Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 331 of 1013.
- CVE-2026-82751 Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
- CVE-2026-82750 Business logic in mpp
- CVE-2026-8275 bettercap zerogod IPP Service zerogod_ipp_primitives.go ippReadChunkedBody integer coercion
- CVE-2026-82749 Missing authorization in ash
- CVE-2026-82748 Ash.Actions.Aggregate authorizes an aggregate under one action but computes it under another
- CVE-2026-82747 Ash.Policy.Authorizer returns records denied by a runtime read policy to any actor
- CVE-2026-82746 Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records
- CVE-2026-82745 ETS and Mnesia data layers overwrite an existing record on create instead of enforcing primary-key uniqueness
- CVE-2026-82744 Ash.Reactor change step fails open, skipping a change when its where guard raises
- CVE-2026-82743 Ash.Actions.Read.AsyncLimiter busy-spins a scheduler while awaiting slow async reads
- CVE-2026-82742 Ash.Filter.Runtime materializes a combinatorial cross-product over to-many relationships, exhausting memory
- CVE-2026-82741 Ash.Type.Union with :map_with_tag does not force the tag on dump, enabling tag confusion
- CVE-2026-82740 Ash.Type ignores outer array constraints on nested {:array, {:array, type}} inputs
- CVE-2026-8274 npitre cramfs-tools Directory cramfsck.c do_directory path traversal
- CVE-2026-82739 Ash.Resource.Validation.Confirm leaks a confirmed field's stored value in the atomic mismatch error
- CVE-2026-82738 Ash.Type.UUIDv7 accepts non-v7 UUIDs that then fail to load, causing persistent denial of service
- CVE-2026-82737 Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads
- CVE-2026-82736 Ash.Type.CiString validates length and match constraints before case folding, allowing constraint bypass
- CVE-2026-82735 Match regex runs on over-length input in Ash.Type.String, enabling regex denial of service
- CVE-2026-82734 Non-finite Infinity/NaN decimal values bypass bounds constraints in Ash.Type.Decimal
- CVE-2026-82733 Route handler return value echoed into AshTypescript error response
- CVE-2026-82732 Declared argument constraints not enforced on AshTypescript typed controller routes
- CVE-2026-82731 Unescaped path parameters in AshTypescript generated TypeScript client allow request redirection
- CVE-2026-82730 Authorization-redacted field values disclosed through AshTypescript result normalization
- CVE-2026-8273 D-Link DNS-320 system_mgr.cgi cgi_merge_user os command injection
- CVE-2026-82729 Quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS
- CVE-2026-82728 Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS
- CVE-2026-82727 AshPhoenix Form.Auto leaks submitted params in an unknown _union_type error message
- CVE-2026-82726 AshPhoenix get_subdomain maps a crafted or differently-cased Host header to an arbitrary tenant
- CVE-2026-82725 AshPhoenix FilterForm allows filtering across non-public relationships, disclosing private related data
- CVE-2026-82724 Broken access control in AshPhoenix SubdomainHook via a nil tenant in handle_subdomain
- CVE-2026-82723 Actor record with password digest stored in AshAuthentication audit log entries
- CVE-2026-82722 AshAdmin LiveView events intern atoms from client input, exhausting the atom table (node DoS)
- CVE-2026-82720 Use-after-free in DoH stream cleanup code path
- CVE-2026-8272 D-Link DNS-320 webfile_mgr.cgi chown os command injection
- CVE-2026-82717 CNAME synthesis could lead to heap corruption
- CVE-2026-82716 Botslab G980H Dashcams Insertion of Sensitive Information into Log File
- CVE-2026-82715 Other in Hitachi Disk Array Driver for AIX
- CVE-2026-82712 Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery
- CVE-2026-82710 Terminal escape sequence injection in mix usage_rules.search_docs via package documentation metadata
- CVE-2026-8271 D-Link DNS-320 network_mgr.cgi cgi_upnp_edit os command injection
- CVE-2026-82708 Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory
- CVE-2026-82703 Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injection
- CVE-2026-82702 Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injection
- CVE-2026-82701 code-projects Online Shopping System Search Functionality action.php sql injection
- CVE-2026-82700 code-projects Online Shopping System Newsletter Subscription offersmail.php cross site scripting
- CVE-2026-8270 Open5GS SMF ogs_nas_parse_qos_rules denial of service
- CVE-2026-82699 sambitraj Student Management System Password aca.sql cleartext storage
- CVE-2026-82698 sambitraj Student-Management-System aca.sql default password
- CVE-2026-82697 sambitraj Student-Management-System session_start cookie httponly flag
- CVE-2026-82696 itsourcecode Sales and Inventory System inv_searchfrm.php sql injection
- CVE-2026-82695 Tenda AC18 Telnet telnet missing authentication
- CVE-2026-82694 Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication
- CVE-2026-82693 Tenda AC1206 Web UI telnet TendaTelnet missing authentication
- CVE-2026-82692 D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection
- CVE-2026-82691 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
- CVE-2026-82690 D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection
- CVE-2026-8269 Open5GS SMF smf_nsmf_handle_create_sm_context denial of service
- CVE-2026-82689 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
- CVE-2026-82688 D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection
- CVE-2026-82685 Confirmation token accepted on any record in AshAuthentication
- CVE-2026-82684 Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization
- CVE-2026-82681 Query-parameter injection in AshAdmin row-action links via unencoded string primary keys
- CVE-2026-82680 D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write
- CVE-2026-8268 Open5GS SMF OpenAPI_list_create denial of service
- CVE-2026-82679 diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
- CVE-2026-82678 diem-project diem Administrative Console actions.class.php executeCommand os command injection
- CVE-2026-82677 valkey-io valkey Module Timer module.c moduleTimerHandler double free
- CVE-2026-82673 Path traversal in AshAdmin file uploads via unsanitized client filename
- CVE-2026-82672 Other in mint
- CVE-2026-82671 IObit Unlocker IRP_MJ_DEVICE_CONTROL IObitUnlocker.sys ZwTerminateProcess privileges management
- CVE-2026-82670 IObit Uninstaller IOCTL IUForceDelete.sys IRP_MJ_DEVICE_CONTROL privileges management
- CVE-2026-8267 Open5GS SMF smf_nsmf_handle_created_data_in_vsmf denial of service
- CVE-2026-82669 klaussilveira GitList XML Parsing CommandLine.php SimpleXMLElement denial of service
- CVE-2026-82668 klaussilveira GitList Git Command Line CommandLine.php getDefaultBranch os command injection
- CVE-2026-82667 Server-side request forgery in GEOFlow
- CVE-2026-82666 yaojingang GEOFlow Superadmin Theme Editor SiteThemeEditorController.php preview code injection
- CVE-2026-82665 yaojingang GEOFlow Image Library Cleanup ImageLibraryController.php unlink path traversal
- CVE-2026-82664 yaojingang GEOFlow JSON-LD Theme HomeController.php cross site scripting
- CVE-2026-82662 Nodemailer before 8.0.8 TLS Certificate Validation Bypass
- CVE-2026-82661 Nodemailer CRLF Injection via List-* Header Comments
- CVE-2026-82660 Nodemailer jsonTransport bypasses disableFileAccess and disableUrlAccess
- CVE-2026-8266 Open5GS SMF gsm-build.c gsm_build_pdu_session_establishment_accept denial of service
- CVE-2026-82659 nodemailer before 9.0.1 File Read and SSRF via raw option
- CVE-2026-82658 Admidio before 5.0.12 Broken Access Control via profile_function.php
- CVE-2026-82657 Admidio before 5.0.12 Authentication Bypass via RSS feeds
- CVE-2026-82656 Admidio before 5.0.12 Path Traversal via Photo ZIP Download
- CVE-2026-82655 Admidio before 5.0.12 SQL Injection via relation_type_list
- CVE-2026-82654 SiYuan before v3.8.1 Stored XSS via block name
- CVE-2026-82653 SiYuan before v3.8.1 Stored XSS via confirmDialog
- CVE-2026-82652 SiYuan before v3.8.1 Information Disclosure via Publish Access
- CVE-2026-82651 SiYuan before v3.8.1 Missing Authorization via /history and /repo/diff
- CVE-2026-82650 SiYuan before v3.8.1 Path Traversal via /api/template/render
- CVE-2026-8265 Tenda AC6 httpd getLogFile get_log_file os command injection
- CVE-2026-82649 SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Path
- CVE-2026-82648 WWBN AVideo SSRF Filter Bypass via NAT64 Hex Address
- CVE-2026-82647 WWBN AVideo Cross-Site Request Forgery via sendEmail.json.php
- CVE-2026-82646 WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.php
- CVE-2026-82645 AVideo Unauthenticated Stream Credential Disclosure via Forgeable Token
- CVE-2026-82644 WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-Agent