Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 557 of 1013.
- CVE-2026-53851 OpenClaw < 2026.5.12 - Slack Reaction Event Notification Bypass
- CVE-2026-53850 OpenClaw < 2026.4.25 - Control Scope Enforcement Bypass in Focus Command
- CVE-2026-5385 GLPI 11.0.0 - Stored XSS in knowledge base
- CVE-2026-53849 OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Discord Display Names in allowFrom
- CVE-2026-53848 OpenClaw < 2026.5.26 - Exec Allowlist Bypass via Transparent Command Wrappers
- CVE-2026-53847 OpenClaw < 2026.5.6 - Privilege Escalation via Active Memory Write Scope
- CVE-2026-53846 OpenClaw < 2026.4.29 - Arbitrary Package Manager Execution via Workspace .env npm_execpath
- CVE-2026-53845 OpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping
- CVE-2026-53844 OpenClaw < 2026.4.29 - Session Visibility Check Bypass in Shared Memory Search
- CVE-2026-53843 OpenClaw < 2026.5.26 - Node Token Revocation Bypass via Pairing-Scoped Device Session
- CVE-2026-53842 OpenClaw < 2026.5.2 - Arbitrary Python Runtime Execution via CLOUDSDK_PYTHON Environment Variable
- CVE-2026-53841 OpenClaw < 2026.5.12 - Cross-Site Scripting via Unsafe Markdown Links in Exported Session HTML
- CVE-2026-53840 OpenClaw < 2026.5.12 - Custom Header Leakage via MCP Streamable HTTP Cross-Origin Redirects
- CVE-2026-5384 runZero Platform incorrect credential scope
- CVE-2026-53839 OpenClaw < 2026.5.7 - Hostname Prefix Matching Bypass in Trusted Retry Endpoint Validation
- CVE-2026-53838 OpenClaw < 2026.5.27 - Node Pairing State Mutation via Reconnection
- CVE-2026-53837 OpenClaw < 2026.5.6 - Missing Channel Type Validation in Mattermost Event Handlers
- CVE-2026-53836 OpenClaw < 2026.5.12 - Allowlist Bypass via PowerShell Encoded-Command Aliases
- CVE-2026-53835 OpenClaw < 2026.5.6 - Config-Write Enforcement Bypass in Feishu Dynamic-Agent Bindings
- CVE-2026-53834 OpenClaw < 2026.4.27 - Authorization Bypass in QQBot Pre-dispatch Slash Commands
- CVE-2026-53833 QQBot for OpenClaw < 2026.4.29 - Authorization Bypass via QQBot Streaming Command
- CVE-2026-53832 OpenClaw < 2026.5.18 - Identity Header Forgery via Trusted-Proxy Configuration
- CVE-2026-53831 OpenClaw < 2026.5.18 - Arbitrary File Read via Shell Expansion in system.run Safe-bin Allowlist
- CVE-2026-53830 OpenClaw < 2026.4.22 - Webhook Secret Revocation Bypass via secrets.reload
- CVE-2026-5383 runZero Explorer missing authorization check
- CVE-2026-53829 OpenClaw < 2026.5.18 - Command Truncation in Exec Approval Display
- CVE-2026-53828 OpenClaw < 2026.5.6 - Native Command Authorization Bypass via Owner-Command Enforcement
- CVE-2026-53827 OpenClaw < 2026.5.2 - Credential Exposure via Model-Supplied Loopback URLs in message.action Forwarding
- CVE-2026-53826 OpenClaw < 2026.4.26 - Information Disclosure via Sandboxed Session Spawn
- CVE-2026-53825 OpenClaw < 2026.4.7 - Arbitrary Local File Read via memory-wiki Ingest with operator.write Scope
- CVE-2026-53824 Mattermost plugin for OpenClaw < 2026.4.24 - Slash Token Revocation Lag via Monitor Refresh Delay
- CVE-2026-53823 OpenClaw < 2026.5.3 - Privilege Escalation via Mutable Slack Display Names in allowFrom
- CVE-2026-53822 OpenClaw < 2026.5.18 - Command Argument Modification via Shell Wrapper Between Approval and Execution
- CVE-2026-53821 OpenClaw < 2026.5.18 - Scope Elevation in trusted-proxy Control UI WebSocket
- CVE-2026-53820 OpenClaw < 2026.5.12 - Exec Denylist Bypass in Bundle MCP Loopback Session Spawn
- CVE-2026-5382 runZero Platform MCP endpoint information leak
- CVE-2026-53819 OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace .env Override
- CVE-2026-53818 OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
- CVE-2026-53817 OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing
- CVE-2026-53816 OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node
- CVE-2026-53815 OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions
- CVE-2026-53814 OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool Authority
- CVE-2026-53813 OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resolution
- CVE-2026-53812 OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Interactions
- CVE-2026-53811 OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matrix allowFrom
- CVE-2026-53810 OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Runtime Extension Metadata
- CVE-2026-5381 runZero Platform task information leak
- CVE-2026-53809 OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy
- CVE-2026-53808 OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
- CVE-2026-53807 OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks via commands.allowFrom
- CVE-2026-53806 OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
- CVE-2026-53805 NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API
- CVE-2026-53804 OTRS Community Edition OS Command Injection via PGP Configuration
- CVE-2026-53803 rsync < 3.5.0 Symlink Following Arbitrary File Overwrite
- CVE-2026-53802 rsync < 3.5.0 Arbitrary File Read via Symlink Following
- CVE-2026-53801 rsync < 3.5.0 Symlink Race Condition Directory Traversal
- CVE-2026-53800 rsync < 3.5.0 Symlink Race Condition via --remove-source-files
- CVE-2026-5380 runZero Platform cleartext secret exposure
- CVE-2026-53799 rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application
- CVE-2026-53798 rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping
- CVE-2026-53797 rsync < 3.5.0 Symlink Race Condition Information Disclosure
- CVE-2026-53796 rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling
- CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest
- CVE-2026-53794 rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error
- CVE-2026-53793 rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode
- CVE-2026-53792 rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block
- CVE-2026-53791 rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header
- CVE-2026-53790 rsync < 3.5.0 Command Injection via Multiple Code Paths
- CVE-2026-5379 runZero Platform MCP certification information leak
- CVE-2026-53789 rsync < 3.5.0 Arbitrary File Deletion via Malicious File List
- CVE-2026-53788 rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping
- CVE-2026-53787 Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload
- CVE-2026-53786 rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive
- CVE-2026-53785 rsync < 3.5.0 Path Traversal Write Escape via --relative Mode
- CVE-2026-53784 rsync < 3.5.0 Path Traversal via Symlink Module Root
- CVE-2026-53783 rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync
- CVE-2026-53782 Summarize < 0.17.0 SSRF via podcast:transcript URL fetch
- CVE-2026-53781 Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
- CVE-2026-5378 runZero Platform user creation leak
- CVE-2026-53779 WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows
- CVE-2026-53777 Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket
- CVE-2026-53776 Perry < 0.5.1166 JWT Expiration Bypass via verify_decode
- CVE-2026-5377 Incorrect Authorization in GitLab
- CVE-2026-53769 Avo: Direct attachment upload endpoint lacks upload authorization and bypasses field-level upload policy
- CVE-2026-53766 chrome-devtools-mcp: validatePath() does not canonicalize symlinks before enforcing roots
- CVE-2026-53765 chrome-devtools-mcp: daemon.pid write follows symlinks in /tmp fallback runtime directory
- CVE-2026-53763 OP-TEE has AES-GCM 32-bit integer overflow in length counters that breaks authentication guarantee
- CVE-2026-53762 VeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)
- CVE-2026-53761 Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api
- CVE-2026-53760 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests
- CVE-2026-5376 runZero Platform session timeout failure
- CVE-2026-53759 linuxfabrik-lib: Insecure creation of SQLite databases
- CVE-2026-53758 Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized
- CVE-2026-53757 Emlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCE
- CVE-2026-53756 Emlog Blind SQL Injection via Authentication Cookie
- CVE-2026-53755 Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check
- CVE-2026-53754 Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)
- CVE-2026-53753 Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API
- CVE-2026-53752 docx4j: Stack Overflow via Cyclic `w:basedOn` Style Chain leads to Denial of Service
- CVE-2026-53751 DataEase: H2 JDBC URL Filter Bypass Leads to Remote Code Execution (RCE)