Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 581 of 1013.
- CVE-2026-50043 Command injection in SkyBridge MB-A100/MB-A110
- CVE-2026-50040 Cross-site Scripting in StoneFly Storage Concentrator
- CVE-2026-5004 Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow
- CVE-2026-50039 Stack-based Buffer Overflow in MZ Automation libIEC61850
- CVE-2026-50034 Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT Cleartext Transmission of Sensitive Information
- CVE-2026-50033 Privilege escalation in Acronis DeviceLock DLP
- CVE-2026-50032 NULL Pointer Dereference in MZ Automation libIEC61850
- CVE-2026-50031 Memory corruption in FreeIPMI
- CVE-2026-50030 DataEase: Arbitrary SQL execution in preview path (direct data disclosure)
- CVE-2026-5003 PromtEngineer localGPT Web api_server.py handle_index information disclosure
- CVE-2026-50029 js-toml has silent type confusion via falsy-primitive duplicate-key bypass
- CVE-2026-50027 mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete
- CVE-2026-50026 Frappe: Lack of permissions checks in 'relink' and 'set_email_password' endpoints
- CVE-2026-50025 Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM cookie state
- CVE-2026-50024 GitHacker: Path traversal in ref/hash parsing enables existence oracle and hex-fragment exfiltration via malicious .git server
- CVE-2026-50023 yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
- CVE-2026-50022 Metacat acts as unintended proxy to backend Apache SOLR engine
- CVE-2026-50021 pnpm: Integrity Check Bypass via Missing Lockfile Integrity Field
- CVE-2026-50020 Netty's HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted
- CVE-2026-5002 PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection
- CVE-2026-50019 yt-dlp: File Downloader cookie leak with curl
- CVE-2026-50018 Hoverfly: Denial of Service via Goroutine Leak in Remote Post-Serve Actions
- CVE-2026-50017 pnpm binds unscoped user-level npm auth credentials to a repository-selected registry
- CVE-2026-50016 pnpm: Transitive dependency alias path traversal allows project path override via symlink replacement
- CVE-2026-50015 pnpm: Arbitrary File Write/Delete via Malicious Patch File (Path Traversal)
- CVE-2026-50014 pnpm: Git Fetch Argument Injection via Lockfile resolution.commit
- CVE-2026-50013 Hoverfly: Process Crash via Concurrent Map Write Race Condition in Diff Mode
- CVE-2026-50012 Squid: Memory corruption in cache_digest reply handling
- CVE-2026-50011 Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length
- CVE-2026-50010 Netty's wrapping plain trust manager silently disables hostname verification
- CVE-2026-5001 PromtEngineer localGPT server.py do_POST unrestricted upload
- CVE-2026-50009 Netty QUIC stateless reset token material exposed through header-visible connection IDs
- CVE-2026-50008 Parse Server: Server option routeAllowList is bypassable through batch sub-requests
- CVE-2026-50007 Actual: Shared users can perform owner-only file management actions
- CVE-2026-50006 Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
- CVE-2026-50005 Brickcom Cameras Use of Default Credentials
- CVE-2026-50003 OFFIS DCMTK Toolkit Path Traversal
- CVE-2026-5000 PromtEngineer localGPT API Endpoint server.py LocalGPTHandler missing authentication
- CVE-2026-49998 Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass
- CVE-2026-49997 SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted
- CVE-2026-49996 securedrop-proxy origin limitation can be bypassed with redirects
- CVE-2026-49995 Tautulli: Stored Cross-Site Scripting (XSS) in the newsletter
- CVE-2026-49994 Bluehood: Missing authentication on Bluehood API routes when web auth is enabled
- CVE-2026-49993 @nuxt/webpack-builder and @nuxt/rspack-builder dev server same-origin check bypassed when Sec-Fetch-Site, Origin, and Referer are all absent (incomplete fix for GHSA-6m52-m754-pw2g)
- CVE-2026-49992 Kimai: Login CSRF in Default Team Creation Endpoints Allows Unauthorized Team and Permission Structure Changes
- CVE-2026-49991 RustFS Snowball Auto-Extract: Path Traversal allows cross-bucket object injection
- CVE-2026-4999 z-9527 admin isImg Check upload.js uploadFile path traversal
- CVE-2026-49989 CrateDB's Blob HTTP handler bypasses authorization
- CVE-2026-49988 Repomix: attach_packed_output can bypass file-read secret scanning for supported local files
- CVE-2026-49987 Repomix: Command Injection (RCE) via `--remote-branch` Argument Injection
- CVE-2026-49986 Cortex has Untrusted Project Bootstrap Code Execution via `CLAUDE_PROJECT_DIR`
- CVE-2026-49984 Path traversal in kestra
- CVE-2026-49983 Deno: process.loadEnvFile() bypasses env permission checks and mutates process.env with only read access
- CVE-2026-49982 tmp: Type-confusion bypass of _assertPath in [email protected] allows path traversal via non-string prefix/postfix/template
- CVE-2026-49981 Twig: Sandbox filter, tag and function allow-list bypass when sandbox state changes between renders for a cached `Template`
- CVE-2026-49980 Rclone: Unauthenticated command execution in `rclone rcd --rc-serve` via inline remote instantiation, bypassing CVE-2026-41179 fix
- CVE-2026-4998 Sinaptik AI PandasAI Chat Message code_executor.py CodeExecutor.execute code injection
- CVE-2026-49979 Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter
- CVE-2026-49978 DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content
- CVE-2026-49977 tarteaucitron.js: data-cookie attribute can be used to delete arbitrary cookies
- CVE-2026-49976 Snipe-IT: User Account Escalation via CSV Import
- CVE-2026-49975 Apache HTTP Server: mod_http2 denial of service
- CVE-2026-49973 Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings
- CVE-2026-49972 Laravel-Mediable < 7.0.0 File Upload RCE via Extension Bypass
- CVE-2026-49971 Laravel-Mediable < 7.0.0 Stored XSS via SVG File Upload
- CVE-2026-49970 Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()
- CVE-2026-4997 Sinaptik AI PandasAI sql_sanitizer.py is_sql_query_safe path traversal
- CVE-2026-49969 Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handling
- CVE-2026-4996 Sinaptik AI PandasAI pandasai-lancedb Extension lancedb.py get_relevant_docs_by_id sql injection
- CVE-2026-49959 Hermes WebUI < 0.51.311 RCE via Git Configuration Injection
- CVE-2026-49958 Hermes WebUI < 0.51.303 TOCTOU Race Condition via git_discard
- CVE-2026-49957 Hermes WebUI < 0.51.296 Workspace Boundary Bypass via api/workspace.py
- CVE-2026-49956 Hermes WebUI < 0.51.269 Profile Isolation Bypass via sessions search
- CVE-2026-49955 Hermes WebUI < 0.51.270 Resource Exhaustion via passkey/options
- CVE-2026-49954 Discuz! X5.0 Local File Inclusion via enable_disable.php Plugin Directory
- CVE-2026-49953 Discuz! X5.0 CAPTCHA Bypass via Predictable Character Set
- CVE-2026-49952 Discuz! X5.0 Authentication Bypass via dbbak.php Encryption Oracle
- CVE-2026-49950 Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool
- CVE-2026-4995 wandb OpenUI Window Message Event index.html cross site scripting
- CVE-2026-49949 CodexBar < 0.33.0 Credential Leakage via HTTP Redirect
- CVE-2026-49948 Mem0 0.2.8 Missing Authorization via POST /configure Endpoint
- CVE-2026-49943 Memory corruption in BIRD
- CVE-2026-49942 Net::CIDR::Set versions through 0.20 for Perl did not validate network masks
- CVE-2026-49941 Net::CIDR::Set versions through 0.20 for Perl did not validate IP addresses
- CVE-2026-49940 Net::CIDR::Set versions through 0.20 for Perl accept non-ASCII IP addresses and netmasks
- CVE-2026-4994 wandb OpenUI APIStatusError server.py generic_exception_handler information exposure
- CVE-2026-49938 Missing authorization in FortiPortal
- CVE-2026-49937 Memory corruption in Android
- CVE-2026-49933 Memory corruption in Android
- CVE-2026-49932 Memory corruption in Android
- CVE-2026-4993 wandb OpenUI config.py hard-coded credentials
- CVE-2026-49927 Integer overflow in Android
- CVE-2026-49921 Memory corruption in Android
- CVE-2026-4992 wandb OpenUI HTMLAnnotator server.py get_share HTML injection
- CVE-2026-49919 Integer overflow in Android
- CVE-2026-49918 Integer overflow in Android
- CVE-2026-4991 QDOCS Smart School Management System Admission Enquiry enquiry cross site scripting
- CVE-2026-4990 chatwoot Signup Endpoint login improper authorization
- CVE-2026-49895 Memory corruption in Android
- CVE-2026-4989 Server-side request forgery in Server