Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 389 of 1013.
- CVE-2026-74881 openssl_encrypt before 1.4.0 CORS Misconfiguration via Wildcard Origins
- CVE-2026-74880 openssl_encrypt before 1.4.0 Token Leakage via Query Parameters
- CVE-2026-7488 Sensitive Data Exposure in IKAS Technologies' E-Commerce
- CVE-2026-74879 openssl_encrypt before 1.4.0 Information Disclosure via /ready endpoint
- CVE-2026-74878 openssl_encrypt before 1.4.0 TOTP Rate Limiter Bypass
- CVE-2026-74877 openssl_encrypt before 1.4.0 Missing Ownership Verification via revoke_key
- CVE-2026-74876 openssl_encrypt before 1.4.0 Unverified Key Bundle Encryption
- CVE-2026-74875 openssl_encrypt before 1.4.0 Schema Validation Bypass
- CVE-2026-74874 openssl_encrypt before 1.4.0 Weak PRNG Steganography Pixel Selection
- CVE-2026-74873 openssl_encrypt before 1.4.0 Password Exposure via CLI Argument
- CVE-2026-74872 openssl_encrypt before 1.4.0 Arbitrary Code Execution via Whirlpool
- CVE-2026-74871 openssl_encrypt before 1.4.6 KDF Bypass via Sequential-XOR
- CVE-2026-74870 openssl_encrypt before 1.4.8 Hardware Pepper Information Disclosure
- CVE-2026-7487 Access Control Check Implemented After Asset is Accessed in GitLab
- CVE-2026-74869 stoatchat before 0.15.0 Missing Authorization via Subscribe
- CVE-2026-74868 SiYuan before 3.7.4 Brute-Force Authentication via Publish Service
- CVE-2026-74867 SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth
- CVE-2026-74866 @fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name
- CVE-2026-74865 Authentication Bypass in sogo_yhn
- CVE-2026-74864 Authentication Bypass in sogo_yhn
- CVE-2026-74860 Libxml2: double-free/uaf in libxml2 python bindings
- CVE-2026-7486 SQLi in Netcad's E-İmar
- CVE-2026-74859 Gnome-tweaks: path traversal in theme installer
- CVE-2026-74858 jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery
- CVE-2026-74853 Pods < 3.3.9.2 - Author+ Arbitrary File Read via Shortcode Display Callback
- CVE-2026-74851 Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback
- CVE-2026-7485 Frozen BI aggregations leak host and service names to unauthorized users
- CVE-2026-74849 Remote code execution vulnerability
- CVE-2026-74848 Apache APISIX: Cross-user response poisoning in serverless plugins
- CVE-2026-74845 2100 Technology｜Official Document Management System - Arbitrary File Upload
- CVE-2026-74843 Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
- CVE-2026-74842 Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery
- CVE-2026-7484 Improper Access Control in Abis Technology's AVESİS
- CVE-2026-74837 Unbounded atom creation from client-supplied RPC field names in AshTypescript field formatter
- CVE-2026-74836 HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit
- CVE-2026-74835 inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception
- CVE-2026-7483 Local privilege escalation in ESET security applications for macOS
- CVE-2026-74820 Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
- CVE-2026-7482 Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
- CVE-2026-7481 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-74804 Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
- CVE-2026-74803 Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64
- CVE-2026-74802 SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy
- CVE-2026-74801 SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe
- CVE-2026-74800 SiYuan before v3.7.4 Stored XSS via assets endpoint
- CVE-2026-7480 Privilege escalation in ASUS System Control Interface
- CVE-2026-74799 SiYuan before 3.7.4 Unauthenticated Debug Endpoint Information Disclosure
- CVE-2026-74798 SiYuan kernel Path Traversal via database_clean MCP tool
- CVE-2026-74797 OpenTofu before 1.11.4 Denial of Service via malicious zip
- CVE-2026-74796 OpenTofu before 1.11.7 Symlink Following Path Traversal
- CVE-2026-74795 Scriban before 6.6.0 Denial of Service via Uncontrolled Recursion
- CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion
- CVE-2026-74793 justhtml before 3.11.0 XSS via selectedcontent projection
- CVE-2026-74792 Scriban before 7.0.0 Stack Overflow via nested array initializers
- CVE-2026-74791 Scriban before 7.0.0 Authorization Bypass via Stale Include Cache
- CVE-2026-74790 Scriban before 7.0.0 MemberFilter Bypass via TemplateContext Cache
- CVE-2026-74789 Scriban before 7.0.0 LoopLimit Bypass via Built-in Operations
- CVE-2026-74788 Scriban before 7.0.0 Denial of Service via string.pad_left/pad_right
- CVE-2026-74787 Scriban before 7.0.0 Uncontrolled Recursion via object.to_json
- CVE-2026-74786 Scriban before 7.0.0 Denial of Service via Unbounded Template Output
- CVE-2026-74785 Scriban before 7.0.0 Denial of Service via Unbounded Resource Consumption
- CVE-2026-74784 Scriban before 7.2.0 Denial of Service via array.insert_at
- CVE-2026-74783 Scriban 6.6.0 through 7.2.0 Parser Recursion Denial of Service
- CVE-2026-74774 Security feature bypass in PowerProtect One
- CVE-2026-74771 Missing authorization in PowerProtect One
- CVE-2026-74770 Command injection in PowerProtect One
- CVE-2026-7477 Mali GPU Kernel Driver allows access to already freed memory
- CVE-2026-74769 Missing authorization in PowerProtect Data Manager
- CVE-2026-74768 Server-side request forgery in PowerProtect Data Manager
- CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb
- CVE-2026-74766 Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the outpu
- CVE-2026-74765 Net::IDN::Punycode versions before 2.590 for Perl allow an out-of-bounds read via integer overflow of the delta accumulator in encode_punycode.
- CVE-2026-74764 Path Traversal in TAR Archive Extraction Allows Arbitrary File Write in Pandora
- CVE-2026-74761 Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId
- CVE-2026-7476 Mali GPU Kernel Driver allows access to already freed memory
- CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling
- CVE-2026-74757 Apache bRPC: Uncontrolled Memory Allocation via Malicious mcpack Array Item Count
- CVE-2026-74755 Apache bRPC: Integer Underflow in mcpack2pb Parser Leading to Denial of Service
- CVE-2026-74754 scsi: core: pair EH runtime PM get and put
- CVE-2026-74753 perf: Reject exited events as group leaders
- CVE-2026-74752 sctp: validate cookie AUTH state before use
- CVE-2026-74751 riscv: lib: Fix ZBB strnlen reading past count boundary
- CVE-2026-74750 ovpn: defer key slot crypto freeing to workqueue
- CVE-2026-7475 Sky Addons <= 3.3.2 - Authenticated (Author+) Stored Cross-Site Scripting via Custom Script
- CVE-2026-74749 rseq: Prevent hard lockup on granted time slice extension
- CVE-2026-74748 netfilter: ipset: fix refcount race between list:set GC and swap
- CVE-2026-74747 ipvs: revalidate ihl to prevent out-of-bounds access
- CVE-2026-74746 netfilter: flowtable: publish GC-visible tuple last
- CVE-2026-74745 eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
- CVE-2026-74744 ipvlan: inherit needed_headroom and needed_tailroom from phy_dev
- CVE-2026-74743 macvlan: inherit needed_headroom and needed_tailroom from lowerdev
- CVE-2026-74742 veth: fix queue index used to wake the peer txq in veth_poll
- CVE-2026-74741 net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
- CVE-2026-74740 net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain
- CVE-2026-7474 Nomad vulnerable to path traversal in dynamic host volume which may lead to code execution
- CVE-2026-74739 net/sched: cls_u32: skip hash tables in u32_bind_class()
- CVE-2026-74738 regmap: sdw-mbq: don't call an unset readable_reg callback
- CVE-2026-74737 net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
- CVE-2026-74736 net/sched: cls_bpf: reject dev-bound programs bound to a different device
- CVE-2026-74735 l2tp: fix tunnel and session refcount leak on seq_file release