CVE-20XX-?
agent?

Critical, and still unpatched.

Critical-severity CVEs with no patch or advisory linked yet. These are the ones to watch.

1 CVEs · updated 2026-11-12 23:08 UTC

Reset all
  1. CVE-2026-126170

    A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP request

    Code execution Network gear

    9.8 CRITICAL 0.6% exploit odds No fix listed

Critical CVEs are vulnerabilities scored 9.0 or higher on the CVSS scale. This list shows the ones with no patch or vendor advisory linked yet, ranked by how likely they are to be exploited (EPSS).