Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 417 of 1013.
- CVE-2026-71676 Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, trigge
- CVE-2026-71675 An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c
- CVE-2026-7167 Multiple vulnerabilities in the Assassin game by Gaudire
- CVE-2026-7166 Multiple vulnerabilities in the Assassin game by Gaudire
- CVE-2026-7165 Multiple vulnerabilities in the Assassin game by Gaudire
- CVE-2026-71647 An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a denial of servic
- CVE-2026-71646 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial
- CVE-2026-71645 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial
- CVE-2026-71644 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause unsafe tr
- CVE-2026-71643 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
- CVE-2026-71642 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
- CVE-2026-71641 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows an attacker to cause a den
- CVE-2026-71640 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via
- CVE-2026-7164 pf can overflow the stack parsing crafted SCTP packets
- CVE-2026-7163 Missing authorization in multicluster engine for Kubernetes 2.1
- CVE-2026-71626 An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRe
- CVE-2026-71625 An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
- CVE-2026-71624 An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controlle
- CVE-2026-71622 SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php compon
- CVE-2026-71620 File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file
- CVE-2026-7162 Integer overflow in WinFsp
- CVE-2026-71616 An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object().
- CVE-2026-71614 An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, de
- CVE-2026-71613 Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function.
- CVE-2026-71612 Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function.
- CVE-2026-7161 GeoVision GV-IP Device Utility Device Authentication insufficient encryption vulnerability
- CVE-2026-7160 Tenda HG3 formTracert command injection
- CVE-2026-7159 douinc mkdocs-mcp-plugin server.py list_documents path traversal
- CVE-2026-7158 dmitryglhf mcp-url-downloader server.py _validate_url_safe server-side request forgery
- CVE-2026-71577 Information disclosure in Multicluster Global Hub 1.4.9
- CVE-2026-71576 Security feature bypass in Multicluster Global Hub 1.4.9
- CVE-2026-71575 Apache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilter
- CVE-2026-71574 Missing authorization in Joomla! CMS
- CVE-2026-71573 Joomla! Core - [20260802] - Improper CORS origin validation in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2
- CVE-2026-71572 Joomla! Core - [20260801] - Response header injection in download views in Joomla 3.0.0-5.4.7, 6.0.0-6.1.2
- CVE-2026-71571 Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11
- CVE-2026-71570 Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11
- CVE-2026-7157 disler aider-mcp-server aider_ai_code server.py command injection
- CVE-2026-71569 Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name
- CVE-2026-71568 BMCtest exposes Ironic without authentication and TLS during the test
- CVE-2026-71567 User-controlled variables inserted unescaped into shell scripts and Kubernetes manifests
- CVE-2026-71566 KubeVirt backend is not authenticated
- CVE-2026-71565 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-71564 Substance3D - Designer | Out-of-bounds Write (CWE-787)
- CVE-2026-71563 Apache Answer: MCP Answer Retrieval Exposes Content from Non-Public Questions
- CVE-2026-71562 httpc does not bound server-supplied numeric header values before integer conversion
- CVE-2026-71560 Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path
- CVE-2026-7156 Totolink A8000RU CGI cstecgi.cgi CsteSystem os command injection
- CVE-2026-71559 Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata
- CVE-2026-71558 Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization
- CVE-2026-71557 go-git: Malicious reference names may modify files outside the reference storage
- CVE-2026-71556 go-git: Worktree operations may follow symlinks
- CVE-2026-71555 PILOS: Reverse tabnabbing in room description
- CVE-2026-71554 h2: Duplicate Host header could facilitate request smuggling
- CVE-2026-71553 ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
- CVE-2026-71551 Super Productivity: Arbitrary OS Command Execution via IPC EXEC Handler with Persistent Whitelist
- CVE-2026-7155 Totolink A8000RU CGI cstecgi.cgi setLoginPasswordCfg os command injection
- CVE-2026-71543 OpenBao's Templated Policies Allow Privilege Escalation via Wildcard Characters
- CVE-2026-71542 GetSimple CMS: Stored Cross-Site Scripting (XSS) via the "title" parameter in admin/components.php
- CVE-2026-71540 Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion
- CVE-2026-7154 Totolink A8000RU CGI cstecgi.cgi setAdvancedInfoShow os command injection
- CVE-2026-71539 n8n: Race Condition in Git Clone Node Allows Authenticated Users to Achieve Remote Code Execution
- CVE-2026-71538 @cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows
- CVE-2026-71537 Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)
- CVE-2026-7153 Totolink A8000RU CGI cstecgi.cgi setMiniuiHomeInfoShow os command injection
- CVE-2026-7152 Totolink A8000RU CGI cstecgi.cgi setTelnetCfg os command injection
- CVE-2026-71518 Typemill < 2.26.0 Authorization Bypass via Media File Download Route
- CVE-2026-71514 NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass
- CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
- CVE-2026-71511 Dolibarr < 24.0.0 Members REST API Sensitive Data Exposure via Member Endpoints
- CVE-2026-71510 Dolibarr < 24.0.0 Users REST API SQL Injection via filter parameter
- CVE-2026-7151 Tenda HG3 formIPv6Routing formUploadConfig stack-based overflow
- CVE-2026-71509 Dolibarr < 24.0.0 Expense Report REST API Improper Authorization via Update Endpoint
- CVE-2026-71508 Dolibarr < 24.0.0 REST API Improper Authorization via User Update Endpoint
- CVE-2026-71507 Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Bank Account Routes
- CVE-2026-71506 Dolibarr < 24.0.0 Payments REST API Improper Authorization via Delete Endpoint
- CVE-2026-71505 Dolibarr < 24.0.0 REST API Broken Object-Level Authorization via Third-Party Write Route
- CVE-2026-71504 Dolibarr < 24.0.0 Members REST API Improper Authorization via Password Reset
- CVE-2026-71503 Dolibarr < 24.0.0 Reflected XSS via Extra Fields Administration Template
- CVE-2026-71502 Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute
- CVE-2026-7150 dh1011 auto-favicon MCP Tool server.py generate_favicon_from_url server-side request forgery
- CVE-2026-71498 node-re2: Out-of-bounds heap read in `replace`/`split` via a `Buffer` ending in a truncated multi-byte UTF-8 character → adjacent heap memory disclosed to JavaScript
- CVE-2026-71497 jsoup: Cleaner may expose markup with custom raw-text elements
- CVE-2026-71494 Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname
- CVE-2026-71493 Infracost: Arbitrary file read via config-template readFile symlink traversal
- CVE-2026-71492 Banks: Path traversal in `DirectoryPromptRegistry.set()` allows arbitrary file write outside the registry root
- CVE-2026-71491 sqlparse: Quadratic O(n²) DoS in group_comments
- CVE-2026-71490 OPNsense: Direct comma-separated user privileges bypass OPNsense MVC read-only write protection
- CVE-2026-7149 dexhunter kaggle-mcp server.py prepare_kaggle_dataset path traversal
- CVE-2026-71488 league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
- CVE-2026-71486 vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds
- CVE-2026-71485 Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends
- CVE-2026-71483 Horilla: Reflected Cross-Site Scripting (XSS) in Employee Filter View
- CVE-2026-7148 CodeAstro Online Classroom addnewfaculty sql injection
- CVE-2026-71479 New API: Integer overflow in quota billing yields negative charges (self-crediting)
- CVE-2026-71478 league/commonmark: AttributesExtension href/src unsafe-link filter bypass via embedded control bytes
- CVE-2026-71477 mise: Incorrect file ownership, when installed by the root user using `install.sh`
- CVE-2026-71476 Nx: Zip-Slip in the self-hosted remote cache
- CVE-2026-71475 Insights-client-rhel9: insights-client: spoke-controlled clusterid injected unencoded into insights api url path
- CVE-2026-71474 Insights-client-rhel9: insights-client: pull-secret bearer token written to logs on non-200 ccx response