Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 456 of 1013.
- CVE-2026-66422 Apache Tomcat: Servlet role references can bypass declarative role constraints
- CVE-2026-66421 OpenClaw Dashboard Stored XSS via lastMessage Session Field
- CVE-2026-66420 MeshCentral Cross-Site WebSocket Hijacking via Origin Validation Bypass on Self-Signed Certificate Deployments
- CVE-2026-6642 Cross-site scripting in Media Library Assistant
- CVE-2026-66418 OpenClaw Dashboard v3.0.0 Stored XSS via Failed Login Username Field
- CVE-2026-66416 Leantime CSRF Protection Globally Disabled by Omission of Laravel VerifyCsrfToken Middleware
- CVE-2026-66415 Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()
- CVE-2026-66414 Leantime Open Redirect in Login Controller via redirectUrl Parameter
- CVE-2026-66412 Leantime all versions prior to and 3.6.2 Broken Access Control via tickets.getMilestone JSON-RPC
- CVE-2026-66411 Auth bypass in DEEBOT PRO K1VAC
- CVE-2026-66410 Weak cryptography in Android App "ECOVACS PRO"
- CVE-2026-6641 Cross-site scripting in Media Library Assistant
- CVE-2026-66409 Weak cryptography in DEEBOT PRO K1VAC
- CVE-2026-66408 Hardcoded credentials in DEEBOT PRO K1VAC
- CVE-2026-66407 Weak cryptography in DEEBOT PRO K1VAC
- CVE-2026-66406 Security feature bypass in DEEBOT PRO K1VAC
- CVE-2026-66405 Misconfiguration in DEEBOT PRO K1VAC
- CVE-2026-66404 Security feature bypass in DEEBOT PRO K1VAC
- CVE-2026-66403 Misconfiguration in DEEBOT PRO K1VAC
- CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass
- CVE-2026-66401 FreeRDP before 3.29.0 Out-of-Bounds Read via UVC H.264
- CVE-2026-66400 Grav Login Plugin before 3.8.13 Insufficient Session Expiration
- CVE-2026-6640 Cross-site scripting in Media Library Assistant
- CVE-2026-66399 phpMyFAQ before 4.1.6 Privilege Escalation via Group Membership
- CVE-2026-66398 phpMyFAQ before 4.1.6 Remote Code Execution via Configuration API
- CVE-2026-66397 phpMyFAQ before 4.1.6 Path Traversal via category image deletion
- CVE-2026-66396 SiYuan before v3.7.2 Stored XSS to RCE via title-img IAL
- CVE-2026-66395 SiYuan Desktop before v3.7.2 Reflected XSS to RCE via siyuan Protocol
- CVE-2026-66394 SiYuan before v3.7.3 Stored and Reflected XSS via SVG Sanitizer Bypass
- CVE-2026-66393 NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
- CVE-2026-66392 Apache bRPC: TLS Client Accepts Certificates for Mismatched Peer Names
- CVE-2026-66391 Apache Wicket: leaked and missing CSP headers
- CVE-2026-66390 Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence
- CVE-2026-6639 Missing authorization in AI Copilot – Content Generator
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory
- CVE-2026-66382 Authenticated users may write files outside the intended Artifactory work directory
- CVE-2026-66381 Repository readers may access content outside configured upstream paths
- CVE-2026-66380 Authenticated users may access private OCI referrer metadata
- CVE-2026-6638 PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
- CVE-2026-66379 Authenticated users may view private Puppet module metadata
- CVE-2026-66378 Authenticated users may access private NuGet metadata
- CVE-2026-66377 Anonymous users may access restricted Artifactory repository information
- CVE-2026-66376 Deleted users may temporarily retain access to JFrog Artifactory
- CVE-2026-66375 Low-privilege users may remove protected Artifactory metadata
- CVE-2026-66374 Memory corruption in Knot Resolver
- CVE-2026-66373 Memory corruption in Redis
- CVE-2026-66372 Predictable Seed in Pseudo-Random Number Generator (PRNG) in Digital Watchdog VMAX DVR and NVR Product Lineups
- CVE-2026-66370 html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking
- CVE-2026-6637 PostgreSQL refint allows stack buffer overflow and SQL injection
- CVE-2026-66369 MZ Automation libiec61850 Out-of-bounds Read
- CVE-2026-66364 MZ Automation libiec61850 Out-of-bounds Read
- CVE-2026-66362 NGF vulnerability
- CVE-2026-66360 MZ Automation libiec61850 Out-of-bounds Read
- CVE-2026-6636 p2r3 convert API buildCache.js Bun.serve path traversal
- CVE-2026-66358 Cross-site scripting in acmailer CGI
- CVE-2026-66357 inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation
- CVE-2026-66353 Doggo vulnerable to cross-site scripting via unescaped date field values
- CVE-2026-6635 rowboatlabs rowboat tools_webhook app.py tool_call improper authentication
- CVE-2026-66349 MZ Automation libiec61850 Out-of-bounds Read
- CVE-2026-66344 Privilege escalation in NetKids iMark
- CVE-2026-66340 Mira Hormone Monitor, Mira Android App Improper restriction of excessive authentication attempts
- CVE-2026-6634 usememos UpdateInstanceSetting App.tsx memos_access_token improper authorization
- CVE-2026-66339 Libsoup: libsoup: proxy credentials leak to destination server via proxy-authorization header in connect tunnels
- CVE-2026-66338 Libsoup: libsoup: http request smuggling via permissive chunk-size parsing in soup_body_input_stream_read_chunked()
- CVE-2026-66337 Libsoup: libsoup: heap buffer over-read via integer underflow in soup_filter_input_stream_read_until()
- CVE-2026-66331 Apache Thrift: Buffered transport reads are not accounted against MaxMessageSize
- CVE-2026-6633 Yifang CMS Extended Management L_rbac_admin.php store cross site scripting
- CVE-2026-66326 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66325 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66322 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66321 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-6632 Tenda F451 httpd SafeClientFilter fromSafeClientFilter buffer overflow
- CVE-2026-66318 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-66317 Microsoft Edge (Chromium-based) Tampering Vulnerability
- CVE-2026-66316 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2026-66315 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66314 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CVE-2026-66313 Microsoft Edge (Chromium-based) Tampering Vulnerability
- CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2026-66311 Microsoft Edge (Chromium-based) Tampering Vulnerability
- CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability
- CVE-2026-6631 Tenda F451 httpd webExcptypemanFilter fromwebExcptypemanFilter buffer overflow
- CVE-2026-66309 Azure SQL Database Elevation of Privilege Vulnerability
- CVE-2026-66308 Skype for Business and Lync Denial of Service Vulnerability
- CVE-2026-66307 Skype for Business and Lync Denial of Service Vulnerability
- CVE-2026-66306 Skype for Business Information Disclosure Vulnerability
- CVE-2026-66305 Skype for Business Spoofing Vulnerability
- CVE-2026-66304 Skype for Business Information Disclosure Vulnerability
- CVE-2026-66303 Skype for Business and Lync Denial of Service Vulnerability
- CVE-2026-66302 Skype for Business Remote Code Execution Vulnerability
- CVE-2026-66301 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
- CVE-2026-66300 SNOMED International Snowstorm reflected XSS
- CVE-2026-6630 Tenda F451 httpd GstDhcpSetSer fromGstDhcpSetSer buffer overflow
- CVE-2026-66299 Apache Tomcat: DoS via WebSocket chat example
- CVE-2026-66298 JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts
- CVE-2026-66297 Unescaped deployment environment variables in generated setup commands
- CVE-2026-66296 Reflected XSS in oaskit's default HTML error handler
- CVE-2026-6629 Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection