Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 450 of 1013.
- CVE-2026-67370 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-6737 Missing authorization in AsusPTPFilter
- CVE-2026-67369 Microsoft SQL Server Information Disclosure Vulnerability
- CVE-2026-67368 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-67367 Path traversal in SIMOVE Fleetmanager V3.1
- CVE-2026-67366 Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11
- CVE-2026-67365 Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11
- CVE-2026-67364 Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
- CVE-2026-67363 Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2
- CVE-2026-67362 Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
- CVE-2026-67361 File upload in J2Store extension for Joomla
- CVE-2026-67360 Joomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
- CVE-2026-6736 Auth bypass in Enterprise Server
- CVE-2026-67359 Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
- CVE-2026-67358 Joomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5
- CVE-2026-67357 ArcadeDB before 26.7.3 Information Disclosure via get_server_settings
- CVE-2026-67356 ArcadeDB before 26.7.3 Privilege Escalation via JavaScript Trigger
- CVE-2026-67355 guzzlehttp/guzzle before 7.15.1 Host-only Cookie Scope
- CVE-2026-67354 guzzlehttp/guzzle before 7.15.1 URI Fragment Disclosure via Referer
- CVE-2026-67353 guzzlehttp/guzzle before 7.15.1 Unbounded Cookie Denial of Service
- CVE-2026-67352 luci-app-https-dns-proxy Stored XSS via resolver_url
- CVE-2026-67351 Serendipity < 2.6.1 Authentication Bypass via Username Collision
- CVE-2026-67350 Serendipity < 2.6.1 Open Redirect via exit.php
- CVE-2026-6735 XSS within PHP-FPM status endpoint
- CVE-2026-67349 OpenCost < 1.121.0 Unauthenticated Helm Values Exposure and Admin Bypass
- CVE-2026-67348 Julep Insecure Direct Object Reference via GET /executions/{execution_id}
- CVE-2026-67347 Vendure 3.7.1 Cross-Channel Authorization Bypass via StockLocation and Asset Update
- CVE-2026-67346 Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass
- CVE-2026-67345 MaxKey 4.1.12 DefaultRedirectResolver OAuth Authorization Code Theft
- CVE-2026-67344 ArcadeDB before 26.7.2 Authentication Bypass via ALTER TYPE
- CVE-2026-67343 ArcadeDB before 26.7.2 Cluster Token Disclosure via GET /api/v1/server
- CVE-2026-67342 ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers
- CVE-2026-67341 ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION
- CVE-2026-67340 ArcadeDB before 26.7.2 Remote Code Execution via Trigger Scripts
- CVE-2026-6734 undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse
- CVE-2026-67339 guzzlehttp/guzzle before 7.14.2 Proxy-Authorization Header Disclosure
- CVE-2026-67338 JupyterLab before 4.5.9 Stored XSS via Extension Manager
- CVE-2026-67337 better-auth before 1.4.9 Two-Factor Authentication Bypass via session.cookieCache
- CVE-2026-67336 better-auth before 1.6.11 Insecure Cryptographic Defaults via oidcProvider
- CVE-2026-67335 better-auth before 1.6.2 OAuth State Validation Bypass
- CVE-2026-67334 better-auth Stale Sessions Persist After User Deletion
- CVE-2026-67333 better-auth before 1.6.13 Stored XSS via javascript redirect_uri
- CVE-2026-67332 @better-auth/oauth-provider before 1.7.0-beta.4 Authorization Bypass
- CVE-2026-67331 better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass
- CVE-2026-67330 better-auth SCIM 1.4.0-beta.27 through 1.6.21 Account Takeover via Provider-ID Collision
- CVE-2026-6733 undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
- CVE-2026-67329 @better-auth/stripe before 1.6.21 Authorization Bypass via Organization Subscription
- CVE-2026-67328 @better-auth/sso before 1.6.21 Account Takeover via SSO
- CVE-2026-67327 better-auth before 1.6.22 Account Takeover via Magic-Link Email-OTP
- CVE-2026-67326 GitPython before 3.1.50 Newline Injection via config_writer section
- CVE-2026-67325 GitPython before 3.1.51 Command Injection via option prefix abbreviation
- CVE-2026-67324 GitPython 3.1.50 Authentication Bypass via Joined Short Options
- CVE-2026-67323 GitPython before 3.1.51 Command Injection via unguarded Git options
- CVE-2026-67322 GitPython before 3.1.52 Environment Variable Exfiltration via clone_from
- CVE-2026-67321 axios 0.31.1 before 0.33.0 and 1.15.1 before 1.18.0 Denial of Service via maxDepth bypass
- CVE-2026-67320 axios before 0.33.0 Prototype Pollution via Node HTTP adapter
- CVE-2026-6732 Libxml2: libxml2: denial of service via crafted xsd-validated document
- CVE-2026-67319 axios before 0.33.0 Prototype Pollution via nested option objects
- CVE-2026-67318 axios 1.13.0 before 1.18.0 maxBodyLength Bypass via HTTP/2
- CVE-2026-67317 axios 1.7.0 before 1.18.0 maxBodyLength Bypass via ReadableStream
- CVE-2026-67316 axios before 1.18.0 Prototype Pollution via bodyless methods
- CVE-2026-67315 axios 0.31.0 before 0.33.0 and 1.15.0 before 1.18.0 NO_PROXY Bypass via 0.0.0.0
- CVE-2026-67314 axios before 1.18.0 Prototype Pollution via auth subfields
- CVE-2026-67313 axios 0.28.0 before 1.18.0 Denial of Service via formDataToJSON
- CVE-2026-67312 axios 0.28.0 before 0.33.0 and 1.0.0 before 1.18.0 Denial of Service via formToJSON
- CVE-2026-67311 Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect
- CVE-2026-67310 openremote before 1.27.0 Cross-Tenant IDOR via setAssetLinks
- CVE-2026-6731 X.509 name constraint bypass via Subject CN treated as a DNS name
- CVE-2026-67309 Traefik v3.7.0 Path Traversal via RewriteTarget Authentication Bypass
- CVE-2026-67308 Wazuh GitHub Actions Shell Injection via Fork Pull Request
- CVE-2026-67307 Wazuh before 5.0.0-beta3 Cluster Attribution Spoofing via Inventory Sync
- CVE-2026-67306 FreeRDP before 3.29.0 Out-of-Bounds Read via Planar RLE
- CVE-2026-67305 FreeRDP Windows Client before 3.29.0 Heap Buffer Overflow via Cliprdr
- CVE-2026-67304 FreeRDP before 3.29.0 NULL Dereference via smartcard cleanup
- CVE-2026-67303 FreeRDP before 3.29.0 Denial of Service via serial DeviceControl
- CVE-2026-67302 FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of service
- CVE-2026-67301 FreeRDP before 3.29.0 Out-of-bounds Read via Polygon async message-proxy
- CVE-2026-67300 FreeRDP before 3.29.0 Use-After-Free via async message proxy
- CVE-2026-6730 Multiple Vulnerabilities in IBM Concert Software
- CVE-2026-67299 FreeRDP before 3.29.0 Use-After-Free via WindowIcon async message
- CVE-2026-67298 FreeRDP 3.28.0 Heap Buffer Overflow via RAIL orderLength Underflow
- CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response
- CVE-2026-67296 FreeRDP before 3.29.0 Denial of Service via RDPEI PDU
- CVE-2026-67295 FreeRDP before 3.29.0 Path Traversal via drive redirection
- CVE-2026-67294 FreeRDP before 3.29.0 TLS Certificate EKU Bypass
- CVE-2026-67293 FreeRDP before 3.29.0 Improper Certificate Hostname Validation
- CVE-2026-67292 FreeRDP before 3.29.0 WebSocket Ping Buffer Over-disclosure
- CVE-2026-67291 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via GLYPH_FRAGMENT_ADD
- CVE-2026-67290 FreeRDP before 3.29.0 Heap Out-of-Bounds Read via TSMF
- CVE-2026-6729 HKUDS OpenHarness Session Key Collision Privilege Escalation
- CVE-2026-67289 FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection
- CVE-2026-67288 FreeRDP before 3.29.0 Denial of Service via smartcard cache
- CVE-2026-67287 Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0
- CVE-2026-67286 Path traversal in SP Page Builder extension for Joomla
- CVE-2026-67285 Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0
- CVE-2026-67284 Joomla Extension - tabaoca.org - Improper ACL checks allow file operations in Cotton Cloud < 2.0.2
- CVE-2026-67283 Joomla Extension - tabaoca.org - Improper ACL implementation allows allow file operations in Cotton Cloud < 2.0.2
- CVE-2026-67282 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8
- CVE-2026-67281 Unauthenticated file read in Mikrotik RouterOS
- CVE-2026-6728 Slider Revolution <= 7.0.9 - Unauthenticated Sensitive Information Exposure via 'sliders/stream'