CVE-20XX-?
agent?

Critical, and still unpatched.

Critical-severity CVEs with no patch or advisory linked yet. These are the ones to watch.

1 CVEs · updated 2026-11-14 11:48 UTC

Reset all
  1. CVE-2026-95614

    The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file.

    Code execution Server

    9.3 CRITICAL No fix listed

Critical CVEs are vulnerabilities scored 9.0 or higher on the CVSS scale. This list shows the ones with no patch or vendor advisory linked yet, ranked by how likely they are to be exploited (EPSS).