Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
v.26.4.2314

Critical Severity Vulnerabilities

Found 1674 vulnerabilities at Critical severity.

Vulnerability Name
CVE
CWE
Severity
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60204)
CVE-2026-60204
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60205)
CVE-2026-60205
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60206)
CVE-2026-60206
CWE-306
Critical
WebLogic Uncontrolled Resource Consumption Vulnerability (CVE-2026-60208)
CVE-2026-60208
CWE-400
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60291)
CVE-2026-60291
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60292)
CVE-2026-60292
CWE-306
Critical
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60294)
CVE-2026-60294
CWE-306
Critical
Oracle HTTP Server Improper Access Control Vulnerability (CVE-2026-60363)
CVE-2026-60363
CWE-284
Critical
Oracle HTTP Server Improper Access Control Vulnerability (CVE-2026-60438)
CVE-2026-60438
CWE-284
Critical
Roundcube Server-Side Request Forgery (SSRF) Vulnerability (CVE-2026-62643)
CVE-2026-62643
CWE-918
Critical
Roundcube Authentication Bypass by Spoofing Vulnerability (CVE-2026-62644)
CVE-2026-62644
CWE-290
Critical
REST API batch-route confusion and SQL injection issue leading to Remote Code Execution (CVE-2026-63030)
CVE-2026-63030
-
Critical
Artifactory Improper Authentication Vulnerability (CVE-2026-66014)
CVE-2026-66014
CWE-287
Critical
PHP Out-of-bounds Read Vulnerability (CVE-2026-6104)
CVE-2026-6104
CWE-125
Critical
PHP Use After Free Vulnerability (CVE-2026-6722)
CVE-2026-6722
CWE-416
Critical
Python Insufficient Entropy Vulnerability (CVE-2026-7210)
CVE-2026-7210
CWE-331
Critical
PHP Use After Free Vulnerability (CVE-2026-7261)
CVE-2026-7261
CWE-416
Critical
Perl Integer Overflow to Buffer Overflow Vulnerability (CVE-2026-8376)
CVE-2026-8376
CWE-680
Critical
MOVEit Transfer Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-8649)
CVE-2026-8649
CWE-138
Critical
MOVEit Transfer Path Equivalence: 'filename ' (Trailing Space) Vulnerability (CVE-2026-8801)
CVE-2026-8801
CWE-46
Critical
IBMHttpServer Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-8855)
CVE-2026-8855
CWE-94
Critical
IBMHttpServer Uncontrolled Resource Consumption Vulnerability (CVE-2026-8856)
CVE-2026-8856
CWE-400
Critical
Drupal Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2026-9082)
CVE-2026-9082
CWE-138
Critical
WordPress Plugin WordPress Plugin ACF Extended: Privilege Escalation (0.9.2.1)
CVE-2025-14533
CWE-269
Critical