Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 294 of 1013.
- CVE-2026-87017 Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends
- CVE-2026-87016 Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
- CVE-2026-87015 Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication
- CVE-2026-87014 Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes
- CVE-2026-87013 Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle
- CVE-2026-87012 Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value
- CVE-2026-87011 Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
- CVE-2026-8701 GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- CVE-2026-87004 Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification
- CVE-2026-8700 Crypt::DSA versions before 1.20 for Perl generate seeds using rand
- CVE-2026-86996 n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy
- CVE-2026-86995 n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read
- CVE-2026-86994 n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter
- CVE-2026-86993 n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check
- CVE-2026-86992 Memory corruption in iOS and iPadOS
- CVE-2026-86991 Memory corruption in iOS and iPadOS
- CVE-2026-86990 Missing authorization in iOS and iPadOS
- CVE-2026-8699 Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management Interface
- CVE-2026-86989 Information disclosure in iOS and iPadOS
- CVE-2026-86988 Information disclosure in iOS and iPadOS
- CVE-2026-86987 Missing authorization in iOS and iPadOS
- CVE-2026-86986 Use after free in Safari
- CVE-2026-86985 Denial of service in Safari
- CVE-2026-86984 Information disclosure in macOS
- CVE-2026-86983 Denial of service in swift-crypto
- CVE-2026-86981 Memory corruption in macOS
- CVE-2026-8698 Cross-site scripting in Cryptocurrency Prijsvergelijking Widget
- CVE-2026-86979 Information disclosure in macOS
- CVE-2026-86978 Information disclosure in iOS and iPadOS
- CVE-2026-86977 Missing authorization in iOS and iPadOS
- CVE-2026-86976 Missing authorization in iOS and iPadOS
- CVE-2026-86975 Memory corruption in iOS and iPadOS
- CVE-2026-86974 Memory corruption in Safari
- CVE-2026-86973 Memory corruption in Safari
- CVE-2026-86972 Memory corruption in iOS and iPadOS
- CVE-2026-86971 Memory corruption in iOS and iPadOS
- CVE-2026-86970 Memory corruption in iOS and iPadOS
- CVE-2026-8697 Improper Authentication Rate Limiting on TP-Link's Archer C64
- CVE-2026-86969 Memory corruption in iOS and iPadOS
- CVE-2026-86968 Security feature bypass in iOS and iPadOS
- CVE-2026-86966 Path traversal in iOS and iPadOS
- CVE-2026-86964 Null dereference in iOS and iPadOS
- CVE-2026-86963 Denial of service in iOS and iPadOS
- CVE-2026-86962 Memory corruption in iOS and iPadOS
- CVE-2026-86961 Race condition in iOS and iPadOS
- CVE-2026-8696 radare2 6.1.5 Use-After-Free via gdbr_pids_list()
- CVE-2026-86959 Denial of service in iOS and iPadOS
- CVE-2026-86958 Security feature bypass in macOS
- CVE-2026-86957 Memory corruption in iOS and iPadOS
- CVE-2026-86955 Missing authorization in iOS and iPadOS
- CVE-2026-86954 Memory corruption in iOS and iPadOS
- CVE-2026-86953 Memory corruption in iOS and iPadOS
- CVE-2026-86950 Apple Multiple Products Out-of-Bounds Write
- CVE-2026-8695 radare2 6.1.5 Use-After-Free via gdbr_threads_list()
- CVE-2026-86949 Security feature bypass in Xcode
- CVE-2026-86948 Security feature bypass in Xcode
- CVE-2026-86946 Use after free in macOS
- CVE-2026-86945 Security feature bypass in macOS
- CVE-2026-86944 Memory corruption in iOS and iPadOS
- CVE-2026-86943 Denial of service in macOS
- CVE-2026-86942 Memory corruption in iOS and iPadOS
- CVE-2026-86941 Security feature bypass in macOS
- CVE-2026-86940 Information disclosure in macOS
- CVE-2026-8694 Improper access control on the API documentation endpoint in PowerShell Universal
- CVE-2026-86939 Missing authorization in macOS
- CVE-2026-86938 Privilege escalation in FileMaker Pro
- CVE-2026-86937 Security feature bypass in macOS
- CVE-2026-86936 Privilege escalation in macOS
- CVE-2026-86935 Privilege escalation in macOS
- CVE-2026-86934 Auth bypass in FileMaker Server
- CVE-2026-86933 Privilege escalation in macOS
- CVE-2026-86932 Missing authorization in macOS
- CVE-2026-86931 Information disclosure in macOS
- CVE-2026-86930 Memory corruption in FileMaker Server
- CVE-2026-86929 Memory corruption in macOS
- CVE-2026-86928 Path traversal in macOS
- CVE-2026-86926 Memory corruption in FileMaker Server
- CVE-2026-86925 Missing authorization in iOS and iPadOS
- CVE-2026-86924 Memory corruption in iOS and iPadOS
- CVE-2026-86923 Information disclosure in macOS
- CVE-2026-86922 Memory corruption in Safari
- CVE-2026-86921 Privilege escalation in iOS and iPadOS
- CVE-2026-86920 Missing authorization in iOS and iPadOS
- CVE-2026-8692 Missing authorization in Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder
- CVE-2026-86919 Memory corruption in iOS and iPadOS
- CVE-2026-86918 Memory corruption in iOS and iPadOS
- CVE-2026-86917 Privilege escalation in macOS
- CVE-2026-86916 Use after free in iOS and iPadOS
- CVE-2026-86915 Race condition in macOS
- CVE-2026-86914 Information disclosure in macOS
- CVE-2026-86913 Use after free in iOS and iPadOS
- CVE-2026-86911 Security feature bypass in macOS
- CVE-2026-86910 Path traversal in macOS
- CVE-2026-86909 Security feature bypass in macOS
- CVE-2026-86907 Missing authorization in macOS
- CVE-2026-86905 Missing authorization in iOS and iPadOS
- CVE-2026-86904 Information disclosure in iOS and iPadOS
- CVE-2026-86903 Memory corruption in iOS and iPadOS
- CVE-2026-86902 Path traversal in macOS
- CVE-2026-86901 Memory corruption in macOS