Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 634 of 1013.
- CVE-2026-44195 OPNsense: Authentication lockout bypass
- CVE-2026-44194 OPNsense: RCE on user managment
- CVE-2026-44193 OPNsense: RCE via XMLRPC endpoint using `opnsense.restore_config_section` method
- CVE-2026-44192 Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and data exfiltration via path traversal
- CVE-2026-44191 Command injection in Red Hat Ansible Automation Platform 2
- CVE-2026-44190 Command injection in Red Hat Ansible Automation Platform 2
- CVE-2026-44189 Command injection in Red Hat Ansible Automation Platform 2
- CVE-2026-44188 Auth bypass in Red Hat Ansible Automation Platform 2
- CVE-2026-44187 Information disclosure in Red Hat Ansible Automation Platform 2
- CVE-2026-44186 Apache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftp
- CVE-2026-44185 Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
- CVE-2026-44184 Cleanuparr: Reflective CORS combined with trusted-network auth allows cross-origin admin API reads
- CVE-2026-44183 Auth bypass in Cleanuparr
- CVE-2026-44182 Jupyter Enterprise Gateway Has Kubernetes Manifest Injection via Jinja2 Template Rendering
- CVE-2026-44181 Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection results in Remote Code Execution
- CVE-2026-44180 Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be Bypassed
- CVE-2026-4418 IBM Cloud Pak System HTML Injection
- CVE-2026-44179 XWiki Pro Macros: excerpt-include title and content injection executes code
- CVE-2026-44178 xrdp: Channel Data Forwarding Fixed-Size Buffer Overflow
- CVE-2026-44177 Kirby: Pre-authentication path traversal and PHP file inclusion during user lookup
- CVE-2026-44176 Kirby: `pages.access` permission is not checked during rendering of page drafts
- CVE-2026-44175 Kirby: Cross-site scripting (XSS) from list field content in the site frontend
- CVE-2026-44174 Kirby: Arbitrary Method Call via REST API search and collection query endpoints
- CVE-2026-44173 MariaDB: FILE privilege was not checked for subqueries in the FROM clause
- CVE-2026-44172 MariaDB: mysql_real_escape_string() incorrectly handled big5
- CVE-2026-44171 MariaDB: path traversal in mbstream
- CVE-2026-44170 MariaDB: Argument injection in CONNECT REST Xcurl on Windows via unsanitized URL
- CVE-2026-44169 MariaDB: Authorization bypass in role-based routine-level privilege check exposes stored routine definitions
- CVE-2026-44168 MariaDB: wsrep SST unsafe parameter handling on the donor side
- CVE-2026-44167 phpseclib: CVE-2024-27355 mitigation bypass — OID amplification DoS in ASN1::decodeOID()
- CVE-2026-44166 Pocketbase: Account pre-hijacking via OAuth2 unverfied->verified autolinking upgrade
- CVE-2026-44163 fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`
- CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
- CVE-2026-44161 Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
- CVE-2026-44160 Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
- CVE-2026-4416 GIGABYTE｜Performance Library - Insecure Deserialization
- CVE-2026-44159 Tyler Identity Local (TID-L) default administrative credentials
- CVE-2026-4415 GIGABYTE｜Gigabyte Control Center - Arbitrary File Write
- CVE-2026-4413 IBM Concert Software Cross-Site Scripting
- CVE-2026-44129 Server-side template injection
- CVE-2026-44128 Unauthenticated Remote Code Execution
- CVE-2026-44127 Local File Inclusion (LFI) and Arbitrary File Deletion
- CVE-2026-44126 Insecure deserialization
- CVE-2026-44125 Missing Authorization in GINAv2
- CVE-2026-44119 Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules
- CVE-2026-44118 OpenClaw < 2026.4.22 - Owner Context Spoofing via Bearer Token Header
- CVE-2026-44117 OpenClaw < 2026.4.20 - Server-Side Request Forgery in QQBot Direct Media Upload
- CVE-2026-44116 OpenClaw < 2026.4.22 - Server-Side Request Forgery in Zalo Photo URL Validation
- CVE-2026-44115 OpenClaw < 2026.4.22 - Shell Expansion Bypass in Unquoted Heredocs via Exec Allowlist
- CVE-2026-44114 OpenClaw < 2026.4.20 - Environment Variable Namespace Collision via Workspace dotenv
- CVE-2026-44113 OpenClaw < 2026.4.22 - Time-of-Check/Time-of-Use Race Condition in OpenShell FS Bridge
- CVE-2026-44112 OpenClaw < 2026.4.22 - Symlink Swap Race Condition in OpenShell FS Bridge Writes
- CVE-2026-44111 OpenClaw < 2026.4.15 - Arbitrary Markdown File Read via QMD memory_get
- CVE-2026-44110 OpenClaw < 2026.4.15 - Authorization Bypass in Matrix Room Control Commands via DM Pairing Store
- CVE-2026-44109 OpenClaw < 2026.4.15 - Authentication Bypass in Feishu Webhook and Card-Action Validation
- CVE-2026-44108 Firewall bypass during shutdown
- CVE-2026-44107 Exposed Reboot via Modbus
- CVE-2026-44106 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via customer website file
- CVE-2026-44105 Cleartext password in logs
- CVE-2026-44104 ControllerAgent does not perform validation of firmware
- CVE-2026-44103 JupiCore does not perform validation of firmware
- CVE-2026-44102 OCPP Firmware download is not properly locked
- CVE-2026-44101 OCPP reconfiguration vulnerability
- CVE-2026-44100 JupiCore charging point reconfiguration without auth
- CVE-2026-4410 IBM WebSphere Application Server and WebSphere Application Server Liberty are affected by a denial of service
- CVE-2026-44099 Local Privilege Escalation via pppd password injection
- CVE-2026-44098 OS Command Injection in OCPP Agent via charge_box_id
- CVE-2026-44097 File Upload vulnerability
- CVE-2026-44096 udhcpc Privilege Escalation
- CVE-2026-44095 Local Privilege Escalation via Network scripts
- CVE-2026-44094 Fallback to second RAUC slot with default credentials
- CVE-2026-44093 Local Privilege Escalation vulnerability in /etc/init.d/user-applications via user-application start script
- CVE-2026-44092 Missing input validation / stripping of CRLF characters in SystemConfigManager
- CVE-2026-44091 Creation of a new configuration by posting a malicious ID to MQTT
- CVE-2026-44090 Missing authentication for MQTT Broker
- CVE-2026-4409 Subscribe To Comments Reloaded <= 240119 - Improper Authorization to Unauthenticated Arbitrary Subscription Management
- CVE-2026-44089 Buffer Overflow in Totolink EX1200L router
- CVE-2026-44088 Remote Code Execution in SzafirHost
- CVE-2026-44087 Apache APISIX: Openid-connect plugin Identity Header Spoofing
- CVE-2026-44084 Access Code Forgery in Video Station leading to unauthorized media access
- CVE-2026-44083 QuMagie
- CVE-2026-4408 Samba: remote code execution in samr
- CVE-2026-44076 Shell injection via volume path
- CVE-2026-44075 Missing break in DSI OpenSession
- CVE-2026-44074 Bitwise OR of errno values
- CVE-2026-44073 seteuid failure ignored in auth modules
- CVE-2026-44072 system() after failed chdir()
- CVE-2026-44071 FORTIFY_SOURCE disabled
- CVE-2026-44070 Unbounded realloc in charset conversion
- CVE-2026-4407 Out-of-bounds array write in Xpdf 4.06 due to missing validation
- CVE-2026-44069 Integer underflow in volxlate
- CVE-2026-44068 EA path traversal via incomplete sanitization
- CVE-2026-44067 EA header parsing heap over-read
- CVE-2026-44066 Heap out-of-bounds reads in Spotlight RPC unmarshalling
- CVE-2026-44065 Off-by-two in papd lp_write()
- CVE-2026-44064 ASP session ID out-of-bounds access
- CVE-2026-44063 LDAP filter injection
- CVE-2026-44062 Missing o_len bounds check in pull_charset_flags()
- CVE-2026-44061 DES-ECB auth with timing side channel
- CVE-2026-44060 Integer underflow in dsi_writeinit() leads to denial of service