Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 622 of 1013.
- CVE-2026-45472 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-45471 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-4547 mickasmt next-saas-stripe-starter Checkout generate-user-stripe.ts generateUserStripe logic error
- CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-45468 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45467 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45466 Microsoft Word Information Disclosure Vulnerability
- CVE-2026-45465 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45464 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45463 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-45462 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45461 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-45460 Microsoft Office Information Disclosure Vulnerability
- CVE-2026-4546 Flos Freeware Notepad2 TextShaping.dll uncontrolled search path
- CVE-2026-45459 Microsoft Excel Security Feature Bypass Vulnerability
- CVE-2026-45458 Microsoft Outlook and Word Remote Code Execution Vulnerability
- CVE-2026-45457 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-45456 Microsoft Outlook and Word Remote Code Execution Vulnerability
- CVE-2026-45455 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-45454 Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2026-45453 Microsoft SharePoint Server Spoofing Vulnerability
- CVE-2026-45452 Unitronics - CWE-134 Use of Externally-Controlled format string
- CVE-2026-45451 Unitronics - CWE-287: Improper Authentication
- CVE-2026-45450 Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CVE-2026-4545 Flos Freeware Notepad2 PROPSYS.dll uncontrolled search path
- CVE-2026-45449 Unitronics - CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
- CVE-2026-45448 ntopng - CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
- CVE-2026-45447 Heap Use-After-Free in the PKCS7_verify() Function
- CVE-2026-45446 Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
- CVE-2026-45445 AES-OCB IV Ignored on EVP_Cipher() Path
- CVE-2026-45444 WordPress Gift Cards For WooCommerce Pro plugin <= 4.2.6 - Arbitrary File Upload vulnerability
- CVE-2026-45443 Missing authorization in PDF for Elementor Forms + Drag And Drop Template Builder
- CVE-2026-45442 WordPress Presto Player plugin <= 4.1.3 - Broken Access Control vulnerability
- CVE-2026-45441 WordPress WpEvently plugin <= 5.3.3 - Other Vulnerability Type vulnerability
- CVE-2026-45440 WordPress WP Ultimate CSV Importer plugin <= 9.2 - SQL Injection vulnerability
- CVE-2026-4544 Wavlink WL-WN578W2 POST Request login.cgi cross site scripting
- CVE-2026-45439 WordPress Realtyna Organic IDX plugin plugin <= 5.1.0 - SQL Injection vulnerability
- CVE-2026-45438 WordPress Smart Coupons for WooCommerce plugin < 2.3.0 - Broken Access Control vulnerability
- CVE-2026-45437 WordPress Product Filter Widget for Elementor plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-45436 WordPress WPBakery Page Builder plugin <= 8.7.2 - Broken Access Control vulnerability
- CVE-2026-45435 WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-45434 Apache OFBiz: Authentication Bypass via Password-Change Logic Flaw Leading to RCE
- CVE-2026-45433 Hardcoded Cryptographic Key Vulnerability in GX Earth ONT Models
- CVE-2026-45432 Cleartext Transmission of Credentials Vulnerability in GX Earth ONT Models
- CVE-2026-45431 Command Injection Vulnerability in GX Earth ONT Models
- CVE-2026-45430 Cross-site request forgery in backdrop-contrib/salesforce
- CVE-2026-4543 Wavlink WL-WN578W2 POST Request firewall.cgi command injection
- CVE-2026-45426 Apache Airflow: Log server JWT authorization bypass via Python lstrip() character stripping allows cross-Dag log access
- CVE-2026-4542 SSCMS layerImage Endpoint LayerImageController.Submit.cs path traversal
- CVE-2026-45419 DataEase: Arbitrary File Write Vulnerability
- CVE-2026-45418 ClipBucket: Blind SQL Injection in subtitle_edit.php
- CVE-2026-45417 DataEase: SQL injection vulnerability
- CVE-2026-45416 Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes
- CVE-2026-45415 Decidim: CSV census record endpoints improper authorization
- CVE-2026-45414 Decidim: JWT-backed authentication can be replayed across organizations
- CVE-2026-45413 MaxKB: Unsalted MD5 Password Hashing
- CVE-2026-45412 MaxKB: Unauthenticated SSRF via Workflow Template Import
- CVE-2026-45411 vm2: Sandbox Breakout Using Async Generator
- CVE-2026-45410 Time-based user enumeration in TREK authentication endpoint
- CVE-2026-4541 janmojzis tinyssh Ed25519 Signature crypto_sign_ed25519_tinyssh.c signature verification
- CVE-2026-45409 Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix
- CVE-2026-45408 Dokku: OS Command Injection via App Name in Git Pre-Receive Hook
- CVE-2026-45407 Dokku: Git Credentials in .netrc Stored World-Readable Due to Premature touch
- CVE-2026-45406 Dokku: Host RCE via Maliciously Named OpenResty Include Files Injected Through eval
- CVE-2026-45405 Dokku: Arbitrary File Write via Tar Symlink Traversal in git:from-archive and certs:add
- CVE-2026-45404 OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access
- CVE-2026-45403 AnythingLLM: filesystem-copy-file follows nested symlinks and copies files from outside the allowed directory
- CVE-2026-45402 Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge-Base Attach Endpoints
- CVE-2026-45401 Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints
- CVE-2026-45400 Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`
- CVE-2026-4540 projectworlds Online Notes Sharing System Parameters login.php sql injection
- CVE-2026-45399 Open WebUI: Low-privilege authenticated users can enumerate and stop global background tasks, causing system-wide chat disruption
- CVE-2026-45398 Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls
- CVE-2026-45397 Open WebUI: Unauthenticated RAG Configuration Disclosure
- CVE-2026-45396 Open WebUI: Mass Assignment via FeedbackForm extra=allow Allows Feedback User ID Spoofing and Evaluation Data Manipulation
- CVE-2026-45395 Open WebUI: Missing `workspace.tools` Authorization Check on Tool Update Endpoint Allows Privilege Escalation to Code Execution
- CVE-2026-45393 Local privilege escalation to SYSTEM in Cribl Edge for Windows
- CVE-2026-45392 DOM-based XSS in Cribl Stream
- CVE-2026-45391 Local privilege escalation in Cribl Edge for Linux
- CVE-2026-45390 In OCaml-tar before 3.4.0, a crafted archive with ../ path segments in its name allows escaping the current working directory.
- CVE-2026-4539 pygments archetype.py AdlLexer redos
- CVE-2026-45389 In OCaml-TLS before 2.1.0, the server implementation does insufficient checks of the certificate provided by the client (when doing client a
- CVE-2026-45388 In OCaml-TLS before 2.1.0, the client implementation does insufficient checks of the certificate provided by the server, which allows impers
- CVE-2026-45387 Open WebUI: Sharing models for others to use (read permission) also exposes model details (system prompt leakage)
- CVE-2026-45386 Open WebUI: An IDOR vulnerability exists in the pin_channel_message API endpoint
- CVE-2026-45385 Open WebUI: An IDOR vulnerability exists in the update_message_by_id API endpoint
- CVE-2026-45384 bit7z: Arbitrary File Overwrite via Symlink Attack on Predictable Temp File During Archive Update
- CVE-2026-45383 Memory corruption in libde265
- CVE-2026-45382 libde265 has a heap-buffer-overflow READ in decode_slice_unit_tiles via unvalidated PPS tile geometry
- CVE-2026-45381 Tautulli: Reflected XSS in `/search` endpoint
- CVE-2026-45380 bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`
- CVE-2026-4538 PyTorch pt2 Loading deserialization
- CVE-2026-45378 Decidim: Verification documents can be downloaded through reusable links
- CVE-2026-45377 Decidim: Private exports can be downloaded through reusable links
- CVE-2026-45376 Decidim: Admin user search allows SQL injection through similarity-based sorting
- CVE-2026-45375 SiYuan Bazaar marketplace renders unescaped package `name` and `version` metadata, allowing stored XSS and Electron code execution
- CVE-2026-45374 CodeWhale: task_create Insecure Defaults Enable RCE via Prompt Injection in Project Files
- CVE-2026-45373 CodeWhale: SSRF IPV6 bypass
- CVE-2026-45372 cpp-httplib: HTTP header value percent-decoding in server-side `parse_header` enables CRLF injection
- CVE-2026-45371 SiYuan: SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs