Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 540 of 1013.
- CVE-2026-5577 Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection
- CVE-2026-55769 Privilege escalation in cloudnative-pg
- CVE-2026-55768 Integer overflow in goaccess
- CVE-2026-55767 Guzzle: Dot-Only Cookie Domains Match All Hosts in guzzlehttp/guzzle
- CVE-2026-55766 guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization
- CVE-2026-55765 Information disclosure in cloudnative-pg
- CVE-2026-55764 Klever-Go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
- CVE-2026-55763 Klever-Go: Percentage-transfer royalty skips the source debit at exactly-100% splits
- CVE-2026-55762 Missing authorization in Rocket.Chat
- CVE-2026-55761 Portainer: Unauthenticated Restore Endpoint Allows Admin Takeover on Uninitialised Portainer Instances
- CVE-2026-55760 handlebars.java FileTemplateLoader Path Traversal
- CVE-2026-5576 SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload
- CVE-2026-55759 Rocket.Chat: Apple Sign-In skips JWT claims validation, allowing expired and cross-audience token replay
- CVE-2026-55758 CC: Tweaked: Incomplete fix for GHSA-5jh9-2h63-pw4q: RFC 8215 NAT64 prefix (64:ff9b:1::/96) bypasses SSRF protection
- CVE-2026-5575 SourceCodester/jkev Record Management System Login index.php sql injection
- CVE-2026-55748 OpenStack Horizon RC file generation does not escape special characters in project names
- CVE-2026-55747 PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File Tools
- CVE-2026-55746 Cotonti stored XSS via PFS folder title
- CVE-2026-55745 Cotonti CSRF in PFS folder edit allows unauthorized folder modification
- CVE-2026-55744 Cotonti CSRF in PFS allows forced arbitrary file upload
- CVE-2026-55743 OpenHuman desktop agent shell tool sandbox bypass leads to arbitrary command execution
- CVE-2026-55742 Cotonti CSRF in admin.rights.php allows privilege escalation
- CVE-2026-55741 Cotonti CSRF in admin.config.php allows unauthorized configuration changes
- CVE-2026-55740 SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter
- CVE-2026-5574 Technostrobe HI-LED-WR120-G2 FsBrowseClean deletefile authorization
- CVE-2026-55739 Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Company Customer Data Theft and Deletion
- CVE-2026-55738 Stack Buffer Overflow in rxi/microtar raw_to_header() via non-null-terminated TAR name field
- CVE-2026-55737 Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder
- CVE-2026-55736 Private action arguments can be set by user input in Ash
- CVE-2026-55735 Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
- CVE-2026-55734 guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1
- CVE-2026-55733 Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation
- CVE-2026-55732 Loytec LINX firmware: Out-of-bounds Read in BACnet packet parsing (bacdt_datetime_to_tod)
- CVE-2026-55731 Loytec LINX firmware: Unchecked input for loop condition in the SNMP agent
- CVE-2026-55730 Loytec LWEB802: Reflected Cross-Site Scripting in LWEB802
- CVE-2026-5573 Technostrobe HI-LED-WR120-G2 fs unrestricted upload
- CVE-2026-55729 Loytec LWEB802: Exposure of Sensitive Information in browser localStorage
- CVE-2026-55728 Loytec LINX firmware: Stack-based Buffer Overflow in cmd_ipaddr_conflict
- CVE-2026-55727 Auth bypass in Genetec Security Center
- CVE-2026-55726 Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere
- CVE-2026-55723 NGINX Ingress Controller vulnerability
- CVE-2026-55721 SQL Injection in StoneFly Storage Concentrator
- CVE-2026-5572 Technostrobe HI-LED-WR120-G2 cross-site request forgery
- CVE-2026-55717 'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
- CVE-2026-5571 Technostrobe HI-LED-WR120-G2 Configuration Data fs information disclosure
- CVE-2026-55708 Privacy/configuration issue when adding local data in views through 'unbound-control'
- CVE-2026-55707 Missing authorization in Neutron
- CVE-2026-55706 Auth bypass in OpenBSD
- CVE-2026-55704 Discourse: Shared-draft titles and excerpts leak through group post serialization
- CVE-2026-55703 Snipe-IT: Maintenance Record Disclosure via Missing Authorization on GET
- CVE-2026-55701 OpenTelemetry githubreceiver silently ignores configured required_headers authentication
- CVE-2026-55700 pnpm: stage download writes outside destination via manifest version traversal
- CVE-2026-5570 Technostrobe HI-LED-WR120-G2 LoginCB index_config improper authentication
- CVE-2026-55699 pnpm: reserved bin name deletes PNPM_HOME during global remove
- CVE-2026-55698 pnpm: Project env lockfile can short-circuit package-manager resolution and execute lockfile-selected pnpm bytes
- CVE-2026-55697 pnpm: Repository-controlled configDependencies can select a pacquet native install engine
- CVE-2026-55696 PrivateBin has stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
- CVE-2026-55695 FearlessCMS: Remote Code Execution via Unvalidated Update Repository URL in System Updater
- CVE-2026-55694 Snipe-IT: Chained Information Disclosure and IDOR Leads to Full EULA File Takeover
- CVE-2026-55693 Vim: Out-of-bounds Write in Spell File Word Count
- CVE-2026-55692 EmbedVideo Extension: Stored XSS via malformed src url with $wgEmbedVideoRequireConsent enabled
- CVE-2026-55691 EmbedVideo Extension : Stored XSS via unsanitized class passed to template
- CVE-2026-55690 EmbedVideo Extension: Stored XSS via unsanitized service name in exception text
- CVE-2026-5569 Technostrobe HI-LED-WR120-G2 Endpoint access control
- CVE-2026-55689 OpenFGA: OIDC audience validation skipped when --authn-oidc-audience is unset
- CVE-2026-55688 AsyncHttpClient: Cookie stored for an unrelated domain (cookie tossing) via ThreadSafeCookieStore
- CVE-2026-55687 ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
- CVE-2026-55686 Podman: WORKDIR symlink traversal vulnerability
- CVE-2026-55685 React Router: Unauthenticated Denial of Service via Inefficient Route Matching
- CVE-2026-55684 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobrancas_geracao.php
- CVE-2026-55683 WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.php
- CVE-2026-55682 WeGIA: Session Fixation via User-Controlled PHPSESSID Cookie + DB_HOST Leak in html/seguranca/sessionStart.php
- CVE-2026-55681 WeGIA: SQL Injection in html/matPat/restaurar_produto_desocultar.php via id_produto parameter
- CVE-2026-55680 WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameter
- CVE-2026-5568 Akaunting Invoice/Billing cross site scripting
- CVE-2026-55679 WeGIA: Pre-auth Installer Injection Chain Enables Command Execution and Arbitrary PHP Code Injection
- CVE-2026-55678 Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset
- CVE-2026-55677 Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
- CVE-2026-55676 Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component
- CVE-2026-55675 Salty documentation workflow executes fork-controlled Python build hooks with deployment secrets
- CVE-2026-55674 Discourse: Cache poisoning/XSS via color scheme cookies
- CVE-2026-55673 PowSyBl: Command Injection in LocalCommandExecutor-s
- CVE-2026-55672 ZITADEL: Missing client_id binding in OIDC authorization code exchange and refresh token flows (RFC 6749 Section 4.1.3 violation)
- CVE-2026-55671 ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components
- CVE-2026-55670 ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
- CVE-2026-5567 Tenda M3 Destination setAdvPolicyData buffer overflow
- CVE-2026-55669 ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider
- CVE-2026-55668 File Browser: ScopedFs follows a dangling symlink on write, letting a scoped user create files outside their scope
- CVE-2026-55667 File Browser: Out-of-scope file deletion by a Create-only scoped user via symlink-following RemoveAll in upload failure-cleanup
- CVE-2026-55666 Rocket.Chat: Email Parameter Fallback Leads To Account Takeover Within Apple OAuth
- CVE-2026-55665 DOM-based XSS in Grist via unsanitized links, enabling privilege escalation
- CVE-2026-55664 Grist: Insufficient access control in the /forms endpoint exposes table metadata
- CVE-2026-55663 mediasoup: SCTP state cookie lacks cryptographic authentication, enabling unauthorized association establishment (RFC 9260 violation)
- CVE-2026-55661 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing stored XSS via dangerous URL schemes
- CVE-2026-55660 TinaCMS: Cross-origin postMessage handlers and rich-text URL-sanitization bypass enable stored XSS and session takeover
- CVE-2026-5566 UTT HiPER 1250GW formNatStaticMap strcpy buffer overflow
- CVE-2026-55659 Grist: XSS through unsafe value interpolation in server-rendered pages
- CVE-2026-55658 Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()
- CVE-2026-55655 Security feature bypass in Red Hat Enterprise Linux 10
- CVE-2026-55654 Memory corruption in Red Hat Enterprise Linux 10