Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 238 of 1013.
- CVE-2026-93818 PCI: plda: Protect root bus removal with rescan lock
- CVE-2026-93817 perf: Fix addr_filter_ranges lifetime
- CVE-2026-93816 f2fs: validate inline dentry name lengths before conversion
- CVE-2026-93815 net: au1000: move free_irq out of the close-time spinlocked section
- CVE-2026-93814 spi: core: Abort active target transfer on controller suspend
- CVE-2026-93813 btrfs: tree-checker: validate INODE_REF's namelen
- CVE-2026-93812 ksmbd: fix sd_ndr.data memory leak in ksmbd_vfs_set_sd_xattr
- CVE-2026-93811 ksmbd: Fix acl.sd_buf memory leak and invalid sd_size error handling
- CVE-2026-93810 cachefiles: Fix double fput
- CVE-2026-9381 Edimax BR-6675nD POST Request formPPPoESetup buffer overflow
- CVE-2026-93809 drm/amdgpu: flush pending RCU callbacks on module unload
- CVE-2026-93808 ALSA: usb-audio: caiaq: validate EP1 reply lengths
- CVE-2026-93807 wifi: rsi: avoid reading TKIP MIC keys for non-TKIP ciphers
- CVE-2026-93806 wifi: cfg80211: validate assoc response length before status and IE access
- CVE-2026-93805 wifi: cfg80211: validate rx/tx MLME callback frame lengths before access
- CVE-2026-93804 wifi: mac80211: ibss: wait for in-flight TX on disconnect
- CVE-2026-93803 wifi: libipw: fix key index receive bound checks
- CVE-2026-93802 wifi: rsi: validate beacon length before fixed buffer copy
- CVE-2026-93801 smb/client: zero-initialize stack-allocated cifs_open_info_data
- CVE-2026-93800 btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()
- CVE-2026-9380 Edimax BR-6675nD POST Request formL2TPSetup buffer overflow
- CVE-2026-93799 wifi: iwlwifi: mvm: validate sta_id in BA window status notif
- CVE-2026-93798 btrfs: fix reloc root cleanup in merge_reloc_roots()
- CVE-2026-93797 wifi: iwlwifi: mvm: fix an off-by-1 boundary check
- CVE-2026-93796 wifi: iwlwifi: pcie: null RX pointers after free
- CVE-2026-93795 blk-cgroup: fix leaks and online flag on radix_tree_insert failure
- CVE-2026-93794 smb/client: flush dirty data before punching a hole
- CVE-2026-93793 wifi: iwlwifi: mvm: validate TX_CMD response layout
- CVE-2026-93792 wifi: iwlwifi: mvm: fix a possible underflow
- CVE-2026-93791 wifi: iwlwifi: mvm: add a check on the tid coming from the firmware
- CVE-2026-93790 wifi: iwlwifi: mvm: fix out-of-bounds tid_data access in BA notif
- CVE-2026-9379 Edimax BR-6675nD POST Request formWpsStart command injection
- CVE-2026-93789 wifi: iwlwifi: bound aligned TLV advance in FW parser
- CVE-2026-93788 wifi: iwlwifi: acpi: validate WGDS table revision index
- CVE-2026-93787 smb: client: bound dirent name against end of SMB response in cifs_filldir
- CVE-2026-93786 ksmbd: preserve VFS inherited POSIX ACL mask
- CVE-2026-93785 cifs: validate idmap key payload length
- CVE-2026-93784 wifi: cfg80211: validate IEs in cfg80211_wext_siwgenie()
- CVE-2026-93783 Bluetooth: RFCOMM: validate skb length in rfcomm_recv_frame
- CVE-2026-93782 vhost-scsi: flush backend after device ioctls
- CVE-2026-93781 scsi: core: Do not block on tag allocation in scsi_eh_lock_door()
- CVE-2026-9378 Edimax BR-6675nD POST Request formHwSet command injection
- CVE-2026-93778 Cross-site scripting in WP Yelp Review Slider
- CVE-2026-93775 Podlove Podcast Publisher <= 4.5.6 - Unauthenticated Stored Cross-Site Scripting via Auphonic Webhook
- CVE-2026-93774 WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-93773 WordPress Mollie Forms plugin <= 2.11.0 - SQL Injection vulnerability
- CVE-2026-93772 WordPress wpForo Forum plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-93771 WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability
- CVE-2026-93770 WordPress WP Statistics plugin <= 14.16.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-9377 SourceCodester SUP Online Shopping productedit.php cross site scripting
- CVE-2026-93769 Cross-site scripting in Humhub
- CVE-2026-93767 Tainacan <= 1.3.0 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read via 'guid' Parameter
- CVE-2026-93765 Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation
- CVE-2026-93764 Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation
- CVE-2026-93763 Silent plaintext persistence via unresolved callable database name in encryption schema map
- CVE-2026-93762 Data deletion and attribute disclosure via field-name method injection in in-memory queries
- CVE-2026-93761 Denial of service via unbounded regex matching in Mongoid's in-memory query matcher
- CVE-2026-93760 NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
- CVE-2026-9376 JPress UCenter Article Submission Endpoint doWriteSave improper authorization
- CVE-2026-93759 Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist
- CVE-2026-93758 Cross-principal document update, theft, and deletion via unvalidated id in nested attributes
- CVE-2026-93757 Wild Apricot Login <= 1.0.18 - Authentication Bypass via SSO Email-Collision Account Binding on Multisite
- CVE-2026-93756 Cross-site scripting in Smash Balloon Social Post Feed – Simple Social Feeds for WordPress
- CVE-2026-93753 deepmerge through 4.3.1 Prototype Poisoning via mergeObject
- CVE-2026-93752 CSSOM through 0.5.0 Denial of Service via length Property
- CVE-2026-93751 uri-js through 4.4.1 Improper UTF-8 Decoding via pctDecChars
- CVE-2026-93750 http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard
- CVE-2026-93749 source-map-js through 1.2.1 Event Loop Denial of Service
- CVE-2026-93748 http-cache-semantics through 4.2.0 Cross-User Cache Disclosure via max-stale
- CVE-2026-93747 wpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field
- CVE-2026-93746 Missing authorization in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels
- CVE-2026-93744 IBM i Improper Authentication
- CVE-2026-93742 Totolink A3002MU formWsc command injection
- CVE-2026-93741 Totolink A3002MU formWlWds buffer overflow
- CVE-2026-93740 Totolink A3002MU formWlEncrypt buffer overflow
- CVE-2026-9374 yangzongzhuan RuoYi-Vue Common Upload Endpoint upload FileUploadUtils.upload unrestricted upload
- CVE-2026-93739 Totolink A3002MU formWlAc buffer overflow
- CVE-2026-93738 Totolink A3002MU formSchedule buffer overflow
- CVE-2026-93737 Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet
- CVE-2026-93736 Mealie before 3.21.0 Information Disclosure via Ratings Endpoint
- CVE-2026-9373 JeecgBoot OpenAPI Endpoint call improper authentication
- CVE-2026-9372 ItzCrazyKns Vane Model Provider API route.ts server-side request forgery
- CVE-2026-93712 Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler.
- CVE-2026-93711 Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array
- CVE-2026-93710 Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying hook refused when the exception handler halts the response in compile_hooks.
- CVE-2026-9371 ItzCrazyKns Vane API route.ts missing authentication
- CVE-2026-93709 Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler.
- CVE-2026-9370 ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt
- CVE-2026-93699 Command injection in WP Toolkit
- CVE-2026-93698 Command injection in WP Squared
- CVE-2026-93697 Cross-site scripting in WP Squared
- CVE-2026-93695 Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService
- CVE-2026-93694 Server-side request forgery in ShareFile Storage Zones Controller
- CVE-2026-93693 Server-side request forgery in ShareFile Storage Zones Controller
- CVE-2026-93690 uri-js through 4.4.1 Denial of Service via removeDotSegments
- CVE-2026-9369 NousResearch hermes-agent CLI web-dashboard web_server.py _discover_dashboard_plugins comparison
- CVE-2026-93689 WinFsp through 2.2.26215 NULL Pointer Dereference via Fast I/O
- CVE-2026-93688 SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
- CVE-2026-93687 braces through 3.0.3 Stack Overflow via Deeply Nested Patterns
- CVE-2026-93685 Information disclosure in Red Hat Advanced Cluster Management for Kubernetes 2