Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 487 of 1013.
- CVE-2026-6248 wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path
- CVE-2026-62479 Missing authorization in Oracle Public Sector Financials
- CVE-2026-62478 Auth bypass in Oracle Public Sector Financials
- CVE-2026-62477 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62476 Auth bypass in Oracle Public Sector Payroll
- CVE-2026-62475 Missing authorization in Oracle Shipping Execution
- CVE-2026-62474 Missing authorization in Oracle Lease and Finance Management
- CVE-2026-62473 Missing authorization in Oracle Installed Base
- CVE-2026-62472 Missing authorization in Oracle Installed Base
- CVE-2026-62471 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62470 Information disclosure in Oracle Self-Service Human Resources
- CVE-2026-6247 Cross-site scripting in scratchblocks for WP
- CVE-2026-62469 Missing authorization in Oracle Human Resources
- CVE-2026-62468 Missing authorization in Oracle Human Resources
- CVE-2026-62467 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62466 Missing authorization in Oracle Human Resources
- CVE-2026-62465 Denial of service in Oracle HRMS (US)
- CVE-2026-62464 Auth bypass in Oracle Payroll
- CVE-2026-62463 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62462 Missing authorization in Oracle Work in Process
- CVE-2026-62461 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62460 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-6246 Cross-site scripting in Simple Random Posts Shortcode
- CVE-2026-62459 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62458 Missing authorization in Oracle Work in Process
- CVE-2026-62457 Missing authorization in Oracle Hyperion Infrastructure Technology
- CVE-2026-62456 Privilege escalation in Oracle HRMS (UK)
- CVE-2026-62455 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-62454 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-62453 Missing authorization in Oracle HRMS (UK)
- CVE-2026-62452 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-62451 Missing authorization in Oracle Work in Process
- CVE-2026-62450 Missing authorization in Oracle Flow Manufacturing
- CVE-2026-6245 Sssd: out-of-bounds read in the sssd
- CVE-2026-62449 Missing authorization in Oracle Work in Process
- CVE-2026-62448 Missing authorization in Oracle Email Center
- CVE-2026-62447 Auth bypass in Oracle Trade Management
- CVE-2026-62446 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62445 Missing authorization in Oracle Order Management
- CVE-2026-62444 Open redirect in Oracle Contracts Integration
- CVE-2026-62443 Cross-site request forgery in Oracle Contracts Integration
- CVE-2026-62442 Security feature bypass in Siebel CRM Cloud Applications
- CVE-2026-62441 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-62440 Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation
- CVE-2026-6244 division by zero in libpcap before 1.10.7
- CVE-2026-62439 Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability
- CVE-2026-62438 Gimp: gimp: paa integer overflow out-of-bounds read
- CVE-2026-62437 x86: DMs may cause mem leak by IRQ binding
- CVE-2026-62436 grant-table: version change racing with other operations
- CVE-2026-62435 grant-table: version change racing with other operations
- CVE-2026-62434 PoD: Don't try to reclaim special pages
- CVE-2026-62433 correct buffer checks for DM_OP hypercalls
- CVE-2026-62432 evtchn: Race between FIFO expand and reset
- CVE-2026-62431 Viridian STIMER division by zero
- CVE-2026-62430 x86: Out-of-bounds read in vRTC emulation
- CVE-2026-6243 Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content
- CVE-2026-62429 vNUMA domain cleanup may race other operations
- CVE-2026-62428 grant-table: type confusion in grant-copy
- CVE-2026-62427 sysctl and platform-op locks open to abuse
- CVE-2026-62426 sysctl and platform-op locks open to abuse
- CVE-2026-62425 buffer overruns in libfsimage iso9660 handling
- CVE-2026-62424 buffer overruns in libfsimage iso9660 handling
- CVE-2026-62423 buffer overruns in libfsimage iso9660 handling
- CVE-2026-62422 Auth bypass in YouTrack
- CVE-2026-62420 Cross-project cluster migration bypasses project restrictions via cluster notification flag
- CVE-2026-6242 Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS
- CVE-2026-62418 Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check
- CVE-2026-62416 Misconfiguration in Network Scanner Tool (Bundled software for Sharpdesk)
- CVE-2026-62415 Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2
- CVE-2026-62414 Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2
- CVE-2026-6241 Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS
- CVE-2026-6240 Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS
- CVE-2026-62393 Apache Kylin: Improper authorization in job information retrieval
- CVE-2026-62392 Apache Kylin: OS Command Injection via Async Query API
- CVE-2026-62391 Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases
- CVE-2026-62390 Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API
- CVE-2026-6239 Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS
- CVE-2026-62388 NLTK before 3.10.0 Insecure Default Configuration in pathsec.py
- CVE-2026-62387 Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin
- CVE-2026-62386 Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter
- CVE-2026-62385 NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers
- CVE-2026-62384 NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2
- CVE-2026-62383 nltk IPIPANCorpusReader Symlink Arbitrary File Read
- CVE-2026-62382 PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison
- CVE-2026-62381 luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow
- CVE-2026-62380 Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection
- CVE-2026-6238 Buffer overread in ns_printrrf with corrupted RDATA field
- CVE-2026-62379 OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
- CVE-2026-62378 RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover
- CVE-2026-62377 Denial of service in libheif
- CVE-2026-62376 Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access
- CVE-2026-62374 SD JWT JS: Tampered disclosures silently dropped instead of rejected
- CVE-2026-62371 KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API
- CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
- CVE-2026-6237 Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
- CVE-2026-62369 KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join
- CVE-2026-62368 Snipe-IT: Stored XSS via Custom Field name in asset-list column headers
- CVE-2026-62367 Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover
- CVE-2026-62364 wlc may disclose API tokens to project-configured URLs
- CVE-2026-62363 ImageMagick: Heap Buffer Over-Write in fx operation