Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 315 of 1013.
- CVE-2026-84502 Command injection in Red Hat Ansible Automation Platform 2.4 for RHEL 8
- CVE-2026-84501 Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider
- CVE-2026-8450 HTTP::Daemon versions before 6.17 for Perl allow OS command injection via send_file()
- CVE-2026-84499 Information disclosure in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-84498 Information disclosure in macOS
- CVE-2026-84497 Memory corruption in iOS and iPadOS
- CVE-2026-84496 Memory corruption in macOS
- CVE-2026-84495 Use after free in iOS and iPadOS
- CVE-2026-84494 Memory corruption in iOS and iPadOS
- CVE-2026-84493 Auth bypass in iOS and iPadOS
- CVE-2026-84492 Race condition in iOS and iPadOS
- CVE-2026-84491 Missing authorization in iOS and iPadOS
- CVE-2026-84490 Auth bypass in iOS and iPadOS
- CVE-2026-84489 Memory corruption in iOS and iPadOS
- CVE-2026-84487 Integer overflow in iOS and iPadOS
- CVE-2026-84486 Missing authorization in Red Hat Ansible Automation Platform 2.6
- CVE-2026-84485 APITable through 1.13.0-beta.1 Missing Authentication on the Internal Organization Load or Search Endpoint
- CVE-2026-84484 ION-DTN before 4.2.0 Out-of-Bounds Read via decodeSdnv
- CVE-2026-84483 WWBN AVideo Unauthenticated Password Hash Oracle via encryptPass.json.php
- CVE-2026-84482 WWBN AVideo Cross-Site Request Forgery via get_domain() validation
- CVE-2026-84481 WWBN AVideo through 30.0 Information Disclosure via MobileManager
- CVE-2026-84480 WWBN AVideo Password Recovery Token Expiration Bypass
- CVE-2026-84479 WWBN AVideo Authentication Bypass via User-Agent Header
- CVE-2026-84478 WWBN AVideo Unauthenticated Arbitrary Log File Deletion
- CVE-2026-84477 AVideo Stored XSS via Live Schedule Title Description
- CVE-2026-84476 WWBN AVideo Authentication Bypass via X-Real-IP Header
- CVE-2026-84474 Privilege escalation in Red Hat Ansible Automation Platform 2.4 for RHEL 8
- CVE-2026-84471 Use after free in OpenVPN
- CVE-2026-84470 Missing authorization in Red Hat Ansible Automation Platform 2.5 for RHEL 8
- CVE-2026-8447 Cross-site scripting in Langflow OSS
- CVE-2026-84469 fastify vulnerable to request validation bypass via skipped boolean false schemas
- CVE-2026-84465 Zammad: S/MIME signature verification allows forged sender impersonation
- CVE-2026-84464 Zammad: IDOR in External Data Source rendering exposes ticket, user, group, and organization data
- CVE-2026-84463 Cross-site scripting in zammad
- CVE-2026-84462 Zammad: AI Agent template sanitizer bypass leads to remote code execution
- CVE-2026-84461 Zammad: Missing rate limiting allows password brute-forcing during two-factor login
- CVE-2026-84460 Zammad: Missing Authorization in TagsController#list Allows Cross-Object Tag Enumeration
- CVE-2026-8446 Langflow is affected by security vulnerabilities in Model Context Protocol features
- CVE-2026-84458 Zammad: Account takeover via unverified email matching during SSO auto-link
- CVE-2026-84452 Windows ML CLI: CORS misconfig enables localhost RCE
- CVE-2026-84451 libheif: Incomplete fix for CVE-2026-62292 leaves libheif vulnerable to an out-of-bounds read
- CVE-2026-84450 libheif: `clap` + oversized `ispe` aborts on an assert in `Fraction::Fraction` (incomplete fix for CVE-2026-62289)
- CVE-2026-8445 justhtml before 1.12.0 Sanitizer Bypass via Markdown
- CVE-2026-84449 libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV
- CVE-2026-84448 Memory corruption in libheif
- CVE-2026-84447 Denial of service in libheif
- CVE-2026-84446 Denial of service in libheif
- CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
- CVE-2026-84444 libheif uncompressed tiled image encoding allows out-of-bounds write
- CVE-2026-84442 MapQuest Get Directions App com.mapquest.android.ace ExpoShareIntentModule.kt getDataColumn path traversal
- CVE-2026-84441 Piwigo Image Derivative i.php path traversal
- CVE-2026-84440 IBM Guardium Data Protection is affected by multiple vulnerabilities.
- CVE-2026-8444 WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'curselrevs' Parameter
- CVE-2026-84439 Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources
- CVE-2026-84438 OpenCart Autocomplete Workflow edit.php cross site scripting
- CVE-2026-84437 OpenCart Autocomplete Workflow address.php cross site scripting
- CVE-2026-84436 IBM Guardium Data Protection is affected by multiple vulnerabilities.
- CVE-2026-84434 Gravity Forms <= 3.1.0.4 - Unauthenticated Arbitrary File Upload via Hidden File Upload Field
- CVE-2026-84432 Concrete CMS 9 through 9.5.2 is vulnerable to CSRFin the Boards custom slot dialog controller
- CVE-2026-84431 AirAsia MOVE App com.airasia.mobile com.airasia.core.utils.RealPathUtil.getRealPath path traversal
- CVE-2026-84430 gouguoa edit_personal Endpoint Index.php update dynamically-determined object attributes
- CVE-2026-8443 WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) SQL Injection via 'stypes' Parameter
- CVE-2026-84429 Potential denial-of-service vulnerability in HTTP header parsing
- CVE-2026-84428 fastify vulnerable to header validation bypass via incomplete schema case normalization
- CVE-2026-84427 zhayujie CowAgent Bash Tool bash.py denial of service
- CVE-2026-84425 zhayujie CowAgent Browser Tool browser_tool.py BrowserTool denial of service
- CVE-2026-84423 Casdoor upload-resource API resource.go missing authentication
- CVE-2026-84422 IBM Guardium Data Protection is affected by multiple vulnerabilities.
- CVE-2026-84421 DataStage on Cloud Pak for Data has several vulnerabilities
- CVE-2026-84420 Out-of-Bounds Write and Out-of-Bounds Read
- CVE-2026-8442 WP Review Slider Pro <= 12.6.8 - Authenticated (Subscriber+) Arbitrary File Deletion via 'myaction' Parameter
- CVE-2026-84419 Out-of-Bounds Write
- CVE-2026-84418 DataStage on Cloud Pak for Data Improper Certificate Validation
- CVE-2026-84414 IBM i is Affected By An Incorrect Permission Assignment Vulnerability in Network Authentication Service []
- CVE-2026-84412 Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-84411 MikroTik RouterOS Integer Underflow
- CVE-2026-8441 WP Review Slider Pro <= 12.7.2 - Unauthenticated SQL Injection via 'notinstring' Parameter
- CVE-2026-84409 Lantronix G520 Series Cellular Gateway Cross-site Scripting
- CVE-2026-84408 Privilege escalation in QND Advance
- CVE-2026-84403 Botslab G980H Dashcams Missing Authentication for Critical Function
- CVE-2026-84400 CareCam CM2507 Missing Authentication for Critical Function
- CVE-2026-84399 Botslab G980H Dashcams Incorrect Authorization
- CVE-2026-84398 CareCam CM2507 Empty Password in Configuration File
- CVE-2026-84397 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-84396 InDesign Desktop | NULL Pointer Dereference (CWE-476)
- CVE-2026-84395 Premiere Pro | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-84394 fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
- CVE-2026-84393 Security feature bypass in FortiOS
- CVE-2026-84392 Null dereference in FortiOS
- CVE-2026-84391 Denial of service in FortiAnalyzer
- CVE-2026-84390 Information disclosure in FortiMonitorOnSight
- CVE-2026-84389 Open redirect in FortiSIEM
- CVE-2026-84388 Other in FortiPAM Chrome Extension
- CVE-2026-84387 Command injection in FortiSandbox
- CVE-2026-84386 Missing authorization in FortiClientWindows
- CVE-2026-84385 Privilege escalation in FortiSOAR PaaS
- CVE-2026-84384 libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
- CVE-2026-84383 libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
- CVE-2026-84382 HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
- CVE-2026-84381 HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies