Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 313 of 1013.
- CVE-2026-84717 Information disclosure in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84716 Security feature bypass in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84715 FeatherPanel before 1.3.7.10 Privilege Escalation via Subuser Permission Update
- CVE-2026-84714 Code injection in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84713 Missing authorization in Red Hat Ansible Automation Platform 2
- CVE-2026-84712 Information disclosure in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84706 Code injection in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84702 facefusion before 3.7.0 Path Traversal via Job Identifier
- CVE-2026-84701 NocoBase Rich Text Field Stored Cross-Site Scripting via API
- CVE-2026-84700 Pika Unauthenticated Replication Access via Internal Protobuf Port
- CVE-2026-8470 Langflow is affected by weaknesses in secret handling and sensitive configuration access
- CVE-2026-84699 Team Password Manager before 14.184.308 Authentication Bypass in Password Reset
- CVE-2026-84698 PX4 Autopilot sd_bench Heap Buffer Overflow via Block Size
- CVE-2026-84697 Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix
- CVE-2026-84696 Phison PS3111-S11 Controller Firmware Missing Authentication on Vendor Unique Commands
- CVE-2026-84695 BookStack before 26.05.4 Stored XSS via Drawing Upload
- CVE-2026-84694 Coolify before 4.2.0 Remote Code Execution via Environment Variable Key
- CVE-2026-84691 Code injection in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-8469 Unauthenticated denial-of-service via BEAM atom table exhaustion in phoenix_storybook
- CVE-2026-84685 Improper Cache Isolation in auth0/react-native-auth0 SDK Web Platform Credential Management
- CVE-2026-84683 Cross-site scripting in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84682 TDDPv2 setProductVer Command Injection in Archer AX90
- CVE-2026-8468 Unbounded buffer accumulation in multipart header parsing causes denial of service in plug
- CVE-2026-84677 Cross-site scripting in Jenkins update-center2
- CVE-2026-84676 Information disclosure in Jenkins Parameterized Remote Trigger Plugin
- CVE-2026-84675 Command injection in Jenkins TICS Plugin
- CVE-2026-84674 Missing authorization in Jenkins XebiaLabs XL Deploy Plugin
- CVE-2026-84673 Cross-site scripting in Jenkins Customizable Header Plugin
- CVE-2026-84672 Privilege escalation in Jenkins Microsoft Entra ID (previously Azure AD) Plugin
- CVE-2026-84671 Path traversal in Jenkins File Parameter Plugin
- CVE-2026-84670 Deserialization in Jenkins Performance Plugin
- CVE-2026-8467 Unauthenticated remote code execution via HEEx template injection in phoenix_storybook playground
- CVE-2026-84669 Path traversal in Jenkins Allure Plugin
- CVE-2026-84668 Missing authorization in Jenkins SAML Plugin
- CVE-2026-84667 Path traversal in Jenkins ThinBackup Plugin
- CVE-2026-84666 Other in Jenkins Job Configuration History Plugin
- CVE-2026-84665 Cross-site scripting in Jenkins SonarQube Scanner Plugin
- CVE-2026-84664 Other in Jenkins GitLab Plugin
- CVE-2026-84663 Cross-site request forgery in Jenkins Pipeline: Groovy Libraries Plugin
- CVE-2026-84662 Server-side request forgery in Jenkins LDAP Plugin
- CVE-2026-84661 Missing authorization in Jenkins Pipeline: Build Step Plugin
- CVE-2026-84660 Missing authorization in Jenkins Pipeline: Build Step Plugin
- CVE-2026-8466 Unbounded buffer accumulation in multipart header parsing causes denial of service in cowboy
- CVE-2026-84659 Missing authorization in Jenkins Script Security Plugin
- CVE-2026-84658 Information disclosure in Jenkins Script Security Plugin
- CVE-2026-84657 Missing authorization in Jenkins
- CVE-2026-84656 Missing authorization in Jenkins
- CVE-2026-84655 Code injection in Jenkins
- CVE-2026-84654 Business logic in Jenkins
- CVE-2026-84653 Missing authorization in Jenkins
- CVE-2026-84652 Auth bypass in Jenkins
- CVE-2026-84651 Missing authorization in Jenkins
- CVE-2026-84650 Deserialization in Jenkins
- CVE-2026-84649 Cross-site request forgery in Jenkins
- CVE-2026-84648 Cross-site scripting in Jenkins
- CVE-2026-84647 Deserialization in Jenkins
- CVE-2026-84646 Deserialization in Jenkins
- CVE-2026-84645 Code injection in Jenkins
- CVE-2026-84642 Allowed UNC hostnames for attachments interpreted as a regular expression
- CVE-2026-84641 Information disclosure due to malicious IMAP server response
- CVE-2026-84640 One byte overflow read in mail parser
- CVE-2026-8464 Path traversal in Neuron Soft Golem OEE MES
- CVE-2026-84639 Uninitialized memory in MIME parsing
- CVE-2026-84637 Calendar invitation attachments could launch local executables
- CVE-2026-84636 Missing authorization in iOS and iPadOS
- CVE-2026-84635 Business logic in Safari
- CVE-2026-84634 Race condition in iOS and iPadOS
- CVE-2026-84633 Path traversal in macOS
- CVE-2026-84632 Memory corruption in iOS and iPadOS
- CVE-2026-84631 Privilege escalation in macOS
- CVE-2026-84630 Race condition in iOS and iPadOS
- CVE-2026-8463 Memory corruption in Crypt::Argon2
- CVE-2026-84629 Missing authorization in iOS and iPadOS
- CVE-2026-84628 Missing authorization in iOS and iPadOS
- CVE-2026-84627 Memory corruption in iOS and iPadOS
- CVE-2026-84626 Information disclosure in iOS and iPadOS
- CVE-2026-84625 Information disclosure in iOS and iPadOS
- CVE-2026-84624 Path traversal in iOS and iPadOS
- CVE-2026-84623 Auth bypass in iOS and iPadOS
- CVE-2026-84622 Information disclosure in iOS and iPadOS
- CVE-2026-84621 Missing authorization in iOS and iPadOS
- CVE-2026-84620 Integer overflow in iOS and iPadOS
- CVE-2026-8462 OpenMeter SQL Injection in ClickHouse-backed Meter Definitions
- CVE-2026-84619 Memory corruption in macOS
- CVE-2026-84618 Missing authorization in macOS
- CVE-2026-84617 Missing authorization in iOS and iPadOS
- CVE-2026-84616 Memory corruption in iOS and iPadOS
- CVE-2026-84615 Missing authorization in iOS and iPadOS
- CVE-2026-84614 Security feature bypass in iOS and iPadOS
- CVE-2026-84613 Memory corruption in iOS and iPadOS
- CVE-2026-84612 Missing authorization in iOS and iPadOS
- CVE-2026-84611 Memory corruption in iOS and iPadOS
- CVE-2026-84610 Security feature bypass in macOS
- CVE-2026-8461 Heap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoder
- CVE-2026-84609 Path traversal in iOS and iPadOS
- CVE-2026-84607 Race condition in iOS and iPadOS
- CVE-2026-84606 Information disclosure in iOS and iPadOS
- CVE-2026-84605 Missing authorization in iOS and iPadOS
- CVE-2026-84604 Memory corruption in macOS
- CVE-2026-84603 Privilege escalation in iOS and iPadOS