Microsoft Defender Elevation of Privilege Vulnerability

  Microsoft · Microsoft Malware Protection Engine

  EPSS 11%
• Medium 5.3
  CVE-2026-8383 LearnPress < 4.3.7 - Unauthenticated Sensitive User Information Disclosure via REST API
  EPSS 7.6%
• High 8.1
  CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability

  F5 · NGINX Plus · NGINX Open Source

  EPSS 6.5%
• High 8.1
  CVE-2026-42530 NGINX Open-Source ngx_http_v3_module vulnerability

  F5 · NGINX Open Source

  EPSS 6.2%
• High 8.1
  CVE-2026-55200 libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

  libssh2 · libssh2

  EPSS 3.9%
• High 8.5
  CVE-2026-11410 OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N

  TP-Link Systems · TL-WR940N v6

  EPSS 2.8%
• High 8.5
  CVE-2026-11409 OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N

  TP-Link Systems · TL-WR940N v6

  EPSS 2.8%