Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 594 of 1013.
- CVE-2026-48339 Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48338 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48337 Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2026-48336 Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2026-48335 Illustrator | Out-of-bounds Write (CWE-787)
- CVE-2026-48334 Illustrator | Improper Input Validation (CWE-20)
- CVE-2026-48333 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-48332 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48331 Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48330 SQL injection in Adobe Campaign Classic
- CVE-2026-4833 Orc discount Markdown markdown.c compile recursion
- CVE-2026-48329 ColdFusion | Insufficient Session Expiration (CWE-613)
- CVE-2026-48328 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48327 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-48326 SQL injection in Adobe Campaign Classic
- CVE-2026-48325 ColdFusion | Missing Authentication for Critical Function (CWE-306)
- CVE-2026-48324 ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
- CVE-2026-48323 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
- CVE-2026-48322 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-48321 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-48320 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-4832 Hardcoded credentials in Easergy MiCOM P14x
- CVE-2026-48319 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48318 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48317 Code injection in Adobe Campaign Classic
- CVE-2026-48316 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48315 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48314 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48313 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-48312 CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-48311 Bridge | Out-of-bounds Write (CWE-787)
- CVE-2026-48310 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-4831 kalcaddle kodbox Password-protected Share auth.class.php can improper authentication
- CVE-2026-48309 Audition | Out-of-bounds Write (CWE-787)
- CVE-2026-48308 Premiere Pro | Improper Input Validation (CWE-20)
- CVE-2026-48307 ColdFusion | Cross-site Scripting (Reflected XSS) (CWE-79)
- CVE-2026-48306 Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2026-48305 Substance3D - Sampler | Out-of-bounds Write (CWE-787)
- CVE-2026-48304 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48303 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-48302 CAI Content Credentials | Improper Input Validation (CWE-20)
- CVE-2026-48301 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48300 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-4830 kalcaddle kodbox Public Share userShare.class.php add privilege escalation
- CVE-2026-48299 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48298 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2026-48297 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48296 CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)
- CVE-2026-48295 CAI Content Credentials | Insufficiently Protected Credentials (CWE-522)
- CVE-2026-48294 Cross-site scripting in Adobe Acrobat PDF Extension (Chrome)
- CVE-2026-48293 InDesign Desktop | Out-of-bounds Write (CWE-787)
- CVE-2026-48292 Format Plugins | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48291 Format Plugins | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48290 CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-4829 Auth bypass in Server
- CVE-2026-48289 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-48288 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-48287 CAI Content Credentials | Untrusted Search Path (CWE-426)
- CVE-2026-48286 Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
- CVE-2026-48285 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48284 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48283 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2026-48282 Adobe ColdFusion Path Traversal
- CVE-2026-48281 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48280 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-4828 Auth bypass in Server
- CVE-2026-48277 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-48276 ColdFusion | Unrestricted Upload of File with Dangerous Type (CWE-434)
- CVE-2026-48275 Illustrator | Untrusted Search Path (CWE-426)
- CVE-2026-48274 After Effects | Out-of-bounds Write (CWE-787)
- CVE-2026-48273 ColdFusion | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') (CWE-95)
- CVE-2026-48272 Creative Cloud Desktop | Uncontrolled Search Path Element (CWE-427)
- CVE-2026-48271 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48270 Premiere Pro | Out-of-bounds Write (CWE-787)
- CVE-2026-4827 Insufficient Entropy vulnerability on Multiple Products
- CVE-2026-48269 Premiere Pro | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-48268 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48267 DNG SDK | NULL Pointer Dereference (CWE-476)
- CVE-2026-48266 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48265 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48264 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48263 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-48262 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48261 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48260 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-4826 SourceCodester Sales and Inventory System HTTP GET Parameter update_stock.php sql injection
- CVE-2026-48259 Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-48258 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48257 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48256 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48255 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48254 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48253 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48252 Adobe Experience Manager | Missing Authentication for Critical Function (CWE-306)
- CVE-2026-48251 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-48250 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-4825 SourceCodester Sales and Inventory System HTTP GET Parameter update_sales.php sql injection
- CVE-2026-48249 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in rm/incs/mobile_login.inc.php
- CVE-2026-48248 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/login.inc.php
- CVE-2026-48247 Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in incs/functions.inc.php