Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 1010 of 1013.
- CVE-2026-0535 Stored XSS in Electronic Library Component Description
- CVE-2026-0534 Stored XSS in the value of a part attribute
- CVE-2026-0533 Stored XSS in Fusion desktop when attempting to delete a file
- CVE-2026-0532 External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
- CVE-2026-0531 Allocation of Resources Without Limits or Throttling in Kibana Fleet
- CVE-2026-0530 Allocation of Resources Without Limits or Throttling in Kibana Leading to Excessive Allocation
- CVE-2026-0529 Improper Validation of Array Index in Packetbeat Leading to Overflow Buffers
- CVE-2026-0528 Improper Input Validation in Metricbeat Leading to Denial of Service
- CVE-2026-0522 Local File Inclusion in the File Upload/Download Process
- CVE-2026-0521 Reflected Cross-Site Scripting in PDF Export Error Message
- CVE-2026-0520 Information disclosure in FileZ
- CVE-2026-0519 Information Disclosure in Secure Access Between 12.70 and 14.20
- CVE-2026-0518 XSS in Secure Access Consoles prior to 14.20
- CVE-2026-0517 Denial of Service in Secure Access Servers Prior to 14.20.
- CVE-2026-0516 Open redirect in SonicOS
- CVE-2026-0515 Denial of service in QNX OS for Medical
- CVE-2026-0514 Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
- CVE-2026-0513 Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)
- CVE-2026-0512 Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog)
- CVE-2026-0511 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0510 Obsolete Encryption Algorithm Used in NW AS Java UME User Mapping
- CVE-2026-0509 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2026-0508 Open Redirect vulnerability in SAP BusinessObjects Business Intelligence Platform
- CVE-2026-0507 OS Command Injection vulnerability in SAP Application Server for ABAP and SAP NetWeaver RFCSDK
- CVE-2026-0506 Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform
- CVE-2026-0505 Multiple vulnerabilities in BSP Applications of SAP Document Management System
- CVE-2026-0504 Insufficient Input Handling in JNDI Operations of SAP Identity Management
- CVE-2026-0503 Missing Authorization check in in SAP ERP Central Component and SAP S/4HANA (SAP EHS Management)
- CVE-2026-0502 Cross Site Request Forgery (CSRF) in SAP BusinessObjects Business Intelligence Platform
- CVE-2026-0501 SQL Injection Vulnerability in SAP S/4HANA Private Cloud and On-Premise (Financials � General Ledger)
- CVE-2026-0500 Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)
- CVE-2026-0499 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal
- CVE-2026-0498 Code Injection vulnerability in SAP S/4HANA (Private Cloud and On-Premise)
- CVE-2026-0497 Missing Authorization check in Business Server Pages Application (Product Designer Web UI)
- CVE-2026-0496 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0495 Multiple vulnerabilities in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0494 Information Disclosure vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0493 Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (Intercompany Balance Reconciliation)
- CVE-2026-0492 Privilege escalation vulnerability in SAP HANA database
- CVE-2026-0491 Code Injection vulnerability in SAP Landscape Transformation
- CVE-2026-0490 Denial of service (DOS) in SAP BusinessObjects BI Platform
- CVE-2026-0489 DOM-based Cross-Site Scripting (XSS) Vulnerability in SAP Business One (Job Service)
- CVE-2026-0488 Code Injection vulnerability in SAP CRM and SAP S/4HANA (Scripting Editor)
- CVE-2026-0487 DLL Hijacking vulnerability in SAProuter on Microsoft Windows
- CVE-2026-0486 Missing Authorization Check in ABAP based SAP systems
- CVE-2026-0485 Denial of service (DOS) vulnerability in SAP BusinessObjects BI Platform
- CVE-2026-0484 Missing Authorization check in SAP NetWeaver Application Server ABAP and SAP S/4HANA
- CVE-2026-0483 Stored Cross-Site Scripting (XSS) vulnerability in LiveHelperChat
- CVE-2026-0482 Memory corruption in Alveo™ Accelerator Cards
- CVE-2026-0481 Misconfiguration in AMD Instinct™ MI210
- CVE-2026-0466 Missing authorization in AMD µProf
- CVE-2026-0465 Use after free in AMD Ryzen™ Master
- CVE-2026-0461 Memory corruption in Kria SOMs
- CVE-2026-0438 Privilege escalation in AMD EPYC™ 4004 Series Processors
- CVE-2026-0432 Misconfiguration in AMD Athlon™ 3000 Series Desktop Processors with Radeon™ Graphics
- CVE-2026-0428 Other in AMD Instinct™ MI300A
- CVE-2026-0427 Information disclosure in AMD Instinct™ MI210
- CVE-2026-0421 Security feature bypass in ThinkPad L13 Gen 6 2 in 1 BIOS
- CVE-2026-0420 Missing TLS certificate validation in NETGEAR's ReadyCloud client app
- CVE-2026-0419 Insufficient input validation vulnerability in NETGEAR JR6150
- CVE-2026-0418 Certain NETGEAR devices allow administrators to tamper with system
- CVE-2026-0417 Insufficient input validation in certain NETGEAR routers
- CVE-2026-0416 Improper input validation in certain NETGEAR routers allows unauthorized modification of protected router functionality
- CVE-2026-0415 Insufficient input validation vulnerability in certain Orbi routers
- CVE-2026-0414 Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers
- CVE-2026-0413 Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
- CVE-2026-0412 Insufficient input validation vulnerability in NETGEAR JR6150 Web UI
- CVE-2026-0411 A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
- CVE-2026-0410 Insufficient input validation in certain NETGEAR routers
- CVE-2026-0409 Netgear Orbi 370 Series Remote Code Execution vulnerability
- CVE-2026-0408 Path traversal vulnerability in Netgear WiFi Range Extenders
- CVE-2026-0407 Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks
- CVE-2026-0406 Insufficient input validation in NETGEAR Nighthawk router XR1000v2
- CVE-2026-0405 Authentication Bypass in NETGEAR Orbi Devices
- CVE-2026-0404 Insufficient input validation in NETGEAR Orbi routers
- CVE-2026-0403 Insufficient input validation in NETGEAR Orbi routers
- CVE-2026-0402 Memory corruption in SonicOS
- CVE-2026-0401 Null dereference in SonicOS
- CVE-2026-0400 Memory corruption in SonicOS
- CVE-2026-0399 Memory corruption in SonicOS
- CVE-2026-0398 Crafted zones can lead to increased resource usage and crafted CNAME chains can lead to cache poisoning in Recursor
- CVE-2026-0397 Information disclosure via CORS misconfiguration
- CVE-2026-0396 HTML injection in the web dashboard
- CVE-2026-0394 Path traversal in OX Dovecot Pro
- CVE-2026-0393 CODESYS Visualization - Insufficiently Protected Credentials
- CVE-2026-0392 eParakstītājs 3.0 for Windows – remote code execution via unauthenticated auto-update
- CVE-2026-0391 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2026-0390 UEFI Secure Boot Security Feature Bypass Vulnerability
- CVE-2026-0386 Windows Deployment Services Remote Code Execution Vulnerability
- CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- CVE-2026-0383 Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
- CVE-2026-0322 Palo Alto Networks PAN-OS Code Injection
- CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services
- CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability
- CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability
- CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama
- CVE-2026-0317 PAN-OS: Denial of Service Vulnerability
- CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability
- CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS
- CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows