Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 485 of 1013.
- CVE-2026-62670 Missing authorization in grav-plugin-flex-objects
- CVE-2026-6267 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2026-62669 Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
- CVE-2026-62668 Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols
- CVE-2026-62667 Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACL
- CVE-2026-62666 Privilege escalation in grav-plugin-api
- CVE-2026-62664 FileRise: Authenticated path traversal in createFolder allows arbitrary directory creation outside the upload root
- CVE-2026-62663 Banks: Arbitrary File Read via Path Traversal in Media Filters (image/audio/video/document)
- CVE-2026-6266 Aap-controller: aap-gateway: account hijacking and unauthorized access via unverified email linking
- CVE-2026-62659 Authenticated users can make unauthorized changes on NETGEAR WAX333 Access Points
- CVE-2026-62658 Post-authentication Command Injection Vulnerability in certain Nighthawk RAX series models
- CVE-2026-62657 Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
- CVE-2026-62656 Post-authenticated command injection vulnerability found in certain NETGEAR RAX models
- CVE-2026-62655 A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
- CVE-2026-62654 Security feature bypass in Reyrolle 7SR5
- CVE-2026-62653 Memory corruption in Reyrolle 7SR5
- CVE-2026-62652 Information disclosure in Reyrolle 7SR5
- CVE-2026-62650 Auth bypass in Reyrolle 7SR5
- CVE-2026-6265 Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
- CVE-2026-62649 Denial of service in Reyrolle 7SR5
- CVE-2026-62648 Memory corruption in Reyrolle 7SR5
- CVE-2026-62647 Weak cryptography in Reyrolle 7SR5
- CVE-2026-62646 Weak cryptography in Reyrolle 7SR5
- CVE-2026-62645 Auth bypass in Reyrolle 7SR5
- CVE-2026-62644 Auth bypass in Webmail
- CVE-2026-62643 Server-side request forgery in Webmail
- CVE-2026-62642 Denial of service in Webmail
- CVE-2026-62641 Denial of service in Webmail
- CVE-2026-62640 Missing authorization in Oracle Reports Developer
- CVE-2026-6264 Critical Security fix for the Talend JobServer and Talend Runtime
- CVE-2026-62639 Missing authorization in Oracle Reports Developer
- CVE-2026-62638 Missing authorization in Oracle Reports Developer
- CVE-2026-62637 Missing authorization in Oracle Reports Developer
- CVE-2026-62636 Missing authorization in Oracle Reports Developer
- CVE-2026-62635 Missing authorization in Oracle Reports Developer
- CVE-2026-62634 Missing authorization in Oracle Reports Developer
- CVE-2026-62633 Missing authorization in Oracle Reports Developer
- CVE-2026-62632 Missing authorization in Oracle Reports Developer
- CVE-2026-62631 Missing authorization in Oracle Reports Developer
- CVE-2026-62630 Missing authorization in Oracle Reports Developer
- CVE-2026-62629 Missing authorization in Oracle Reports Developer
- CVE-2026-62628 Missing authorization in Oracle Reports Developer
- CVE-2026-62627 Missing authorization in Oracle Reports Developer
- CVE-2026-62626 Missing authorization in Oracle Reports Developer
- CVE-2026-62625 Missing authorization in Oracle Reports Developer
- CVE-2026-62624 Missing authorization in Oracle Reports Developer
- CVE-2026-62623 Missing authorization in Oracle Reports Developer
- CVE-2026-62622 Missing authorization in Oracle Reports Developer
- CVE-2026-62621 Missing authorization in Oracle Reports Developer
- CVE-2026-62620 Missing authorization in Oracle Reports Developer
- CVE-2026-6262 Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'
- CVE-2026-62619 Missing authorization in Oracle Reports Developer
- CVE-2026-62618 Missing authorization in Oracle Reports Developer
- CVE-2026-62617 Missing authorization in Oracle Reports Developer
- CVE-2026-62616 Missing authorization in Oracle Reports Developer
- CVE-2026-62615 Missing authorization in Oracle Reports Developer
- CVE-2026-62614 Missing authorization in Oracle Reports Developer
- CVE-2026-62613 Missing authorization in Oracle Reports Developer
- CVE-2026-62612 Missing authorization in Oracle Reports Developer
- CVE-2026-62611 Missing authorization in Oracle Reports Developer
- CVE-2026-62610 Missing authorization in Oracle Reports Developer
- CVE-2026-6261 Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload
- CVE-2026-62609 Missing authorization in Oracle Reports Developer
- CVE-2026-62608 Missing authorization in Oracle Reports Developer
- CVE-2026-62607 Missing authorization in Oracle Customer Care
- CVE-2026-62606 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62605 Missing authorization in Oracle Partner Management
- CVE-2026-62604 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62603 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62602 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62601 Missing authorization in Oracle Sales
- CVE-2026-62600 Missing authorization in Oracle Sales
- CVE-2026-62599 Missing authorization in Oracle Trading Community
- CVE-2026-62598 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62597 Missing authorization in Oracle Enterprise Manager Base Platform
- CVE-2026-62596 Missing authorization in Siebel CRM Integration
- CVE-2026-62595 Missing authorization in Siebel CRM Integration
- CVE-2026-62594 Missing authorization in Siebel CRM Integration
- CVE-2026-62593 Missing authorization in Siebel CRM Integration
- CVE-2026-62592 Missing authorization in Siebel CRM Integration
- CVE-2026-62591 Missing authorization in Siebel CRM Integration
- CVE-2026-62590 Missing authorization in Siebel CRM Integration
- CVE-2026-62589 Missing authorization in Siebel CRM Integration
- CVE-2026-62588 Missing authorization in Siebel CRM Integration
- CVE-2026-62587 Missing authorization in Siebel CRM Administration
- CVE-2026-62586 Missing authorization in Siebel CRM Administration
- CVE-2026-62585 Missing authorization in Siebel CRM Administration
- CVE-2026-62584 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62583 Other in Oracle Hyperion Infrastructure Technology
- CVE-2026-62582 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62581 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62580 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62579 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62578 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62577 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62576 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62575 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62574 Privilege escalation in Oracle GraalVM Enterprise Edition
- CVE-2026-62573 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62572 Missing authorization in Oracle Hyperion Infrastructure Technology