Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 495 of 1013.
- CVE-2026-61425 Joomla Extension - balbooa.com - Authentication bypass in Gridbox < 1.6.0
- CVE-2026-61424 Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2
- CVE-2026-61422 Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate
- CVE-2026-61421 Hardcoded credentials in Container Storage Modules
- CVE-2026-6142 tushar-2223 Hotel Management System roomdelete.php sql injection
- CVE-2026-61419 Missing authorization in ThinOS 10
- CVE-2026-61413 Privilege escalation in Secure Connect Gateway (SCG) Policy Manager
- CVE-2026-61411 Information disclosure in Container Storage Modules
- CVE-2026-61410 Missing authorization in Secure Connect Gateway 5.0 - Appliance
- CVE-2026-6141 danielmiessler Personal_AI_Infrastructure parse_url.ts os command injection
- CVE-2026-61409 Command injection in Secure Connect Gateway (SCG) 5.0 Application
- CVE-2026-61407 Privilege escalation in Watchdog Timer Driver
- CVE-2026-61400 Apache CloudStack: Get and Run Diagnostics Command Injection
- CVE-2026-6140 Totolink A7100RU CGI cstecgi.cgi UploadFirmwareFile os command injection
- CVE-2026-61399 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Lock User Function in UI
- CVE-2026-61398 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI
- CVE-2026-61397 Apache CloudStack: OAuth2 Token Cross-Request Leak
- CVE-2026-61392 Information disclosure in DS-2CD Series
- CVE-2026-61391 Memory corruption in DS-2CD Series
- CVE-2026-61390 Memory corruption in DS-2CD Series
- CVE-2026-6139 Totolink A7100RU CGI cstecgi.cgi UploadOpenVpnCert os command injection
- CVE-2026-61389 AutomationDirect Productivity Suite Out-of-bounds Write
- CVE-2026-61387 Denial of service in Eclipse Milo
- CVE-2026-6138 Totolink A7100RU CGI cstecgi.cgi setAccessDeviceCfg os command injection
- CVE-2026-61378 AutomationDirect Productivity Suite Divide By Zero
- CVE-2026-61376 Command injection in WAB-I1750-PS
- CVE-2026-61374 Apache Thrift: Java TSaslTransport post-auth data-frame missing size limit
- CVE-2026-61373 Apache Thrift: Java TSaslNonblockingServer pre-auth unbounded SASL frame allocation
- CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions
- CVE-2026-61371 Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target.
- CVE-2026-6137 Tenda F451 AdvSetWan fromAdvSetWan stack-based overflow
- CVE-2026-61368 Windows Hyper-V Information Disclosure Vulnerability
- CVE-2026-61367 Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-61366 Windows Network Connection Broker Elevation of Privilege Vulnerability
- CVE-2026-61365 Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-61364 Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-61363 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-61361 Windows DHCP Client Remote Code Execution Vulnerability
- CVE-2026-61360 Windows GDI Information Disclosure Vulnerability
- CVE-2026-6136 Tenda F451 L7Im frmL7ImForm stack-based overflow
- CVE-2026-61359 Windows Storage Elevation of Privilege Vulnerability
- CVE-2026-61358 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
- CVE-2026-61357 Application Information Services Elevation of Privilege Vulnerability
- CVE-2026-61356 Windows Remote Desktop Services Elevation of Privilege Vulnerability
- CVE-2026-61355 Windows Sensor Data Service Elevation of Privilege Vulnerability
- CVE-2026-61353 Windows Telephony Service Elevation of Privilege Vulnerability
- CVE-2026-61352 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-61350 Windows NTFS Information Disclosure Vulnerability
- CVE-2026-6135 Tenda F451 SetIpBind fromSetIpBind stack-based overflow
- CVE-2026-61349 Windows Work Folder Service Elevation of Privilege Vulnerability
- CVE-2026-61348 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-61347 Windows Event Logging Service Information Disclosure Vulnerability
- CVE-2026-61346 Windows Graphics Kernel Elevation of Privilege Vulnerability
- CVE-2026-61345 Microsoft Remote Registry Service Denial of Service Vulnerability
- CVE-2026-61344 Superior Court of California Hearing Reminder Service unauthenticated information disclosure
- CVE-2026-61343 LibreBooking path traversal
- CVE-2026-61342 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61341 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61340 Missing authorization in Oracle MES for Process Manufacturing
- CVE-2026-6134 Tenda F451 qossetting fromqossetting stack-based overflow
- CVE-2026-61339 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61338 Missing authorization in Oracle Contracts Integration
- CVE-2026-61337 Missing authorization in Oracle Lease and Finance Management
- CVE-2026-61336 Privilege escalation in Oracle Lease and Finance Management
- CVE-2026-61335 Missing authorization in Oracle Product Workbench
- CVE-2026-61334 Missing authorization in Oracle Price Protection
- CVE-2026-61333 Missing authorization in Oracle Product Workbench
- CVE-2026-61332 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61331 Missing authorization in Oracle Financials Common Modules
- CVE-2026-61330 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-6133 Tenda F451 SafeUrlFilter fromSafeUrlFilter stack-based overflow
- CVE-2026-61329 Missing authorization in Oracle Price Protection
- CVE-2026-61328 Missing authorization in Oracle Cost Management
- CVE-2026-61327 Missing authorization in Oracle Bills of Material
- CVE-2026-61326 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61325 Missing authorization in Oracle Advanced Benefits
- CVE-2026-61324 Missing authorization in Oracle Advanced Benefits
- CVE-2026-61323 Missing authorization in Oracle Advanced Benefits
- CVE-2026-61322 Auth bypass in TeleSales
- CVE-2026-61321 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61320 Auth bypass in Oracle Payables
- CVE-2026-6132 Totolink A7100RU CGI cstecgi.cgi setLedCfg os command injection
- CVE-2026-61319 Missing authorization in Oracle U.S. Federal Financials
- CVE-2026-61318 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61317 Missing authorization in Siebel CRM Cloud Applications
- CVE-2026-61316 Information disclosure in Oracle EDI Gateway
- CVE-2026-61315 Information disclosure in Oracle EDI Gateway
- CVE-2026-61314 Missing authorization in Oracle EDI Gateway
- CVE-2026-61313 Missing authorization in Oracle Hyperion Calculation Manager
- CVE-2026-61312 Missing authorization in Oracle Product Hub
- CVE-2026-61311 Auth bypass in Oracle Product Hub
- CVE-2026-61310 Missing authorization in Oracle Product Hub
- CVE-2026-6131 Totolink A7100RU CGI cstecgi.cgi setTracerouteCfg os command injection
- CVE-2026-61309 Missing authorization in Oracle In-Memory Cost Management for Discrete Industries
- CVE-2026-61308 Missing authorization in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition
- CVE-2026-61307 Auth bypass in PeopleSoft Enterprise CC Common Application Objects
- CVE-2026-61306 Missing authorization in Oracle Complex Maintenance, Repair and Overhaul
- CVE-2026-61305 Missing authorization in Oracle BI Publisher
- CVE-2026-61304 Missing authorization in Oracle Price Protection
- CVE-2026-61303 Information disclosure in Oracle EDI Gateway