Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 521 of 1013.
- CVE-2026-58091 Kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl
- CVE-2026-58090 Use-after-free in unix SOCK_STREAM message handling
- CVE-2026-5809 wpForo Forum <= 3.0.2 - Authenticated (Subscriber+) Arbitrary File Deletion via 'data[body][fileurl]' Parameter
- CVE-2026-58089 hwpmc fails to detach PMCs during exec credential transitions
- CVE-2026-58088 Race condition in ELF core dump segment counting
- CVE-2026-58087 Heap out-of-bounds access in semctl(2)
- CVE-2026-58086 ktrace(2) privilege incorrectly validated in jails
- CVE-2026-58085 Missing MAC validation in wg(4) packet decryption
- CVE-2026-58084 Kernel stack disclosure via timer_settime(2)
- CVE-2026-58083 Use-after-free in kqueue copy-on-fork
- CVE-2026-58082 Stack based buffer overflow in iconv(3)
- CVE-2026-58081 Heap based buffer overflow in iconv(3)
- CVE-2026-58080 Missing authorization in Eclipse Milo
- CVE-2026-5808 openstatusHQ openstatus Onboarding Endpoint client.tsx cross site scripting
- CVE-2026-58078 Joomla Extension - themexpert.com - Unauthenticated SQL injection in Quix Page Builder Pro < 6.2.1
- CVE-2026-58077 Joomla Extension - weeblr.com - Unauthenticated stored XSS in 4Analytics < 5.0.2
- CVE-2026-58076 Apache Airflow exception-node deserialization permits arbitrary callable execution
- CVE-2026-58075 Auth bypass in ONE
- CVE-2026-58074 Code injection in ONE
- CVE-2026-58073 Auth bypass in Service Provider Console
- CVE-2026-58072 Path traversal in Service Provider Console
- CVE-2026-58071 Auth bypass in Service Provider Console
- CVE-2026-58070 Information disclosure in Backup and Replication
- CVE-2026-5807 Vault Vulnerable to Denial-of-Service via Unauthenticated Root Token Generation/Rekey Operations
- CVE-2026-58069 Path traversal in Backup and Replication
- CVE-2026-58068 Missing authorization in Agent for Windows
- CVE-2026-58067 Denial of service in Service Provider Console
- CVE-2026-58066 Auth bypass in Rocket.Chat
- CVE-2026-58065 Weak cryptography in Apache Airflow Git provider
- CVE-2026-58064 Apache bRPC: Denial of Service via Unbounded Redis Inline Command Allocation
- CVE-2026-58063 BCFKS keystore load honours unbounded KDF cost from untrusted file
- CVE-2026-58062 Stapled OCSP response accepted without binding to the checked certificate
- CVE-2026-58061 CCM-family modes write plaintext to caller buffer before tag check
- CVE-2026-58060 HSS public-key level count unbounded, enabling huge allocation on verify
- CVE-2026-5806 code-projects Easy Blog Site update.php cross site scripting
- CVE-2026-58059 Quadratic-time escaping when stringifying X.500 distinguished names
- CVE-2026-58058 Nmap - Integer Underflow in IPv6 Extension Header Parsing
- CVE-2026-58057 Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity
- CVE-2026-58056 RustDesk - FileTransfer Session Authorization Scope Bypass
- CVE-2026-58055 nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length
- CVE-2026-58053 Gitea act_runner - Container Hardening Bypass via Workflow Container Options
- CVE-2026-58052 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
- CVE-2026-58051 libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
- CVE-2026-58050 libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
- CVE-2026-5805 code-projects Easy Blog Site contact_us.php sql injection
- CVE-2026-58049 FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
- CVE-2026-58048 SQL injection in WP Squared
- CVE-2026-58047 Other in WP Squared
- CVE-2026-58046 SQL injection in Plesk
- CVE-2026-58045 Denial of service in node
- CVE-2026-58044 Other in node
- CVE-2026-58043 Security feature bypass in node
- CVE-2026-58042 Denial of service in node
- CVE-2026-58041 Race condition in node
- CVE-2026-58040 Security feature bypass in node
- CVE-2026-5804 Auth bypass in Phones
- CVE-2026-58039 Security feature bypass in node
- CVE-2026-58038 Stored XSS through javascript URLs in SVGs generated by EasyTimeline
- CVE-2026-58037 Core log entries for exceptions and XSS issues in log entry formatting code that may be caused by user-controlled input
- CVE-2026-58036 Users API leaks whether privileged users have their user groups disabled for lack of 2FA
- CVE-2026-58035 Stored XSS through a system message in the codex version of Special:Block
- CVE-2026-58034 Stored XSS through a system message when blocking a temporary account that's related to other temporary accounts
- CVE-2026-58033 Information disclosure in MediaWiki
- CVE-2026-58032 mw.Api.getErrorMessage() may return injected HTML if used without errorformat=html
- CVE-2026-58031 Stored i18n XSS in Special:ApiSandbox when a deprecated module is selected
- CVE-2026-58030 SyntaxHighlight stored XSS via unsanitized 'linelinks' attribute
- CVE-2026-5803 bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery
- CVE-2026-58029 Full Account Takeover from BotPasswords and OAuth via action=changeauthenticationdata
- CVE-2026-58028 Pretty-printed API output combined with centralauthtoken allows XSS with certain gadgets
- CVE-2026-58027 QueryAbuseFilter API can be used to see the hit count of private filters, which is hidden in the UI
- CVE-2026-58026 $wgNonincludableNamespaces can be bypassed by embedding redirect in other namespaces
- CVE-2026-58025 Remote Code Execution via Unsafe Deserialization in LogItem Import
- CVE-2026-58024 API identification of users on private wikis
- CVE-2026-58023 Apache Thrift: c_glib heap out-of-bounds read in transport leftover-bytes path
- CVE-2026-5802 idachev mcp-javadc HTTP os command injection
- CVE-2026-58016 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
- CVE-2026-58015 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive
- CVE-2026-58014 Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"
- CVE-2026-58013 Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"
- CVE-2026-58012 Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()
- CVE-2026-58011 Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime
- CVE-2026-58010 Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()
- CVE-2026-5801 SQLi in Semtek Informatics' SEM-PMP
- CVE-2026-58008 Unchecked HKDF key-size input in EL3 causes a stack buffer overflow
- CVE-2026-58007 Unchecked SDM mailbox response address enables EL3 secure-memory corruption
- CVE-2026-58006 Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
- CVE-2026-58005 Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.
- CVE-2026-58004 Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.
- CVE-2026-58003 WWBN AVideo Cross-Site Request Forgery via releaseVideoNow.json.php
- CVE-2026-58002 WWBN AVideo Authorization Bypass via Users_affiliations add.json.php
- CVE-2026-58001 WWBN AVideo Cross-Site Request Forgery via videoEditLight.php
- CVE-2026-58000 luci-proto-openvpn - Command Injection via cl_meta Parameter in generateKey
- CVE-2026-5800 Reflected XSS in Dayneks Software's E-Commerce Platform
- CVE-2026-57999 luci-app-tailscale-community - Command Injection via tailscale.do_login RPC
- CVE-2026-57998 better-npm-audit OS Command Injection via registry flag
- CVE-2026-57997 Strapi users-permissions - JWT Algorithm Confusion via Missing Algorithm Configuration
- CVE-2026-57996 phpMyFAQ - Privilege Escalation via Missing SuperAdmin Guard in user/add Endpoint
- CVE-2026-57995 phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions
- CVE-2026-57994 phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endpoints
- CVE-2026-57993 Microsoft Edge (Chromium-based) Spoofing Vulnerability