Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 529 of 1013.
- CVE-2026-57208 Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind
- CVE-2026-57207 NetBox MCP Server: HTTP transport exposes all NetBox data without authentication
- CVE-2026-57206 SimpleChat plugin validation endpoints missing authentication and authorization
- CVE-2026-57205 SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints
- CVE-2026-57204 pypdf: Missing stream length values ignore defined limits
- CVE-2026-57203 Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
- CVE-2026-57202 Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
- CVE-2026-57201 Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
- CVE-2026-57200 Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
- CVE-2026-5720 miniupnpd Integer Underflow SOAPAction Header Parsing
- CVE-2026-57199 Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
- CVE-2026-57198 Asterisk: Possible RED T.140 Heap Buffer Overflow
- CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
- CVE-2026-57196 Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
- CVE-2026-57195 Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
- CVE-2026-57194 Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
- CVE-2026-57193 Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
- CVE-2026-57192 Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
- CVE-2026-57191 Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
- CVE-2026-57190 Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
- CVE-2026-5719 itsourcecode Construction Management System borrowedtool.php sql injection
- CVE-2026-57189 Asterisk: Possible RED T.140 Generation Accumulation OOB Write
- CVE-2026-57188 Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
- CVE-2026-57187 Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
- CVE-2026-57186 Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
- CVE-2026-57185 Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
- CVE-2026-57184 Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
- CVE-2026-57183 Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs
- CVE-2026-5718 File upload in Drag and Drop Multiple File Upload for Contact Form 7
- CVE-2026-57179 social-auth-core has a Session Fixation issue
- CVE-2026-57178 social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing
- CVE-2026-57177 social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend
- CVE-2026-57176 social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend
- CVE-2026-57175 social-auth-core has an Improper Authentication issue
- CVE-2026-57173 vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions
- CVE-2026-57172 DataEase: Hardcoded JWT Signing Secret in ShareLink
- CVE-2026-57171 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)
- CVE-2026-57170 Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439)
- CVE-2026-5717 Cross-site scripting in VI: Include Post By
- CVE-2026-57169 Dockhand: Unauthenticated container exec via WebSocket upgrade
- CVE-2026-57167 PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
- CVE-2026-57166 PJSIP: Pre-authentication overflow in the telnet CLI error
- CVE-2026-57165 PJSIP: Pre-authentication overflow in the telnet CLI history
- CVE-2026-57164 PJSIP: Heap overflow in the HTTP client
- CVE-2026-57163 PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend
- CVE-2026-57162 PJSIP: Stack overflow parsing SDP a=crypto attributes
- CVE-2026-57161 PJSIP: Stack overflow handling Service-Route headers in a registration response
- CVE-2026-57160 PJSIP: SIP message header buffer overflow
- CVE-2026-57159 PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
- CVE-2026-57158 FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530
- CVE-2026-57157 Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName
- CVE-2026-57156 FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing
- CVE-2026-57155 OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer
- CVE-2026-5715 Voyage Plus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post-content' Shortcode
- CVE-2026-57149 plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection
- CVE-2026-57148 praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
- CVE-2026-57147 praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
- CVE-2026-57146 PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default
- CVE-2026-57145 PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation
- CVE-2026-57144 PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable
- CVE-2026-57143 PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter
- CVE-2026-57142 PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml
- CVE-2026-57141 PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
- CVE-2026-57140 PraisonAI AgentOS exposes unauthenticated agent listing and invocation
- CVE-2026-5714 Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter
- CVE-2026-57139 PraisonAI MCPServer exposes unauthenticated HTTP tools/call
- CVE-2026-57138 PraisonAI codeMode sandbox escape via Function constructor
- CVE-2026-57137 PraisonAI AgentLoop onToolCall approval runs after tool execution
- CVE-2026-57136 PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
- CVE-2026-57135 PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
- CVE-2026-57134 PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
- CVE-2026-57133 PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
- CVE-2026-57132 PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication
- CVE-2026-57131 praisonai: Jobs API exposes agent-execution endpoints with no authentication
- CVE-2026-57130 PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters
- CVE-2026-5713 Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target
- CVE-2026-57129 PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal
- CVE-2026-57128 PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint
- CVE-2026-57127 praisonai: recipe serve auth middleware silently disables itself when no secret is set
- CVE-2026-57126 praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS
- CVE-2026-57125 PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass
- CVE-2026-57124 PraisonAI UI MCP connect endpoint allows unauthenticated local command execution
- CVE-2026-57123 PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in
- CVE-2026-57122 PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots)
- CVE-2026-57121 PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API
- CVE-2026-57120 PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder
- CVE-2026-5712 IdentityIQ Role Editor Incorrect Authorization Vulnerability
- CVE-2026-57119 PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API
- CVE-2026-57118 PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints
- CVE-2026-57117 PraisonAI: Compute-bridged file tools allow shell command injection
- CVE-2026-57116 PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation
- CVE-2026-57115 PraisonAI: SpiderTools redirect-target SSRF protection bypass
- CVE-2026-57114 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding
- CVE-2026-57113 PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion
- CVE-2026-57112 PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
- CVE-2026-57111 Apache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin
- CVE-2026-5711 Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute
- CVE-2026-57108 .NET Denial of Service Vulnerability
- CVE-2026-57107 Windows Admin Center Elevation of Privilege Vulnerability
- CVE-2026-57106 Data Quality Elevation of Privilege Vulnerability