Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 333 of 1013.
- CVE-2026-82537 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Parser Word-Boundary Mismatch
- CVE-2026-82536 Roo-Code 3.54.0 Auto-Approve Bypass via Shell Command Pipe Operator
- CVE-2026-82535 Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
- CVE-2026-82533 DeepSeek Harness < 0.1.2-alpha.1 Authentication Bypass via Host Header Spoofing
- CVE-2026-82531 Smarty before 4.5.8 and 5.x before 5.8.5 PHP Code Injection via extends: Inheritance Cache
- CVE-2026-82530 IP2Location Country Blocker < 2.45.0 Access Control Bypass via X-Real-IP Header
- CVE-2026-8253 Devs Palace ERP Online purchase_save cross site scripting
- CVE-2026-82527 R2R 3.6.6 SQL Injection via Retrieval Search Filter Key
- CVE-2026-82526 R2R 3.6.6 SQL Injection via Vector Index Creation Endpoint
- CVE-2026-82525 Exterro FTK Imager < 8.3 XXE via Report.xml XSLT Processing
- CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
- CVE-2026-82522 libjxl < 0.12.0 Container Box Parser Integer Underflow via 32-bit Size Truncation
- CVE-2026-82521 parsedmarc 9.0.6 < 11.0.1 Path Traversal via Forensic Report Subject
- CVE-2026-82520 parsedmarc < 11.0.1 Zip Bomb DoS via Compressed Email Attachments
- CVE-2026-8252 Open5GS SMF smf_nsmf_handle_create_data_in_hsmf null pointer dereference
- CVE-2026-82519 Really Simple Security < 9.8.2 Authorization Bypass via profile-page update handler
- CVE-2026-8251 Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
- CVE-2026-8250 Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list denial of service
- CVE-2026-8249 Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
- CVE-2026-82488 Beetel 450TC3 User Management cross site scripting
- CVE-2026-82487 Beetel 450TC3 password recovery
- CVE-2026-82486 SiteServer SSCMS Agent Installation Workflow access control
- CVE-2026-82485 itsourcecode Sales and Inventory System pro_edit.php sql injection
- CVE-2026-82484 itsourcecode Sales and Inventory System emp_searchfrm.php sql injection
- CVE-2026-82483 coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting
- CVE-2026-82482 coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting
- CVE-2026-82481 Path traversal in cohttp
- CVE-2026-82480 NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow
- CVE-2026-8248 Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qos denial of service
- CVE-2026-82479 NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflow
- CVE-2026-82478 NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflow
- CVE-2026-82477 Server-side request forgery in Heimdall
- CVE-2026-82476 Memos through 0.30.0 SSRF via Omitted CGNAT Address Range
- CVE-2026-82475 iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Check
- CVE-2026-82474 Sudo through 1.9.17p2 Intercept Policy Bypass via execveat
- CVE-2026-82473 KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpoints
- CVE-2026-82472 Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf
- CVE-2026-82470 Rodauth before 2.47.0 TOTP Code Reuse via Drift Window
- CVE-2026-8247 WatchGuard Firebox admd Out of Bounds Write Vulnerability
- CVE-2026-82469 Rodauth before 2.47.0 Authentication Bypass via jwt_refresh
- CVE-2026-82468 Rodauth before 2.47.0 CSRF Protection Bypass via Content-Type
- CVE-2026-82467 Rodauth before 2.47.0 Open Redirect via Return-to Path
- CVE-2026-82466 Rodauth before 2.46.0 Authentication Bypass via webauthn_login
- CVE-2026-82465 pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequest
- CVE-2026-82464 pac4j-core before 6.5.6 Open Redirect via Backslash Logout
- CVE-2026-82463 pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Check
- CVE-2026-82462 pac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitution
- CVE-2026-82461 pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Token
- CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
- CVE-2026-82459 Integer overflow in Apache Thrift
- CVE-2026-82458 Denial of service in Apache Thrift
- CVE-2026-82457 su-exec through 0.3 Privilege Escalation via Numeric User ID
- CVE-2026-82456 argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTP
- CVE-2026-82454 Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-in
- CVE-2026-82453 rust-iot-platform Cleartext Password Storage via User Model
- CVE-2026-82452 rust-iot-platform Authentication Bypass via Missing Request Guards
- CVE-2026-82451 Formwork < 2.3.11 Stored XSS via Referer Header
- CVE-2026-82450 BookStack before 26.05.4 Remote Code Execution via Book Cover
- CVE-2026-8245 Concrete CMS 9.5.0 and below is vulnerable to Reflected XSS in Legacy Pagination via HTML attribute injection
- CVE-2026-82449 Cockpit CMS before 2.14.1 Account Enumeration via Auth Timing
- CVE-2026-82448 Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node Key
- CVE-2026-82447 Skyvern before 1.0.45 Sandbox Escape via TextPromptBlock
- CVE-2026-82443 Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-82441 Apache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keys
- CVE-2026-8244 Industrial Application Software IAS Canias ERP Login RMI improper authentication
- CVE-2026-82439 Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC
- CVE-2026-82438 Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins
- CVE-2026-82437 Apache Storm Logviewer: Log Access Controls Not Enforced by Logviewer
- CVE-2026-82435 Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder
- CVE-2026-82434 Information disclosure in Apache Storm Client
- CVE-2026-82433 Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI
- CVE-2026-82432 Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides
- CVE-2026-82431 Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users
- CVE-2026-82430 Apache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the Tenant
- CVE-2026-8243 Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key
- CVE-2026-82429 Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher
- CVE-2026-82428 Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys
- CVE-2026-82427 Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name
- CVE-2026-82426 Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location
- CVE-2026-82425 Apache bRPC: Reachable Assertion in Socket::OnInputEvent Allows Remote Denial of Service
- CVE-2026-82424 PHPGurukul Student Information System student_edit1.php sql injection
- CVE-2026-82423 macrozheng mall Payment Status Endpoint paySuccess behavioral workflow
- CVE-2026-82422 itsourcecode Sales and Inventory System emp_del.php sql injection
- CVE-2026-82421 itsourcecode Sales and Inventory System emp_edit.php sql injection
- CVE-2026-8242 Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
- CVE-2026-82417 qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property
- CVE-2026-82416 FrankenPHP: Cross-request PHP session ID leak in worker mode when the session extension is a shared module
- CVE-2026-82412 ntopng: Remote Code Execution via OS Command Injection in Vulnerability-Scan REST API
- CVE-2026-82411 Objects API: Cross-object-type authorization bypass on the object history-detail endpoint
- CVE-2026-82410 Pocketbase: Unhandled panic in worker goroutines
- CVE-2026-8241 Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization
- CVE-2026-82409 Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery
- CVE-2026-82407 Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS
- CVE-2026-82406 Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace
- CVE-2026-82405 Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller
- CVE-2026-82404 TOON: Prototype pollution when decoding untrusted TOON input
- CVE-2026-82402 Gogs: Open Redirect in /redirect endpoint via backslash bypass in `IsSameSite`
- CVE-2026-8240 Concrete CMS 9.5.0 and below is vulnerable to unauthenticated page metadata disclosure in Backend\SummaryTemplate
- CVE-2026-82399 CoreDNS: Unauthenticated memory exhaustion in custom transports
- CVE-2026-82398 pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace