Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 603 of 1013.
- CVE-2026-47372 Crypt::SaltedHash versions through 0.09 for Perl generate insecure random values for salts
- CVE-2026-47370 Command injection in EFG
- CVE-2026-4737 Use-After-Free Vulnerability in No-Chicken/Echo-Mate
- CVE-2026-47369 Privilege escalation in EFG
- CVE-2026-47368 Path traversal in EFG
- CVE-2026-47367 Command injection in UID Enterprise Agent
- CVE-2026-47366 Privilege escalation in phpBB
- CVE-2026-47365 Command injection in WordPress-Toolkit
- CVE-2026-47364 Information disclosure in Android App
- CVE-2026-47363 Missing authorization in Android App
- CVE-2026-47362 Information disclosure in Android App
- CVE-2026-47361 Missing authorization in Android App
- CVE-2026-47360 Apache HTTP Server: mod_session: Session cookie not removed during internal redirect
- CVE-2026-4736 Math Issue in No-Chicken/Echo-Mate
- CVE-2026-47359 Apache CloudStack: OS Command Injection due to unsanitized mount command
- CVE-2026-47358 Server-side request forgery in Terrascan
- CVE-2026-47357 Server-side request forgery in Terrascan
- CVE-2026-47356 Server-side request forgery in Terrascan
- CVE-2026-47352 TYPO3 CMS - Broken Access Control in Backend API
- CVE-2026-47351 TYPO3 CMS - Broken Access Control in Clipboard
- CVE-2026-47350 TYPO3 CMS - Broken Access Control in DataHandler
- CVE-2026-4735 A stack overflow and DoS vulnerability in DTStack/chunjun
- CVE-2026-47349 TYPO3 CMS - Broken Access Control in Recycler
- CVE-2026-47348 TYPO3 CMS - Cross-Site Scripting in Indexed Search
- CVE-2026-47347 TYPO3 CMS - Open Redirect in Core Utilities
- CVE-2026-47346 TYPO3 CMS - Broken Access Control in Form Framework
- CVE-2026-47345 TYPO3 HTML Sanitizer allows Cross-Site Scripting
- CVE-2026-47344 TYPO3 HTML Sanitizer allows Cross-Site Scripting
- CVE-2026-47343 TYPO3 CMS - Destructive Actions on File Mount Folders
- CVE-2026-47342 Apache OFBiz: Privilege Escalation via updateOrRemove Authorization Bypass
- CVE-2026-47341 Apache APISIX: Session replay issue in hmac-auth
- CVE-2026-47340 Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.
- CVE-2026-4734 Heap Buffer Overflow in yoyofr/modizer
- CVE-2026-47339 Apache APISIX: authz-casdoor incorrect session sharing
- CVE-2026-47337 NULL pointer dereference in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation
- CVE-2026-47336 Use of uninitialized value in Ubuntu Linux AppArmor IPv4/IPv6 socket mediation rules
- CVE-2026-47335 NULL pointer dereference in Ubuntu Linux AppArmor notification handling
- CVE-2026-47334 Deadlock or kernel panic in Ubuntu Linux AppArmor notification handling
- CVE-2026-47333 Out-of-bounds read in Ubuntu Linux AppArmor notification handling
- CVE-2026-47332 Out-of-bounds read in Ubuntu Linux AppArmor notification handling
- CVE-2026-47331 Use-after-free in Ubuntu Linux AppArmor notification handling
- CVE-2026-47330 Use of uninitialized value in Ubuntu Linux AppArmor notification handling
- CVE-2026-4733 Information disclosure in ixray-1.6-stcop
- CVE-2026-47329 Incorrect validation of field size in Ubuntu Linux AppArmor notification responses
- CVE-2026-47328 Invalid pointer deallocation in Ubuntu Linux AppArmor notification handling
- CVE-2026-47327 NULL pointer dereference in Ubuntu Linux AppArmor notification handling
- CVE-2026-47326 Memory leak in Ubuntu Linux AppArmor large notification response allocation
- CVE-2026-47325 Weak password policy in ProjectsAndPrograms school-management-system
- CVE-2026-47324 Stored XSS in Multiple Points in ProjectsAndPrograms school-management-system
- CVE-2026-47323 Apache Camel: Camel-CXF Message Header Injection via Missing Inbound Filtering
- CVE-2026-47321 Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate
- CVE-2026-47320 Memory corruption in rlottie
- CVE-2026-4732 Out-of-bounds Read Overflow in tildearrow/furnace
- CVE-2026-47319 Denial of service in rlottie
- CVE-2026-47318 Memory corruption in rlottie
- CVE-2026-47317 Denial of service in Escargot
- CVE-2026-47316 Other in Escargot
- CVE-2026-47315 Other in Escargot
- CVE-2026-47314 Memory corruption in Escargot
- CVE-2026-47313 Denial of service in Escargot
- CVE-2026-47312 Memory corruption in Escargot
- CVE-2026-47311 Memory corruption in Escargot
- CVE-2026-47310 Use after free in Escargot
- CVE-2026-4731 An Integer Overflow Vulnerability in artraweditor/ART
- CVE-2026-47309 Denial of service in Escargot
- CVE-2026-47308 Null dereference in Walrus
- CVE-2026-47307 Null dereference in Walrus
- CVE-2026-47306 Denial of service in rlottie
- CVE-2026-47305 Visual Studio Remote Code Execution Vulnerability
- CVE-2026-47304 .NET Security Feature Bypass Vulnerability
- CVE-2026-47303 ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-47302 .NET Denial of Service Vulnerability
- CVE-2026-47301 Configuration Manager Elevation of Privilege Vulnerability
- CVE-2026-47300 ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-4730 Cross-site scripting in Charts Ninja: Create Beautiful Graphs & Charts and Easily Add Them to Your Website
- CVE-2026-47299 Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2026-47298 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-47297 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2026-47296 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-47295 Microsoft SQL Server Elevation of Privilege Vulnerability
- CVE-2026-47294 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-47293 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2026-47292 Visual Studio Code MSSQL Extension Remote Code Execution Vulnerability
- CVE-2026-47291 HTTP.sys Remote Code Execution Vulnerability
- CVE-2026-47290 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-4729 Memory safety bugs fixed in Firefox 149 and Thunderbird 149
- CVE-2026-47289 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-47288 Windows Kerberos Key Distribution Center (KDC) Remote Code Execution
- CVE-2026-47287 Visual Studio Code Tampering Vulnerability
- CVE-2026-47285 Visual Studio Code Information Disclosure Vulnerability
- CVE-2026-47284 Visual Studio Code Information Disclosure Vulnerability
- CVE-2026-47282 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability
- CVE-2026-47281 Visual Studio Code Elevation of Privilege Vulnerability
- CVE-2026-47280 Azure Resource Manager Elevation of Privilege Vulnerability
- CVE-2026-4728 Spoofing issue in the Privacy: Anti-Tracking component
- CVE-2026-47279 NocoDB: Hidden LTAR Column Exposure in Public Shared-View Relation Endpoints
- CVE-2026-47277 Runtipi: Unauthenticated arbitrary file read through app-store logo symlinks
- CVE-2026-47276 NULL Pointer Dereference in REST API properties_parse via Malformed user_properties
- CVE-2026-47275 nanomq NULL Pointer Dereference in MQTTv5 Client CONNECT Decoder Leading to Remote DoS
- CVE-2026-47274 pam_usb: Uncontrolled search path in pam_usb tools allows privilege escalation via PATH manipulation