Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 343 of 1013.
- CVE-2026-81197 MasterStudy LMS < 3.7.46 - Unauthenticated Unpublished Course Title Disclosure via course-list REST Route
- CVE-2026-81196 MasterStudy LMS < 3.7.46 - Instructor+ Quiz Answer Disclosure via IDOR
- CVE-2026-81195 MasterStudy LMS < 3.7.46 - Unauthenticated Student Enrollment Disclosure via student-courses REST Route
- CVE-2026-81194 MasterStudy LMS < 3.7.46 - Subscriber+ Cross-Instructor Order Data Disclosure via author_id Parameter
- CVE-2026-81192 OpenTelemetry.Resources.Host vulnerable to arbitrary code execution via local PATH hijacking on macOS
- CVE-2026-8119 Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id denial of service
- CVE-2026-81182 SysReptor: Unauthorized file disclosure by broken access control in writable shared notes
- CVE-2026-81181 SysReptor: Session Fixation in Password-Protected Shared Notes
- CVE-2026-81180 SysReptor: Authenticated RCE by insecure image processing
- CVE-2026-8118 Path traversal in Royal Addons for Elementor – Addons and Templates Kit for Elementor
- CVE-2026-81179 SysReptor: Host header injection might allow account takeover
- CVE-2026-81178 SysReptor: Anonymous note-share link discloses project member identities and non-shared note activity
- CVE-2026-81176 Svelte devalue: DoS via malformed input
- CVE-2026-8117 SourceCodester Pizzafy Ecommerce System index.php cross site scripting
- CVE-2026-81168 CAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-105
- CVE-2026-81167 Address Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-103
- CVE-2026-81166 Digital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-109
- CVE-2026-81165 Blazy - Less critical - Access bypass - SA-CONTRIB-2026-104
- CVE-2026-81164 Entity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-114
- CVE-2026-81163 Media Library Importer - Moderately critical - Access bypass - SA-CONTRIB-2026-129
- CVE-2026-81162 Information disclosure in DXPR Builder: The Best Editing (AI) Experience for Drupal
- CVE-2026-81161 Content Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-107
- CVE-2026-81160 Slick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-117
- CVE-2026-8116 huangjunsen0406 xiaozhi-mcphub dxtController.ts path traversal
- CVE-2026-81159 Commerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-106
- CVE-2026-81158 Entity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-113
- CVE-2026-81156 Robo Gallery < 5.2.6 - Contributor+ Stored XSS via Gallery Settings
- CVE-2026-81155 Robo Gallery < 5.2.6 - Author+ Stored XSS via Gallery Search Label
- CVE-2026-81154 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Alt Text
- CVE-2026-81153 Robo Gallery < 5.2.6 - Author+ Stored XSS via Image Overlay Effect Meta
- CVE-2026-8115 gyoridavid short-video-maker REST API rest.ts path traversal
- CVE-2026-8114 JeecgBoot JSON Object loadTreeData sql injection
- CVE-2026-8113 8421bit MiniClaw executeSkillScript kernel.ts isPathInside path traversal
- CVE-2026-8112 8421bit MiniClaw kernel.ts executeCognitivePulse os command injection
- CVE-2026-8111 SQL injection in Endpoint Manager
- CVE-2026-81102 Dropbox Dash MCP Server DNS Rebinding via Missing Host Header Validation
- CVE-2026-81101 Airtable MCP CLI before 0.2.5 Credential Disclosure via Unvalidated Configured Endpoint
- CVE-2026-81100 Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List
- CVE-2026-8110 Privilege escalation in Endpoint Manager
- CVE-2026-81099 Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List
- CVE-2026-81098 Telnyx MCP Server through 6.83.0 Missing Authentication on Streamable HTTP Transport
- CVE-2026-81097 rails-mcp-server 1.4.0 through 1.6.0 OS Command Execution via execute_ruby PTY Escape
- CVE-2026-81096 ToolUniverse through 1.2.6 Unauthenticated Remote Code Execution via python_code_executor Sandbox Escape
- CVE-2026-81095 Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-List
- CVE-2026-81094 mcp-router CLI before 0.6.3 Binds the MCP Aggregator to All Interfaces Without Requiring Authentication
- CVE-2026-81093 Apify Actors MCP Server before 0.9.12 Server-Side Request Forgery via get-html-skeleton
- CVE-2026-81092 mcp-go before 0.56.0 Missing Host Header Validation Enables DNS Rebinding
- CVE-2026-81091 mcp-use Inspector Proxy Server-Side Request Forgery via Caller-Supplied Target URL
- CVE-2026-81090 Gpx2Graphics <= 0.3 - Arbitrary File Upload via CSRF
- CVE-2026-8109 Information disclosure in Endpoint Manager
- CVE-2026-8108 Fuji Electric Tellus Exposed Dangerous Method or Function
- CVE-2026-8106 Cross-site scripting in Enterprise Server
- CVE-2026-81052 Security feature bypass in ThinOS 10
- CVE-2026-81051 Security feature bypass in ThinOS 10
- CVE-2026-81049 Security feature bypass in ThinOS 10
- CVE-2026-81048 Command injection in ThinOS 10
- CVE-2026-81046 Security feature bypass in ThinOS 10
- CVE-2026-81039 Bluetooth Host connection reservation leak when multiple connectable advertising sets share an identity
- CVE-2026-81038 Bluetooth OTS server discloses uninitialized stack memory in failed Calculate Checksum responses
- CVE-2026-81036 Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri
- CVE-2026-81035 Midday Missing Owner Check on Team Deletion
- CVE-2026-81034 Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client
- CVE-2026-81033 Automatisch through 0.15.0 User Enumeration via Forgot-Password Response Discrepancy
- CVE-2026-81032 NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration
- CVE-2026-81031 IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
- CVE-2026-81030 Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint
- CVE-2026-81029 OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI
- CVE-2026-81028 ZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision
- CVE-2026-81027 one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning
- CVE-2026-81026 MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPN
- CVE-2026-81022 SupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak
- CVE-2026-81021 SupportCandy 3.2.9 - 3.5.2 - Unauthenticated Ticket Attachment Disclosure
- CVE-2026-81020 wolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
- CVE-2026-81019 wolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record
- CVE-2026-81018 platform/x86: think-lmi: Free system certificate signatures
- CVE-2026-81017 platform/chrome: sensorhub: Bound the EC-reported sensor number
- CVE-2026-81016 platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
- CVE-2026-81015 platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
- CVE-2026-81014 platform/x86: hp-bioscfg: fix heap OOB read in sk_store() and kek_store()
- CVE-2026-81013 platform/x86: hp-bioscfg: fix heap OOB read on empty password write
- CVE-2026-81012 platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
- CVE-2026-81011 platform/x86: hp-bioscfg: pass validated element count to package parsers
- CVE-2026-81010 io_uring/waitid: honor task_work cancellation
- CVE-2026-81009 io_uring/query: cap user size passed to copy_struct_to_user
- CVE-2026-81008 interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
- CVE-2026-81007 ipmi: ipmb: validate write message length
- CVE-2026-81006 ipmi: Remove all sysfs files on registration failure
- CVE-2026-81005 ipmi: si: Fix NULL pointer dereference after failed registration
- CVE-2026-81004 ipmi:msghandler: Cancel work cleanly on an error
- CVE-2026-81003 net/iucv: filter frames in afiucv_hs_rcv() by ingress device
- CVE-2026-81002 xdp: fix zero-copy frame layout
- CVE-2026-81001 slip: fix use-after-free in sl_sync()
- CVE-2026-81000 net: tun: bound receive headroom
- CVE-2026-8100 Auth bypass in Chef360
- CVE-2026-80999 net: dsa: realtek: use gpiod_set_value_cansleep for reset GPIO
- CVE-2026-80998 net: bnxt: ring the doorbell when SW USO exits early
- CVE-2026-80997 net: ipa: fix stalled modem TX queue after runtime resume
- CVE-2026-80996 net: l2tp: do not propagate multicast notification errors
- CVE-2026-80995 net: mctp: hold a reference to the route device in mctp_route_lookup()
- CVE-2026-80994 net: openvswitch: fix flow mask use-after-free on flow deletion