Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 351 of 1013.
- CVE-2026-80145 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
- CVE-2026-80144 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
- CVE-2026-80143 Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
- CVE-2026-8014 Information disclosure in Chrome
- CVE-2026-80138 ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameter
- CVE-2026-80135 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80134 Hardcoded credentials in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80133 Path traversal in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80132 Auth bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80131 Path traversal in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80130 Path traversal in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-8013 Information disclosure in Chrome
- CVE-2026-80129 Path traversal in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80128 Auth bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80127 Command injection in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80126 Other in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80125 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80124 Information disclosure in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80123 Server-side request forgery in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80122 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-8012 Cross-site scripting in Chrome
- CVE-2026-80119 PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL
- CVE-2026-80118 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL
- CVE-2026-80117 PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys
- CVE-2026-80116 PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
- CVE-2026-80115 PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL
- CVE-2026-80114 PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys
- CVE-2026-80113 PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL
- CVE-2026-80112 PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys
- CVE-2026-80110 Missing authorization in Red Hat Certificate System 9
- CVE-2026-8011 Security feature bypass in Chrome
- CVE-2026-80104 DB-GPT 0.8.0 Path Traversal Arbitrary File Write via Skill Upload Filename
- CVE-2026-80101 Gimp: multiple heap out-of-bounds reads in xwd loader from unrelated width and bytes-per-line validation
- CVE-2026-8010 Security feature bypass in Chrome
- CVE-2026-80099 Auth bypass in WP Module Data
- CVE-2026-80098 Copilot Studio Elevation of Privilege Vulnerability
- CVE-2026-80097 Microsoft Authenticator Elevation of Privilege Vulnerability
- CVE-2026-80096 Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-80093 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-80092 Microsoft Identity Web Elevation of Privilege Vulnerability
- CVE-2026-80091 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80090 Microsoft Office Word Information Disclosure Vulnerability
- CVE-2026-8009 Security feature bypass in Chrome
- CVE-2026-80089 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80088 Microsoft Office Word Information Disclosure Vulnerability
- CVE-2026-80087 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80086 Microsoft Office PowerPoint Information Disclosure Vulnerability
- CVE-2026-80085 Microsoft Office Word Remote Code Execution Vulnerability
- CVE-2026-80084 Microsoft Office Outlook Information Disclosure Vulnerability
- CVE-2026-80083 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2026-80082 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80081 Microsoft Office PowerPoint Remote Code Execution Vulnerability
- CVE-2026-80080 Microsoft Office Word Remote Code Execution Vulnerability
- CVE-2026-8008 Other in Chrome
- CVE-2026-80079 Microsoft Office Word Information Disclosure Vulnerability
- CVE-2026-80078 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80077 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-80076 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-80075 Windows Work Folders Elevation of Privilege Vulnerability
- CVE-2026-80074 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-80073 Microsoft Office Outlook Information Disclosure Vulnerability
- CVE-2026-80072 User Registration & Membership < 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters
- CVE-2026-80071 User Registration & Membership < 5.2.8 - Author+ Privilege Escalation to Administrator
- CVE-2026-8007 Privilege escalation in Chrome
- CVE-2026-80069 MasterStudy LMS WordPress Plugin < 3.7.50 Missing Authorization via stm_lms_send_test_email_ajax
- CVE-2026-80067 MasterStudy LMS WordPress Plugin < 3.7.50 Path Traversal via stm_lms_step Parameter
- CVE-2026-8006 Security feature bypass in Chrome
- CVE-2026-80058 Information disclosure in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80057 Hardcoded credentials in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80056 Information disclosure in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80055 Other in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80054 Misconfiguration in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-80051 Denial of service in graphql-go
- CVE-2026-80050 ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints
- CVE-2026-8005 Security feature bypass in Chrome
- CVE-2026-80049 Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId
- CVE-2026-80048 Sssd: sssd-kcm: local denial of service via excessive memory preallocation
- CVE-2026-80047 Hugging Face Transformers library writes remote code to disk prior to consent check
- CVE-2026-8004 Security feature bypass in Chrome
- CVE-2026-8003 Other in Chrome
- CVE-2026-8002 Use after free in Chrome
- CVE-2026-8001 Use after free in Chrome
- CVE-2026-8000 Code injection in Chrome
- CVE-2026-79996 User Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings
- CVE-2026-79995 User Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR
- CVE-2026-79994 Docker Sandboxes UDS forwarder can reach arbitrary host Unix sockets through a symlink race
- CVE-2026-79993 Missing authorization in Apache ZooKeeper
- CVE-2026-79992 Emacs: emacs: command injection via crafted filenames in tramp
- CVE-2026-79991 Authenticated SQL Injection via nested eager-loading criteria
- CVE-2026-79990 GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete
- CVE-2026-7999 Information disclosure in Chrome
- CVE-2026-79989 Arbitrary user password reset leading to administrator account takeover
- CVE-2026-79988 Authenticated RCE through Twig sandbox escape
- CVE-2026-79987 Low-privilege RCE through element-search eager loading
- CVE-2026-79986 Path traversal in Apache Camel
- CVE-2026-79985 Path traversal in Apache Camel
- CVE-2026-79984 Path traversal in Apache Camel
- CVE-2026-79983 Path traversal in Apache Camel
- CVE-2026-79982 Memory corruption in zephyr
- CVE-2026-79981 DNS resolver reuses a single UDP source port for all queries, easing off-path answer spoofing