Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 230 of 1013.
- CVE-2026-95337 Other in Chrome
- CVE-2026-95336 Information disclosure in Chrome
- CVE-2026-95335 Use after free in Chrome
- CVE-2026-95334 Other in Chrome
- CVE-2026-95333 Use after free in Chrome
- CVE-2026-95332 Information disclosure in Chrome
- CVE-2026-95331 Memory corruption in Chrome
- CVE-2026-95330 Security feature bypass in Chrome
- CVE-2026-9533 Totolink CA750-PoE Setting cstecgi.cgi recvUpgradeNewFw os command injection
- CVE-2026-95329 Memory corruption in Chrome
- CVE-2026-95328 Information disclosure in Chrome
- CVE-2026-95327 Information disclosure in Chrome
- CVE-2026-95326 Security feature bypass in Chrome
- CVE-2026-95325 Use after free in Chrome
- CVE-2026-95324 Information disclosure in Chrome
- CVE-2026-95323 Other in Chrome
- CVE-2026-95322 Memory corruption in Chrome
- CVE-2026-95321 Other in Chrome
- CVE-2026-95320 Missing authorization in Chrome
- CVE-2026-9532 Totolink CA750-PoE Setting cstecgi.cgi setUploadUserData os command injection
- CVE-2026-95319 Use after free in Chrome
- CVE-2026-95318 Memory corruption in Chrome
- CVE-2026-95317 Missing authorization in Chrome
- CVE-2026-95316 Information disclosure in Chrome
- CVE-2026-95315 Use after free in Chrome
- CVE-2026-95314 Security feature bypass in Chrome
- CVE-2026-95313 Use after free in Chrome
- CVE-2026-95312 Information disclosure in Chrome
- CVE-2026-95311 Memory corruption in Chrome
- CVE-2026-95310 Use after free in Chrome
- CVE-2026-9531 Totolink CA750-PoE Setting cstecgi.cgi setUpgradeUboot os command injection
- CVE-2026-95309 Other in Chrome
- CVE-2026-95308 Integer overflow in Chrome
- CVE-2026-95307 Other in Chrome
- CVE-2026-95306 Memory corruption in Chrome
- CVE-2026-95305 Other in Chrome
- CVE-2026-95304 Memory corruption in Chrome
- CVE-2026-95303 Security feature bypass in Chrome
- CVE-2026-95302 Missing authorization in Chrome
- CVE-2026-95301 Missing authorization in Chrome
- CVE-2026-95300 Missing authorization in Chrome
- CVE-2026-9530 GNU LibreDWG Dwgbmp Utility decode.c read_2004_compressed_section out-of-bounds
- CVE-2026-95299 Use after free in Chrome
- CVE-2026-95298 Use after free in Chrome
- CVE-2026-95297 Missing authorization in Chrome
- CVE-2026-95296 Missing authorization in Chrome
- CVE-2026-95295 Information disclosure in Chrome
- CVE-2026-95294 Other in Chrome
- CVE-2026-95293 Information disclosure in Chrome
- CVE-2026-95292 Security feature bypass in Chrome
- CVE-2026-95291 Other in Chrome
- CVE-2026-95290 Missing authorization in Chrome
- CVE-2026-9529 GNU LibreDWG Dwggrep Utility dwggrep.c match_BLOCK_HEADER null pointer dereference
- CVE-2026-95289 Missing authorization in Chrome
- CVE-2026-95288 Other in Chrome
- CVE-2026-95287 Missing authorization in Chrome
- CVE-2026-95286 Memory corruption in Chrome
- CVE-2026-95285 Missing authorization in Chrome
- CVE-2026-95284 Memory corruption in Chrome
- CVE-2026-95283 Memory corruption in Chrome
- CVE-2026-95282 Use after free in Chrome
- CVE-2026-95281 Memory corruption in Chrome
- CVE-2026-95280 Race condition in Chrome
- CVE-2026-9528 itsourcecode Electronic Judging System delete_judge.php sql injection
- CVE-2026-95279 Other in Chrome
- CVE-2026-95278 Missing authorization in Chrome
- CVE-2026-95277 Use after free in Chrome
- CVE-2026-95276 Other in Chrome
- CVE-2026-95275 Security feature bypass in Chrome
- CVE-2026-95274 Code injection in Chrome
- CVE-2026-95273 dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal
- CVE-2026-95272 dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal
- CVE-2026-95271 dgtlmoon changedetection.io Authentication Hook flask_app.py check_authentication improper authentication
- CVE-2026-95270 dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy
- CVE-2026-9527 itsourcecode Electronic Judging System judges.php cross site scripting
- CVE-2026-95265 Feehi CMS 2.1.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the UEditor catchimage endpoint.
- CVE-2026-95264 Feehi CMS 2.1.1 is vulnerable to Directory Traversal.
- CVE-2026-95263 Feehi CMS 2.1.1 is vulnerable to Incorrect Access Control.
- CVE-2026-9526 itsourcecode Electronic Judging System edit_team.php sql injection
- CVE-2026-9525 itsourcecode Electronic Judging System edit_judge.php sql injection
- CVE-2026-9524 xianrendzw EasyReport REST Endpoint execute sql injection
- CVE-2026-9523 SQL injection in EEMS Enterprise Power Operation and Maintenance Cloud Platform
- CVE-2026-9522 Missing authorization in Server
- CVE-2026-95210 Improper certificate validation in gnutls v3.8.13 causes the application to accept certificates containing invalid extensions.
- CVE-2026-9521 fraillt bitsery std_smart_ptr.h loadFromSharedState improper validation of specified type of input
- CVE-2026-95209 An issue in gnutls v3.8.13 causes legitimate CA certificates to be rejected, leading to a Denial of Service (DoS).
- CVE-2026-95208 An issue in the ConfirmNameConstraints() function (wolfcrypt/src/asn.c) of wolfSSL v5.9.1 and v5.9.2 allows attackers to cause a Denial of S
- CVE-2026-9520 blitz-js blitz Sign-in LoginForm.tsx cross site scripting
- CVE-2026-9519 stonith404 pingvin-share Sign-in Auto-Redirect signIn.tsx getServerSideProps cross site scripting
- CVE-2026-95184 Improper certificate validation in gnutls v3.8.13 causes the application to reject legitimate certificates for valid users, leading to a Denial of Service (DoS).
- CVE-2026-95183 An issue in the context-compaction feature of DeepSeek Harness (dsh) commit c291e796 allows attackers to execute a prompt injection attack v
- CVE-2026-95182 An untrusted search path in DeepSeek Harness (dsh) commit c291e796 allows attackers to execute arbitrary code via supplying and opening craf
- CVE-2026-95180 An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exporte
- CVE-2026-9518 hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting
- CVE-2026-95179 An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animati
- CVE-2026-9517 hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control
- CVE-2026-95168 An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in thefuck/corrector.py and
- CVE-2026-95166 In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) payload.
- CVE-2026-95165 Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
- CVE-2026-9516 Denial of service in Cpanel::JSON::XS