CVE-2026-69836 — Microsoft Entra ID : Insecure Deserialization | CVSS 10.0 CRITICAL

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 1%  ·  Microsoft Entra ID

Read more

CVE-2026-72529 — TrueConf Server: Missing Authentication | CVSS 9.3 CRITICAL

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 0%  ·  TrueConf Server

Read more

CVE-2026-72530 — TrueConf Server: Code Injection | CVSS 9.5 CRITICAL

CRITICAL

CVSS 9.5 CRITICAL  ·  EPSS 0%  ·  TrueConf Server

Read more

CVE-2026-64849 — MLflow MLflow | CVSS 9.3 CRITICAL

CRITICAL

CVSS 9.3 CRITICAL  ·  EPSS 1%  ·  MLflow MLflow

Read more

CVE-2026-65400 — Apple macOS: Improper Authentication | CVSS 9.8 CRITICAL

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 0%  ·  Apple macOS

Read more

CVE-2026-55040 — Microsoft SharePoint | CVSS 9.1 CRITICAL

CRITICAL

CVSS 9.1 CRITICAL  ·  EPSS 4%  ·  Microsoft SharePoint

Read more

CVE-2026-59310 — Broadcom VMware vCenter: Path Traversal | CVSS 9.8 CRITICAL

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 1%  ·  Broadcom VMware vCenter

Read more

CVE-2026-33824 — Microsoft Internet Key Exchange (IKE) Service Extensions | CVSS 9.8 CRITICAL

CRITICAL

CVSS 9.8 CRITICAL  ·  EPSS 56%  ·  Microsoft Internet Key Exchange (IKE) Service Extensions

Read more

CVE-2025-62593 — Ray-Project Ray: Code Injection | CVSS 9.4 CRITICAL

CRITICAL

CVSS 9.4 CRITICAL  ·  EPSS 0%  ·  Ray-Project Ray

Read more

CVE-2026-72898 — Metabase Metabase: SQL Injection | CVSS 10.0 CRITICAL

CRITICAL

CVSS 10.0 CRITICAL  ·  EPSS 1%  ·  Metabase Metabase

Read more