Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 353 of 1013.
- CVE-2026-79867 Authentication Bypass Leading to Remote Code Execution in AOS-8
- CVE-2026-79866 Unauthenticated Adjacent Path Traversal Vulnerability leads to Filesystem Compromise in AOS-8
- CVE-2026-79865 Unauthenticated Adjacent Memory Corruption Vulnerability leads to Remote Code Execution in AOS-10
- CVE-2026-79864 Unauthenticated Adjacent Command Injection Vulnerability in AOS-10
- CVE-2026-79863 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- CVE-2026-79862 Unauthenticated Adjacent Buffer Overflow Vulnerabilities lead to Remote Code Execution
- CVE-2026-79861 Unauthenticated Command Injection Vulnerability in the PAPI Protocol of AOS-10
- CVE-2026-79860 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- CVE-2026-7986 Security feature bypass in Chrome
- CVE-2026-79859 Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in AOS-8
- CVE-2026-79858 Unauthenticated SQL Injection Vulnerability in the PAPI Protocol of AOS-8
- CVE-2026-79857 Unauthenticated Command Injection Vulnerability in AOS-8 PAPI Protocol
- CVE-2026-79856 Unauthenticated Buffer Overflow Vulnerability leads to Authentication Bypass in AOS-8
- CVE-2026-79855 Authentication Bypass in the SSH Daemon of AOS-8 leads to Complete System Compromise
- CVE-2026-79854 Unauthenticated SQL Injection Vulnerability leads to Remote Code Execution in AOS-10
- CVE-2026-79853 Unauthenticated Sensitive Information Disclosure leads to Remote Code Execution in AOS-10
- CVE-2026-79852 Unauthenticated SQL Injection allows Remote Code Execution in AOS Web-Based Management Interface
- CVE-2026-79851 Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-10
- CVE-2026-79850 Authentication Bypass Leading to Remote Code Execution in AOS-8
- CVE-2026-7985 Use after free in Chrome
- CVE-2026-79849 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
- CVE-2026-79848 Unauthenticated SQL Injection Vulnerabilities allow Remote Code Execution in AOS-8
- CVE-2026-79847 Unauthenticated Buffer Overflow Vulnerabilities leads to Remote Code Execution in AOS-10
- CVE-2026-79846 Unauthenticated Command Injection Vulnerabilities in AOS-8
- CVE-2026-79845 code-projects Simple Inventory System edit.php sql injection
- CVE-2026-79844 Authentication Bypass Leading to Remote Code Execution in AOS-10
- CVE-2026-79843 HPE NonStop SQL/MX EXE - out-of-bounds read vulnerability
- CVE-2026-79842 Auth bypass in HPE Intelligent Management Center (iMC)
- CVE-2026-79841 HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability
- CVE-2026-79840 HPE NonStop XABroker - Memory corruption vulnerability
- CVE-2026-7984 Use after free in Chrome
- CVE-2026-79839 HPE NonStop ODBC/MX Server - Memory corruption vulnerability
- CVE-2026-79838 HPE NonStop ODBC/MX Services - Memory corruption vulnerability
- CVE-2026-79837 HPE NonStop SQL/MX UDR SERVER - Service disruption vulnerability
- CVE-2026-79836 HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerability
- CVE-2026-79835 HPE Nonstop KMS Server - Buffer overflow vulnerability
- CVE-2026-79834 HPE NonStop SQL/MX SQLCAT - Unauthorized command execution vulnerability
- CVE-2026-79833 HPE NonStop ANSI SQLUTIL - Denial of Service vulnerability
- CVE-2026-79832 HPE NonStop SQL/MX Executor - Buffer overflow vulnerability
- CVE-2026-79831 HPE NonStop Posix User Threads - Heap buffer overflow vulnerability
- CVE-2026-79830 HPE NonStop Kernel Level Thread Model Lib - Stack buffer overflow vulnerability
- CVE-2026-7983 Memory corruption in Chrome
- CVE-2026-79829 HPE NonStop HTTP WEBSERVER - Memory corruption vulnerability
- CVE-2026-79828 HPE NonStop Debug Utilities - Heap buffer overflow vulnerability
- CVE-2026-79827 HPE NonStop Inspect Subsystem - Heap buffer overflow vulnerability
- CVE-2026-79826 HPE NonStop OCAX - Heap buffer overflow vulnerability
- CVE-2026-79825 HPE NonStop NDSREST - Heap buffer overflow vulnerability
- CVE-2026-79824 HPE NonStop Python 3.x - Directory traversal vulnerability
- CVE-2026-79823 HPE NonStop EMS Distributor - Buffer Overflow vulnerability
- CVE-2026-79822 HPE NonStop TNS/X Native Inspect - Execution flow vulnerability
- CVE-2026-79821 HPE NonStop SOAP 4.0 - Memory corruption
- CVE-2026-79820 Auth bypass in HPE Integrated Lights-Out (iLO) 7
- CVE-2026-7982 Information disclosure in Chrome
- CVE-2026-79818 Authentication Bypass in the API Interface Allows Unauthorized Information Disclosure in ClearPass Policy Manager
- CVE-2026-79817 Local Disclosure of Sensitive Information in HPE Networking ClearPass Policy Manager Client Software
- CVE-2026-79816 Unauthenticated DOM-Based Cross-Site Scripting (XSS) Vulnerability in the ClearPass Policy Manager Client Interface
- CVE-2026-79815 Authenticated Command Injection Vulnerability in the ClearPass Policy Manager OnGuard Agent
- CVE-2026-79814 Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent
- CVE-2026-79813 Local Privilege Escalation in ClearPass Client Software
- CVE-2026-79812 Authenticated Local Denial-of-Service Vulnerability in the OnGuard Agent of ClearPass Policy Manager
- CVE-2026-79811 Authenticated SQL Injection allows Remote Code Execution in ClearPass Policy Manager API
- CVE-2026-79810 Authenticated Remote Code Execution Vulnerabilities in HPE Networking ClearPass Policy Manager
- CVE-2026-7981 Memory corruption in Chrome
- CVE-2026-79809 Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass
- CVE-2026-79808 Local Authenticated Buffer Overflow Vulnerability in the ClearPass Policy Manager OnGuard Agent
- CVE-2026-79807 Privilege escalation in ClearPass Policy Manager (CPPM)
- CVE-2026-79806 Authenticated Local Privilege Escalation in ClearPass Policy Manager OnGuard Linux Agent
- CVE-2026-79805 Path traversal in ClearPass Policy Manager (CPPM)
- CVE-2026-79804 SililaWijesinghe Food Ordering System search.php sql injection
- CVE-2026-79803 Authenticated Command Injection Leading to Privilege Escalation in ClearPass Policy Manager API
- CVE-2026-79802 Command Injection Vulnerability in the ClearPass Policy Manager Client Software
- CVE-2026-79801 Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent
- CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager
- CVE-2026-7980 Use after free in Chrome
- CVE-2026-79799 Cross-site scripting in ClearPass Policy Manager (CPPM)
- CVE-2026-79798 Authenticated SQL Injection Vulnerabilities in ClearPass Policy Manager Web-Based Management Interface
- CVE-2026-79797 Improper Access Control in HPE Networking ClearPass Android Client Application
- CVE-2026-79796 Authentication Bypass Vulnerabilities in ClearPass Policy Manager
- CVE-2026-79794 Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
- CVE-2026-79793 code-projects Online Shopping System sumit_form.php cross site scripting
- CVE-2026-79792 zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection
- CVE-2026-7979 Information disclosure in Chrome
- CVE-2026-79788 Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Address
- CVE-2026-79787 Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature
- CVE-2026-79786 Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration
- CVE-2026-79785 X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads
- CVE-2026-79784 Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration
- CVE-2026-79783 rclone before 1.74.4 Privilege Escalation via setuid Metadata
- CVE-2026-79782 rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect
- CVE-2026-79781 rclone serve s3 Path Traversal via dot-dot object keys
- CVE-2026-79780 rclone before v1.75.0 Credential Exposure via S3 Redirect
- CVE-2026-7978 Privilege escalation in Chrome
- CVE-2026-79779 rclone before v1.75.0 WebDAV Credential Exposure via HTTPS-to-HTTP Redirect
- CVE-2026-79778 rclone before v1.75.0 Denial of Service via TUS nil-response panic
- CVE-2026-79777 rclone before v1.75.0 Information Disclosure via RC API
- CVE-2026-79776 rclone before 1.75.0 Authentication Bypass via pprof
- CVE-2026-79775 rclone Archive Backend SquashFS Parser Denial of Service
- CVE-2026-79774 Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy
- CVE-2026-79773 Winter CMS before 1.2.13 Local File Inclusion via JavaScript
- CVE-2026-79772 Nokogiri before 1.19.1 Unchecked Return Value canonicalize