2026-02-21

All (5) Critical (5) High (34) Medium (26) Low (8)

CVE-2026-27574 Feb 21, 11:15 CRITICAL POC PATCH Act Now

Code injection in OneUptime monitoring via custom JS monitor using vm module. PoC and patch available.

Node.js Redis Oneuptime Hackerbay

NVD GitHub

CVSS 3.1

9.9

EPSS

0.1%

CVE-2026-27211 Feb 21, 06:17 CRITICAL PATCH Act Now

Arbitrary host file exfiltration from Cloud Hypervisor VMM versions 34.0-50.0. CVSS 10.0. Patch available.

Information Disclosure Linux Docker Path Traversal Kubernetes +2

NVD GitHub

CVSS 3.1

10.0

EPSS

0.0%

CVE-2026-27194 Feb 21, 05:17 CRITICAL PATCH Act Now

RCE in D-Tale pandas data visualizer before 3.20.0 via /save-column-filter. Patch available.

RCE AI / ML D Tale Man

NVD GitHub

CVSS 3.1

9.8

EPSS

0.4%

CVE-2026-27197 Feb 21, 05:17 CRITICAL PATCH GHSA Act Now

SAML authentication bypass in Sentry 21.12.0 through 26.1.0.

Authentication Bypass Sentry

NVD GitHub VulDB

CVSS 3.1

9.1

EPSS

0.1%

CVE-2026-27471 Feb 21, 07:16 CRITICAL PATCH Act Now

Missing authorization in ERPNext ERP before 15.98.0/16.6.0. Patch available.

Authentication Bypass Erpnext Frappe

NVD GitHub

CVSS 3.1

9.1

EPSS

0.0%