Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 530 of 1013.
- CVE-2026-57105 Microsoft Office SharePoint Spoofing Vulnerability
- CVE-2026-57104 Azure Storage Explorer Elevation of Privilege Vulnerability
- CVE-2026-57102 Visual Studio Code Security Feature Bypass Vulnerability
- CVE-2026-57101 Visual Studio Code Security Feature Bypass Vulnerability
- CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
- CVE-2026-5710 Path traversal in Drag and Drop Multiple File Upload for Contact Form 7
- CVE-2026-57099 ASP.NET Core Denial of Service Vulnerability
- CVE-2026-57098 Microsoft Remote Desktop App for Windows Information Disclosure Vulnerability
- CVE-2026-57097 Microsoft XML Security Feature Bypass Vulnerability
- CVE-2026-57096 Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability
- CVE-2026-57095 Win32k Elevation of Privilege Vulnerability
- CVE-2026-57094 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-57093 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-57092 Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
- CVE-2026-57091 Windows File History Service Elevation of Privilege Vulnerability
- CVE-2026-57090 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-5709 AWS Research and Engineering Studio (RES) FileBrowser Command Injection
- CVE-2026-57089 Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability
- CVE-2026-57088 Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability
- CVE-2026-57087 Microsoft Windows Media Foundation Remote Code Execution Vulnerability
- CVE-2026-57085 Windows Print Spooler Information Disclosure Vulnerability
- CVE-2026-57084 Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-57083 Windows Media Photo Codec Information Disclosure Vulnerability
- CVE-2026-57082 Weak cryptography in Net::BitTorrent
- CVE-2026-57081 Net::BitTorrent versions through 2.1.0 for Perl allow remote memory exhaustion via deeply nested bencoded input
- CVE-2026-57080 Denial of service in Net::BitTorrent
- CVE-2026-5708 Improper Control of User-Modifiable Attributes in RES CreateSession API
- CVE-2026-57079 Path traversal in Net::BitTorrent
- CVE-2026-57077 YAML::Syck versions before 1.47 for Perl allow an out-of-bounds read via an unbounded newline scan in newline_len
- CVE-2026-57076 Use after free in YAML::Syck
- CVE-2026-57075 Memory corruption in YAML::Syck
- CVE-2026-57074 XML::Bare versions through 0.53 for Perl have an unbounded character lookahead
- CVE-2026-57073 HTML::Bare versions through 0.04 for Perl have an unbounded character lookahead
- CVE-2026-5707 Command Injection via Virtual Desktop Session Name in AWS Research and Engineering Studio (RES)
- CVE-2026-57062 Weak cryptography in GnuPG
- CVE-2026-5706 Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements
- CVE-2026-57054 Junos OS: MX Series: Web filtering doesn't block specifically formatted URLs
- CVE-2026-57053 Memory corruption in libidn
- CVE-2026-5705 code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting
- CVE-2026-57042 Privilege escalation in Android
- CVE-2026-5704 Tar: tar: hidden file injection via crafted archives
- CVE-2026-57035 Memory corruption in Android
- CVE-2026-57032 Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crash
- CVE-2026-57031 Junos OS: MX Series: For subscribers configured on static interfaces, input filters are not in effect
- CVE-2026-57030 Junos OS: SRX Series: Flow sessions are not getting cleared leading to a DoS
- CVE-2026-5703 Path Traversal in Satel Iberia SenNet Datalogger Serie 200
- CVE-2026-57029 Junos OS Evolved: QFX Series: When sFlow collector reachability changes evo-pfemand process can crash
- CVE-2026-57028 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-57027 Junos OS: EX4100 Series, EX4400: With sFlow configured in a VC scenario multicast traffic leads to an FPC crash
- CVE-2026-57026 Junos OS: MX Series with SPC3, SRX Series: Processing of a specifically malformed SIP invite causes a flowd crash
- CVE-2026-57025 Denial of service in Junos OS
- CVE-2026-57024 Junos OS: MX with SPC3, SRX Series: Repeated VPN negotiation failures will eventually cause iked to crash continuously
- CVE-2026-57023 Junos OS: MX with SPC3, SRX Series: A specifically malformed TCP packet causes a flowd crash
- CVE-2026-57022 Denial of service in Junos OS
- CVE-2026-57021 Junos OS: SRX Series: If VPN compliance-check is configured an attacker can cause http-gk process crash
- CVE-2026-57020 Junos OS: QFX10000 Series: IPv6 multicast traffic received on non-IRB interfaces causes a multicast flood
- CVE-2026-5702 Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application
- CVE-2026-57019 Junos OS: MX Series: Specific traffic causes an FPC to reset
- CVE-2026-57014 Memory corruption in Android
- CVE-2026-57012 Missing authorization in Android
- CVE-2026-57008 Information disclosure in Android
- CVE-2026-57006 Information disclosure in Android
- CVE-2026-5700 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application
- CVE-2026-56997 Memory corruption in Android
- CVE-2026-56992 Privilege escalation in Android
- CVE-2026-5699 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application
- CVE-2026-56989 Memory corruption in Android
- CVE-2026-56988 Use after free in Android
- CVE-2026-56986 Memory corruption in Android
- CVE-2026-56985 Memory corruption in Android
- CVE-2026-56982 Missing authorization in Android
- CVE-2026-5698 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application
- CVE-2026-56979 Security feature bypass in Android
- CVE-2026-56978 Memory corruption in Android
- CVE-2026-56975 Denial of service in Android
- CVE-2026-56974 Memory corruption in Android
- CVE-2026-56973 Privilege escalation in Android
- CVE-2026-56972 Memory corruption in Android
- CVE-2026-56970 Missing authorization in Android
- CVE-2026-5697 Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application
- CVE-2026-56968 Information disclosure in GNU SASL
- CVE-2026-56967 Memory corruption in Android
- CVE-2026-56964 Use after free in Android
- CVE-2026-56960 Use after free in Android
- CVE-2026-5696 Multiple vulnerabilities in the Microweber administration panel
- CVE-2026-56958 Memory corruption in Android
- CVE-2026-56952 Missing authorization in Android
- CVE-2026-56950 Information disclosure in Android
- CVE-2026-5695 Multiple vulnerabilities in the Microweber administration panel
- CVE-2026-56945 Memory corruption in Android
- CVE-2026-56942 Memory corruption in Android
- CVE-2026-56941 Use after free in Android
- CVE-2026-5694 Quick Interest Slider <= 3.1.5 - Unauthenticated Stored Cross-Site Scripting
- CVE-2026-56936 Memory corruption in Android
- CVE-2026-56932 Memory corruption in Android
- CVE-2026-5693 Smart Appointment & Booking <= 1.0.8 - Missing Authorization to Unauthenticated Arbitrary Booking Cancellation
- CVE-2026-56923 Race condition in Android
- CVE-2026-56922 Privilege escalation in Android
- CVE-2026-56920 Memory corruption in Android
- CVE-2026-5692 Totolink A7100RU cstecgi.cgi setGameSpeedCfg os command injection