Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 352 of 1013.
- CVE-2026-79980 Predictable and reused DHCPv4 transaction identifier allows spoofed DHCP replies to reconfigure gateway and DNS
- CVE-2026-7998 Other in Chrome
- CVE-2026-79979 Stale TLB entries after demand-paging page-out let arm64 user threads access reused physical frames
- CVE-2026-79978 Out-of-bounds write in the ADXL345 sensor driver RTIO streaming FIFO read path
- CVE-2026-79977 WireGuard peer endpoint learned from unauthenticated transport-data messages allows off-path tunnel hijack in Zephyr
- CVE-2026-79976 NULL pointer dereference in the MCTP I2C+GPIO target binding triggerable by a peer I2C controller
- CVE-2026-79975 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79974 Auth bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79973 Race condition in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79972 SQL injection in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79971 Cross-site scripting in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79970 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-7997 Privilege escalation in Chrome
- CVE-2026-79969 Race condition in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79968 Race condition in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79967 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79966 CWE-532: Insertion of Sensitive Information into Log File
- CVE-2026-79965 Auth bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79964 Other in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79963 Supply chain in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79962 Race condition in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79961 Auth bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79960 Gitea deploy key pushes acting as the repository owner
- CVE-2026-7996 Other in Chrome
- CVE-2026-79959 Botslab G980H Dashcams Use of Hard-coded Credentials
- CVE-2026-79957 ServiceNext Insecure Direct Object Reference via GetUsarios
- CVE-2026-79956 Improper Sanitization leads to Command Injection in AOS-8 Web Interface
- CVE-2026-79955 Unauthenticated Memory Corruption Vulnerability leads to Denial-of-Service in AOS-8
- CVE-2026-79954 NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
- CVE-2026-79952 Other in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79950 Hardcoded credentials in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-7995 Memory corruption in Chrome
- CVE-2026-79947 Command injection in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79946 Cross-site scripting in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79945 Command injection in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79944 Privilege escalation in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79943 Security feature bypass in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79942 Privilege escalation in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79941 Command injection in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-79940 Missing authorization in iDRAC9
- CVE-2026-7994 Privilege escalation in Chrome
- CVE-2026-79939 Other in Cyber Recovery
- CVE-2026-79938 Auth bypass in Cyber Recovery
- CVE-2026-7993 Other in Chrome
- CVE-2026-79921 amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload
- CVE-2026-79920 Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task
- CVE-2026-7992 Code injection in Chrome
- CVE-2026-79919 Security feature bypass in MaxKB
- CVE-2026-79918 MaxKB: Sandbox escape via unhooked fexecve
- CVE-2026-79917 MaxKB: Chat share-link endpoint missing owner check: a chat token can publish another user's conversation
- CVE-2026-79916 MaxKB AWS Bedrock model credential injection leads to remote code execution
- CVE-2026-79913 Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses
- CVE-2026-79912 TOTOLINK N600R cstecgi.cgi getCurrentTime command injection
- CVE-2026-79911 TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow
- CVE-2026-79910 Acrobat Reader | Out-of-bounds Read (CWE-125)
- CVE-2026-7991 Use after free in Chrome
- CVE-2026-79909 Acrobat Reader | Use After Free (CWE-416)
- CVE-2026-79908 Acrobat Reader | Out-of-bounds Write (CWE-787)
- CVE-2026-79907 Acrobat Reader | Double Free (CWE-415)
- CVE-2026-79906 Substance3D - Modeler | Out-of-bounds Write (CWE-787)
- CVE-2026-79905 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-79904 Photoshop Mobile | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-79902 Gimp: stack vla size underflow denial of service in seattle
- CVE-2026-79901 Predictable Active Directory service-account passwords in BoKS Manager
- CVE-2026-79900 Heap overflow in KSL checksum initialization
- CVE-2026-7990 Privilege escalation in Chrome
- CVE-2026-79899 Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability
- CVE-2026-79898 Fortra BoKS Manager crlserver command injection vulnerability
- CVE-2026-79896 Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability
- CVE-2026-79895 Unauthenticated Remote Denial-of-Service (DoS) Vulnerabilities in AOS-10
- CVE-2026-79894 Unauthenticated Denial-of-Service (DoS) Vulnerability in the PAPI Protocol of AOS-8
- CVE-2026-79893 Unauthenticated Memory Corruption Vulnerabilities lead to Denial-of-Service in AOS-10
- CVE-2026-79892 Authenticated Local Memory Corruption Vulnerability leads to Arbitrary Code Execution in AOS-8
- CVE-2026-79891 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8
- CVE-2026-79890 Unauthenticated Command Injection Vulnerabilities in AOS-8 Accessed by the PAPI Protocol
- CVE-2026-7989 Other in Chrome
- CVE-2026-79889 Multiple Unauthenticated Buffer Overflow vulnerabilities in AOS-8 Web Interface result in Remote Code Execution
- CVE-2026-79888 Unauthenticated Buffer Overflow allows Remote Code Execution in web interface
- CVE-2026-79887 Authentication Bypass in Web Interface of AOS-8 allows Remote Command Execution (RCE)
- CVE-2026-79886 Unauthenticated Buffer Overflow Vulnerability leads to Denial-of-Service in AOS-8
- CVE-2026-79885 Unauthenticated File Write Vulnerability leads to Denial-of-Service in AOS-8
- CVE-2026-79884 Authentication Bypass leads to Sensitive Information Disclosure in AOS-8
- CVE-2026-79883 Memory corruption in ArubaOS (AOS)
- CVE-2026-79882 Unauthenticated Adjacent Command Injection Vulnerability in the PAPI Protocol of AOS-10
- CVE-2026-79881 Authentication Bypass Leading to Remote Code Execution in AOS-8
- CVE-2026-79880 Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8
- CVE-2026-7988 Memory corruption in Chrome
- CVE-2026-79879 Unauthenticated Adjacent Memory Corruption Vulnerabilities lead to Remote Code Execution in AOS-10
- CVE-2026-79878 Command injection in ArubaOS (AOS)
- CVE-2026-79877 Unauthenticated Adjacent Remote Code Execution Vulnerability in AOS-10
- CVE-2026-79876 Unauthenticated Adjacent Sensitive Information Disclosure in AOS-10 Wi-Fi Frame Processing
- CVE-2026-79875 Authentication Bypass in the PAPI Protocol of AOS-8 Allows Unauthorized Administrative Access
- CVE-2026-79874 Authentication Bypass in the API allows Administrative Access of AOS-10
- CVE-2026-79873 Auth bypass in ArubaOS (AOS)
- CVE-2026-79872 Unauthenticated Buffer Overflow Vulnerability allows Remote Code Execution in AOS-10 and AOS-8
- CVE-2026-79871 Unauthenticated Sensitive Information Disclosure in the Command Line Interface of AOS-10
- CVE-2026-79870 Authentication Bypass leads to Unauthorized Access in AOS-8
- CVE-2026-7987 Use after free in Chrome
- CVE-2026-79869 Authentication Bypass Leading to Remote Code Execution in AOS-10
- CVE-2026-79868 Authentication Bypass Vulnerabilities lead to Complete System Compromise in AOS-8