CVE-20XX-?
agent?

The internet is broken right now.

90 critical CVEs without a fix in the last 48 hours. Somewhere a staging server is public. It always is. 33 more already have a fix that someone still has to apply.

7 CVEs · updated 2026-11-10 22:26 UTC

Reset all
  1. CVE-2026-76964

    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker could send specially crafted network traffic to trigger a memory corruption condition in the affected functionality. Successful exploitation could allow the attacker to execute arbitrary code and fully compromise the system, resulting in a high impact on confidentiality, integrity and availability of the system.

    Code execution Server

    10.0 CRITICAL 0.4% exploit odds No fix listed
  2. CVE-2026-76965

    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.

    Code execution Server

    9.9 CRITICAL 0.3% exploit odds No fix listed
  3. CVE-2026-123390

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  4. CVE-2026-120000

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    7.5 HIGH No fix listed
  5. CVE-2026-110044

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  6. CVE-2026-109472

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed
  7. CVE-2026-109464

    Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

    Code execution Server

    8.8 HIGH No fix listed