Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 214 of 1013.
- CVE-2026-97926 ufs: validate cylinder group metadata before caching it
- CVE-2026-97925 tick/broadcast: Plug clockevents replacement race
- CVE-2026-97924 tracing/user_events: Don't destroy fields when event removal fails
- CVE-2026-97923 tracing: Free histogram the var ref when its initialization fails
- CVE-2026-97922 tracing: Free histogram var refs regardless of how often they are referenced
- CVE-2026-97921 tracing: Free histogram the field rejected for a bad modifier
- CVE-2026-97920 tracing: Keep the entry count when the histogram stats allocation fails
- CVE-2026-9792 Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition
- CVE-2026-97919 tracing: Take the reference before publishing the named histogram trigger
- CVE-2026-97918 tracing: Undo the registration when enabling the histogram trigger fails
- CVE-2026-97917 accel/ivpu: Validate full buffer range in ivpu_to_cpu_addr
- CVE-2026-97916 accel/ivpu: Validate firmware log buffer metadata
- CVE-2026-97915 accel/ivpu: Limit firmware log name prints to field size
- CVE-2026-97914 accel: ethosu: Fix ethosu_job_open() return value
- CVE-2026-97913 accel: ethosu: Ensure cmd stream ends with a stop op
- CVE-2026-97912 accel: ethosu: Ensure SRAM size is 0 on mapping failure
- CVE-2026-97911 accel: ethosu: Ensure SRAM region size matches job
- CVE-2026-97910 ASoC: sprd: validate compress buffer sizes against fixed allocations
- CVE-2026-9791 Keycloak-rhel9: organization data leak after feature disabled in keycloak
- CVE-2026-97909 ASoC: sti: initialize IRQ lock before requesting IRQ
- CVE-2026-97908 Bluetooth: btqcomsmd: destroy RPMsg endpoints before freeing hci_dev
- CVE-2026-97907 Bluetooth: btrtl: Don't leak return code when parsing firmware format v2
- CVE-2026-97906 bootconfig: Fix integer overflow in initrd size check
- CVE-2026-97905 cpufreq: zero-initialize policy cpumask before sysfs publication
- CVE-2026-97904 cpufreq: initialize policy rwsem before sysfs publication
- CVE-2026-97903 exit: hold a reference to thread_pid across proc_flush_pid
- CVE-2026-97902 fs: don't return -EINVAL for successful nested thaw
- CVE-2026-97901 genetlink: pin family module during policy dump
- CVE-2026-97900 drm/drm_exec: fix up contended obj when num_objects is 0
- CVE-2026-97899 drm/i915: Fix memory leak in query_perf_config_list()
- CVE-2026-97898 Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms
- CVE-2026-97897 Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting
- CVE-2026-97896 krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting
- CVE-2026-97895 krayin laravel-crm User Management UserController.php privileges management
- CVE-2026-9789 NitroSense V3: Security Vulnerability Information
- CVE-2026-97886 mathurvishal CloudClassroom-PHP-Project managevideos2.php sql injection
- CVE-2026-97885 mathurvishal CloudClassroom-PHP-Project updatefaculty.php sql injection
- CVE-2026-97884 mathurvishal CloudClassroom-PHP-Project Student Update Functionality updatestudent.php sql injection
- CVE-2026-97883 mathurvishal CloudClassroom-PHP-Project updatequery.php sql injection
- CVE-2026-97882 mathurvishal CloudClassroom-PHP-Project Faculty Authentication loginlinkfaculty.php sql injection
- CVE-2026-97879 zhistaredu StarTraining api-docs Endpoint SecurityConfig.java missing authentication
- CVE-2026-97878 zhistaredu StarTraining Druid Console index.html anonymous missing authentication
- CVE-2026-97877 zhistaredu StarTraining JWT Token application.yml UserLoginService.createToken hard-coded password
- CVE-2026-97876 Bypass of GRUB lockdown restriction in Secure Boot mode via serial command MMIO base address
- CVE-2026-97875 DNS rebinding vulnerability in rojo serve HTTP API
- CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider
- CVE-2026-97871 Zhonglun CloudPos JSBridge JSBridge.cs OpenLocalBrowser code injection
- CVE-2026-9787 Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability
- CVE-2026-97869 langchain4j LangChain4j-agentic AgenticScopeJsonSerializationIT.java AgenticScopeSerializer.fromJson deserialization
- CVE-2026-97868 sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross site scripting
- CVE-2026-97866 Zhonglun CloudPOS Automatic Update Program.cs channel accessible
- CVE-2026-97865 Open-Web-Analytics Remote Event Queue Endpoint queue.php loadFromArray deserialization
- CVE-2026-97864 GibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authentication
- CVE-2026-97863 Command injection in misp-modules
- CVE-2026-97860 Privilege escalation in YMS-VPN8
- CVE-2026-9786 Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
- CVE-2026-97859 Gitea API disclosure of private user social graph, keys and stars
- CVE-2026-97858 Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes
- CVE-2026-97854 Command injection in NWR100
- CVE-2026-97853 Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS
- CVE-2026-97851 J4Care dcm4che Missing Authorization
- CVE-2026-9785 Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
- CVE-2026-97846 Keycloak-services: keycloak-services: standard token exchange v2 bypasses mtls holder-of-key binding
- CVE-2026-97844 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97843 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97842 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97841 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97840 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-9784 Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability
- CVE-2026-97839 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97838 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97837 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97836 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97835 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97834 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97833 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97832 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97831 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97830 Windows Internet Information Services Denial of Service Vulnerability
- CVE-2026-9783 Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability
- CVE-2026-97829 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97828 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97827 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97826 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97825 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97824 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97823 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97822 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97821 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97820 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-9782 Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
- CVE-2026-97819 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97818 Missing authorization in phpIPAM
- CVE-2026-97817 Role: DNS Server Information Disclosure Vulnerability
- CVE-2026-97816 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
- CVE-2026-97815 Windows Error Reporting Remote Code Execution Vulnerability
- CVE-2026-97814 Windows Text Shaping Remote Code Execution Vulnerability
- CVE-2026-97813 Windows Hyper-V Information Disclosure Vulnerability
- CVE-2026-97812 Windows Update Orchestrator Service Elevation of Privilege Vulnerability
- CVE-2026-97811 Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability