Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 427 of 1013.
- CVE-2026-70577 Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability
- CVE-2026-70575 Windows Schannel Denial of Service Vulnerability
- CVE-2026-70574 Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability
- CVE-2026-70573 Windows Biometric Service Elevation of Privilege Vulnerability
- CVE-2026-70572 Windows Biometric Service Elevation of Privilege Vulnerability
- CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2026-70570 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
- CVE-2026-7057 Tenda F456 httpd setcfm buffer overflow
- CVE-2026-70569 Windows Spaceport.sys Elevation of Privilege Vulnerability
- CVE-2026-70568 Windows Defender Firewall Service Elevation of Privilege Vulnerability
- CVE-2026-70567 Windows Display Enhancement Service Elevation of Privilege Vulnerability
- CVE-2026-70566 Windows Schannel Elevation of Privilege Vulnerability
- CVE-2026-70565 Windows AF_UNIX Socket Provider Elevation of Privilege Vulnerability
- CVE-2026-70564 Windows Print Spooler Components Elevation of Privilege Vulnerability
- CVE-2026-70563 Windows Shell Spoofing Vulnerability
- CVE-2026-70562 Windows Audio Service Elevation of Privilege Vulnerability
- CVE-2026-70561 TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
- CVE-2026-70560 Ultimate POS Stored XSS via First Name Field in Leave Notifications
- CVE-2026-7056 Tenda F456 httpd SafeUrlFilter fromSafeUrlFilter buffer overflow
- CVE-2026-70559 Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll
- CVE-2026-70558 Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token
- CVE-2026-70557 diboot-core Authenticated Arbitrary Field Read via loadRelatedData Discloses Password Hashes and Salts
- CVE-2026-70556 Hubzilla version prior to 11.4 CSRF via OAuth2 /authorize Endpoint App Registration
- CVE-2026-70554 MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie
- CVE-2026-70553 MaxSite CMS Unauthenticated RCE via Install Endpoint
- CVE-2026-70552 MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php
- CVE-2026-70551 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
- CVE-2026-70550 Potential unauthorized access to private Composer repository metadata in JFrog Artifactory
- CVE-2026-7055 Tenda F456 httpd VirtualSer fromVirtualSer buffer overflow
- CVE-2026-70548 SSRF In CocoaPods Via JFrog Artifactory External Dependency
- CVE-2026-70547 Potential unauthorized metadata exposure in JFrog Artifactory
- CVE-2026-7054 Tenda F456 httpd PPTPDClient fromPptpUserAdd buffer overflow
- CVE-2026-7053 Tenda F456 httpd L7Prot frmL7ProtForm buffer overflow
- CVE-2026-7052 HT Contact Form <= 2.8.2 - Unauthenticated Stored Cross-Site Scripting via File Upload Field
- CVE-2026-7051 Missing authorization in Blog2Social: Social Media Auto Post & Scheduler
- CVE-2026-7050 Missing authorization in Forms Rb
- CVE-2026-70496 Privilege escalation in Red Hat Advanced Cluster Management for Kubernetes 2
- CVE-2026-70495 Privilege escalation in Red Hat Advanced Cluster Management for Kubernetes 2
- CVE-2026-70494 Open WebUI: A folder write-collaborator can permanently delete the owner's chats by deleting a shared subfolder
- CVE-2026-70493 Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
- CVE-2026-70492 Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
- CVE-2026-70491 Open WebUI: Tool source code disclosed to read-only users via the tool list and get endpoints
- CVE-2026-70490 Open WebUI: Unapproved accounts can open terminal sessions via a WebSocket auth path missing the role check
- CVE-2026-7049 PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
- CVE-2026-70489 Open WebUI: Instance-wide stall via automation recurrence rules that force multi-second parsing
- CVE-2026-70488 Open WebUI: Deletion of directories and file embeddings in other knowledge bases via sync cleanup
- CVE-2026-70487 Open WebUI: Cross-user file content disclosure via request-scoped direct model knowledge metadata
- CVE-2026-70486 Open WebUI: Same-origin XSS to account takeover via terminal file-preview iframe hardcoding allow-same-origin
- CVE-2026-70485 Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs
- CVE-2026-70484 Open WebUI: Users denied the image-generation permission can still generate images via chat completions
- CVE-2026-70483 Open WebUI: Any authenticated user can cancel another user's chat generation via the chat delete endpoint
- CVE-2026-70482 Open WebUI: Account takeover via OAuth token exchange accepting tokens issued to any client
- CVE-2026-70481 Open WebUI: Any member with write access to a standard channel can edit or delete other members' messages
- CVE-2026-70480 Open WebUI: Client-side SSRF via unrestricted external resource loading in Vega/Vega-Lite chart rendering
- CVE-2026-7048 Photo Gallery by 10Web <= 1.8.40 - Authenticated (Contributor+) SQL Injection via 'order_by' Shortcode Attribute
- CVE-2026-70479 Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
- CVE-2026-70478 Flowise: Unauthenticated OAuth2 token refresh endpoint returns access tokens — enables token theft for any connected service
- CVE-2026-70477 Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability
- CVE-2026-70476 Flowise: Broken Access Control in Stripe Subscription Endpoints Allows Cross-Tenant Billing Manipulation
- CVE-2026-70475 Flowise: Missing Authorization on Execution Update Endpoint
- CVE-2026-70474 Flowise: Cross-Workspace OAuth2 Credential Metadata Leak
- CVE-2026-70473 Flowise: Information Disclosure in GET /api/v1/upsert-history returns the entire server-wide upsert history
- CVE-2026-70472 Flowise: Cross-workspace credential IDOR in openai-assistants-vector-store
- CVE-2026-70471 Flowise: RBAC Bypass Leading to Unauthorized Workspace Variables Disclosure
- CVE-2026-70470 Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE
- CVE-2026-7047 Frontend User Notes <= 2.1.1 - Cross-Site Request Forgery to Note Content Modification via 'confirmEdit' Action
- CVE-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
- CVE-2026-70468 Auth bypass in FortiManager
- CVE-2026-70467 Server-side request forgery in FortiSIEM
- CVE-2026-70466 Security feature bypass in FortiOS
- CVE-2026-70465 Memory corruption in FortiClientWindows
- CVE-2026-70464 rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall
- CVE-2026-70463 rsync 3.1.0 < 3.5.0 Authorization Bypass via auth users Directive Parsing
- CVE-2026-70462 rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT
- CVE-2026-70461 rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry
- CVE-2026-70460 rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink
- CVE-2026-7046 SQL injection in NEX-Forms – Ultimate Forms Plugin for WordPress
- CVE-2026-70459 rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry
- CVE-2026-70458 rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling
- CVE-2026-70457 rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg()
- CVE-2026-70456 rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
- CVE-2026-70455 rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion
- CVE-2026-70454 rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode
- CVE-2026-70453 rsync < 3.5.0 Algorithmic Complexity DoS via hash_search()
- CVE-2026-70452 rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure
- CVE-2026-7045 Dynamic-Datasource has an Injection vulnerability
- CVE-2026-70449 Apache Wicket: Path traversal in resource style/variation/locale
- CVE-2026-70448 XML external entity in Jenkins Ivy Report Plugin
- CVE-2026-70447 Missing authorization in Jenkins AWS CodeBuild Plugin
- CVE-2026-70446 Missing authorization in Jenkins CodeSonar Plugin
- CVE-2026-70445 Missing authorization in Jenkins Sauce OnDemand Plugin
- CVE-2026-70444 Missing authorization in Jenkins Violation Comments to GitLab Plugin
- CVE-2026-70443 Information disclosure in Jenkins Horreum Plugin
- CVE-2026-70442 Missing authorization in Jenkins Google Chat Notification Plugin
- CVE-2026-70441 Cross-site scripting in Jenkins Summary Display Plugin
- CVE-2026-70440 Cross-site scripting in Jenkins Qualys Container Scanning Connector Plugin
- CVE-2026-7044 GreenCMS index.php themeadd unrestricted upload
- CVE-2026-70439 Missing authorization in Jenkins XML Job to Job DSL Plugin
- CVE-2026-70438 Missing authorization in Jenkins Parameterized Remote Trigger Plugin
- CVE-2026-70437 Weak cryptography in Jenkins Webhook Secret Credentials Provider Plugin