Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 248 of 1013.
- CVE-2026-92567 TDuck survey form through 5.0 Unauthorized Data Modification
- CVE-2026-92566 DataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview
- CVE-2026-92565 Rallly before 4.15.0 Information Disclosure via polls.get
- CVE-2026-92564 Denial of service in Apache Qpid Broker-J
- CVE-2026-92561 Booking Calendar <= 11.8.2 - Reflected Cross-Site Scripting via 'options' Parameter
- CVE-2026-92560 Denial of service in Apache Qpid Broker-J
- CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability
- CVE-2026-92559 IBM App Connect Enterprise is vulnerable to a credential exposure
- CVE-2026-92555 Database Credentials Disclosure in AKIN Software's AKINSOFT WOLVOX Control Panel
- CVE-2026-92554 ShopLentor <= 3.5.1 - Reflected Cross-Site Scripting via Query-String Parameter Name
- CVE-2026-92553 YaySMTP <= 2.7.7 - Authenticated (Subscriber+) Arbitrary File Upload via Attachment Filename Extension
- CVE-2026-92551 Cross-site scripting in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- CVE-2026-92550 Denial of service in Apache Qpid Broker-J
- CVE-2026-9255 Tool Execution Without Authorization via Piped Stdin in Kiro CLI
- CVE-2026-92548 WP Popular Posts <= 7.4.2 - Unauthenticated Information Disclosure in 'post_type' and 'context' Parameters
- CVE-2026-92546 Authentication Bypass with X-Agentic-Ally-Token in Keepnet Labs Agentic AI / Agentic Ally
- CVE-2026-92543 Docker Engine insecure-registry fallback via malicious DNS responses
- CVE-2026-92542 Blind VXLAN injection into encrypted overlay networks from cluster peer
- CVE-2026-92541 Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer
- CVE-2026-92540 Privilege escalation in Import and export users and customers
- CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices
- CVE-2026-92539 Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise
- CVE-2026-92538 LearnPress <= 4.4.7 - Reflected DOM-Based Cross-Site Scripting via 'orderby' Parameter
- CVE-2026-92537 Information disclosure in Newsletter – Send awesome emails from WordPress
- CVE-2026-92536 Code injection in Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress
- CVE-2026-92533 Path Traversal in BugTracker.NET
- CVE-2026-92532 Unrestricted Upload of File with Dangerous Type in BugTracker.NET
- CVE-2026-92531 Improper Neutralization of Special Elements used in an OS Command in BugTracker.NET
- CVE-2026-92530 Use of Less Trusted Source in GitLab
- CVE-2026-9253 Cross-site scripting in WP Cost Estimation & Payment Forms Builder
- CVE-2026-92529 Incorrect Authorization in GitLab
- CVE-2026-92528 Incorrect Authorization in GitLab
- CVE-2026-92527 chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery
- CVE-2026-92526 itsourcecode Leave Management System index.php sql injection
- CVE-2026-92525 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
- CVE-2026-92524 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
- CVE-2026-92523 RDMA/nldev: validate dynamic counter attribute length
- CVE-2026-92522 ACPI: processor: validate MADT IOAPIC entry bounds
- CVE-2026-92521 ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
- CVE-2026-92520 bpf: Zero queue and stack outputs on lock failure
- CVE-2026-92519 riscv, bpf: Fix memory leak in bpf_jit_free
- CVE-2026-92518 riscv, bpf: Fix kernel stack corruption in tailcall with CFI
- CVE-2026-92517 bpf, riscv: Fix extable handling for arena load_acquire
- CVE-2026-92516 bpf: Fix offset warn check for bpf_res_spin_lock
- CVE-2026-92515 bpf: Preserve unique-field state across nested structs
- CVE-2026-92514 RDMA/erdma: Fix CEQ tasklet use-after-free on removal
- CVE-2026-92513 RDMA/mana_ib: drain QP references after partial table insertion
- CVE-2026-92512 RDMA/core: Fix use after free in ib_query_qp()
- CVE-2026-92511 RDMA/core: Fix potential use after free in ib_destroy_cq_user()
- CVE-2026-92510 RDMA/core: Fix potential use after free in ib_destroy_srq_user()
- CVE-2026-9251 Missing authorization in Server
- CVE-2026-92509 RDMA/core: Fix potential use after free in counter_release()
- CVE-2026-92508 RDMA/core: Fix potential use after free in ib_free_cq()
- CVE-2026-92507 RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
- CVE-2026-92506 firmware: arm_scmi: Fix requested device removal race
- CVE-2026-92505 iommu/amd: Fix undefined behavior in devid_write debugfs function
- CVE-2026-92504 thermal: intel: int3400: clean up ODVP on probe failures
- CVE-2026-92503 ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
- CVE-2026-92502 ext4: clear stale xarray tags on folios skipped during writeback
- CVE-2026-92501 ext4: drain in-flight DIO before buffered write fallback
- CVE-2026-92500 ext4: use fsdata to track inline data write state and fix race
- CVE-2026-92499 ext4: validate readdir offset before accessing dirent
- CVE-2026-92498 wifi: ath6kl: avoid buffer overreads in WMI event handlers
- CVE-2026-92497 wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
- CVE-2026-92496 wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
- CVE-2026-92495 RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap
- CVE-2026-92494 ext4: fix buffer_head leak in ext4_init_orphan_info
- CVE-2026-92493 cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
- CVE-2026-92492 cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks
- CVE-2026-92491 firmware: arm_scmi: Roll back partial protocol table registration
- CVE-2026-92490 firmware: arm_scmi: Unrequest devices if driver registration fails
- CVE-2026-9249 Auth bypass in Server
- CVE-2026-92489 xfrm: Fix skb double-free in xfrm_dev_direct_output()
- CVE-2026-92488 RDMA/erdma: complete object teardown when the destroy command fails
- CVE-2026-92487 exfat: fix valid_size extension over a shared writable mapping
- CVE-2026-92486 bpf: Fix CFI mismatch in task work callback
- CVE-2026-92485 bpf: Fix WARNING in bpf_tracing_link_release
- CVE-2026-92484 cxl/region: Fix use-after-free in find_pos_and_ways() error path
- CVE-2026-92483 liveupdate: Remember FLB retrieve() status
- CVE-2026-92482 pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
- CVE-2026-92481 pinctrl: mediatek: free EINT resources on unbind
- CVE-2026-92480 scsi: ufs: core: Validate string descriptors
- CVE-2026-9248 Missing authorization in Server
- CVE-2026-92479 scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags
- CVE-2026-92478 scsi: ufs: core: Validate connected lane counts
- CVE-2026-92477 scsi: ufs: debugfs: Reserve space for a string terminator
- CVE-2026-92476 crypto: keembay - Initialize completion before requesting IRQ
- CVE-2026-92475 GPAC downloader.c wait_for_header_and_parse out-of-bounds
- CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free
- CVE-2026-92473 GPAC BIFS commands.c gf_sg_command_del use after free
- CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
- CVE-2026-92470 Missing Authorization in GitLab
- CVE-2026-9247 Security feature bypass in Server
- CVE-2026-92469 microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check
- CVE-2026-92468 microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
- CVE-2026-92467 microservices-platform through 6.0.0 Unverified Password Change via /users/password
- CVE-2026-92466 microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
- CVE-2026-92465 WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection vulnerability
- CVE-2026-92464 Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-92463 yshop-crm through 2.1.3 Missing Authorization via Disabled Annotation on System User Listing