Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 480 of 1013.
- CVE-2026-63351 Cross-site scripting in SIMATIC Drive Controller CPU 1504D TF
- CVE-2026-63350 Code injection in SIMATIC Drive Controller CPU 1504D TF
- CVE-2026-6335 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2026-63349 AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
- CVE-2026-63343 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
- CVE-2026-63342 Hatchet: Cross-Tenant Durable Task Event Log Disclosure via Missing Authorization Check
- CVE-2026-6334 OAuth authorization code client binding not enforced during token redemption in Mattermost
- CVE-2026-63337 RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading
- CVE-2026-63336 RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
- CVE-2026-63335 RabbitMQ Java client malformed body frame triggers raw command assembler exception
- CVE-2026-63334 draw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklist
- CVE-2026-63330 Missing authorization in warpgate
- CVE-2026-6333 SSRF via Host Header Spoofing in Custom Slash Commands
- CVE-2026-63329 Auth bypass in warpgate
- CVE-2026-63328 Trivy: Path Traversal in Trivy Plugin Manager Allows Arbitrary File Write
- CVE-2026-63325 Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`
- CVE-2026-6332 Clear Text Storage of Sensitive Information on EcoStruxure™ Machine Expert HVAC
- CVE-2026-63317 Apache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML
- CVE-2026-63316 SQL Injection in Payload CMS
- CVE-2026-63315 Plaintext storage of a password in WebCTI
- CVE-2026-63314 SQL Injection in WebCTI
- CVE-2026-63313 9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch
- CVE-2026-63312 NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read
- CVE-2026-63311 NLTK before 3.10.0 SSRF via DNS Resolution Failure
- CVE-2026-6331 HMAC zero-length tag forgery in EVP_DigestVerifyFinal
- CVE-2026-63309 SurrealDB < 3.1.5 Information Disclosure via ORDER BY
- CVE-2026-63308 Helm Files.Lines Denial of Service via Empty Chart Files
- CVE-2026-63307 Chat2DB < 5.3.0 Insecure Direct Object Reference via GET /api/connection/datasource
- CVE-2026-63306 stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints
- CVE-2026-63305 AVideo through 29.0 OS Command Injection via ffmpeg.json.php
- CVE-2026-63304 AVideo through 29.0 OS Command Injection via listFFmpegProcesses
- CVE-2026-63303 Path Traversal in Quick.CMS
- CVE-2026-63302 Local File Inclusion in Quick.CMS
- CVE-2026-63301 Denial of Service in Quick.CMS
- CVE-2026-63300 Cross-project instance move bypasses all project restrictions allowing host command execution
- CVE-2026-6330 ML-KEM ARM64 NEON ciphertext comparison only compares half of the input
- CVE-2026-63299 Storage volume cross-project move and snapshot restore bypass project disk limits
- CVE-2026-63298 LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration
- CVE-2026-63297 Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
- CVE-2026-63296 Project restriction bypass via instance migration config override
- CVE-2026-63295 Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`
- CVE-2026-63294 Root RCE via image backup.yaml symlink
- CVE-2026-63293 Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
- CVE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow
- CVE-2026-6329 PKCS#12 MAC verification uses attacker-controlled comparison length
- CVE-2026-63286 Weak cryptography in AXIS Camera Station 5
- CVE-2026-63281 Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs conditions manager
- CVE-2026-63280 Cross-site request forgery in Advanced Module Manager extension for Joomla
- CVE-2026-6328 XQUIC Improper STREAM Frame Validation in Initial/Handshake Packets
- CVE-2026-63279 Out of bounds read in PICT image import
- CVE-2026-63278 Package URLs can be used to exfiltrate arbitrary INI file values and environment variables
- CVE-2026-63277 RCE via calcext:data-mappings, sql provider and jdbc connector
- CVE-2026-63276 Stack buffer overflow in CFF to Type 1 font conversion
- CVE-2026-63275 Stack buffer overflow in CFF font hint handling
- CVE-2026-63274 Heap buffer overflow in PDF import stream handling
- CVE-2026-63273 Heap buffer overflow in PDF import encryption handling
- CVE-2026-63272 Heap buffer overflow in WMF text record import
- CVE-2026-63270 Environment/ini-file leaks
- CVE-2026-6327 Multiple Vulnerabilities in IBM Concert Software
- CVE-2026-63269 LFI and GET SSRF via GStreamer and HLS playlists
- CVE-2026-63268 LFI via calcext:data-mappings, sql provider and sdbc:flat:file:// db href
- CVE-2026-63267 LFI and GET SSRF via calcext:data-mappings and csv provider
- CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality
- CVE-2026-63265 Cross-site request forgery in Advanced Module Manager extension for Joomla
- CVE-2026-63264 Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3
- CVE-2026-63263 Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service
- CVE-2026-63262 Missing Authorization in Kibana Leading to Information Disclosure
- CVE-2026-63261 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- CVE-2026-63260 Uncontrolled Resource Consumption in Kibana Leading to Denial of Service
- CVE-2026-63259 Authorization Bypass Through User-Controlled Key in Kibana Leading to Information Disclosure
- CVE-2026-63252 Denial of service in Eclipse Milo
- CVE-2026-6325 Out-of-bounds write in SetSuitesHashSigAlgo on oversized signature algorithms list
- CVE-2026-63248 Missing authorization in Eclipse Milo
- CVE-2026-63244 Authentication Bypass Vulnerability
- CVE-2026-63243 Firmware verification vulnerability
- CVE-2026-63242 Business logic vulnerability
- CVE-2026-63241 Insecure direct object reference vulnerability
- CVE-2026-63240 Information disclosure vulnerability
- CVE-2026-6324 Libsoup: libsoup: http request smuggling via unsigned to signed conversion error
- CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability
- CVE-2026-63238 Authentication bypass vulnerability
- CVE-2026-63237 TOTP two-factor authentication bypass vulnerability
- CVE-2026-63236 Improper access control vulnerability
- CVE-2026-63235 Improper access control vulnerability
- CVE-2026-63234 SQL injection and unsafe deserialisation vulnerability
- CVE-2026-63233 SQL injection and unsafe deserialisation vulnerability
- CVE-2026-63232 SQL injection and unsafe deserialisation vulnerability
- CVE-2026-63231 Post-authentication SQL injection vulnerability
- CVE-2026-63230 Pre-authentication error-based SQL injection vulnerability
- CVE-2026-63229 Pre-authentication blind SQL injection vulnerability
- CVE-2026-63228 Unrestricted image upload vulnerability
- CVE-2026-63227 Unrestricted SCORM file upload vulnerability
- CVE-2026-63226 Server-side request forgery in Ricoh printers and Multifunction Printers (MFPs)
- CVE-2026-63225 Redocly CLI: Path traversal when using `split` command
- CVE-2026-63223 CodeIgniter: Uploaded file extension validation bypass in is_image and mime_in rules
- CVE-2026-63222 CodeIgniter: Path traversal in UploadedFile::move() when using client-provided filenames
- CVE-2026-63221 CodeIgniter: SQL injection is possible via Query Builder deleteBatch() when used with where() conditions
- CVE-2026-63220 CodeIgniter: Spoofable forwarded HTTPS headers in IncomingRequest::isSecure()
- CVE-2026-6322 fast-uri vulnerable to host confusion via percent-encoded authority delimiters
- CVE-2026-63219 Unauthenticated file upload via missing authorization on formatter upload endpoint