Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 650 of 1013.
- CVE-2026-42523 Jenkins GitHub Plugin has an XSS vulnerability
- CVE-2026-42522 Jenkins GitHub Branch Source Plugin: Missing permissions check allows attackers to perform a connection test
- CVE-2026-42521 Jenkins Matrix Authorization Strategy Plugin: Unsafe deserialization allows invocation of parameterless constructors
- CVE-2026-42520 Jenkins Credentials Binding Plugin has a path traversal vulnerability
- CVE-2026-4252 Tenda AC8 IPv6 check_is_ipv6 ip address for authentication
- CVE-2026-42519 Jenkins Script Security Plugin: Missing permission checks allow enumeration of pending and approved classpaths
- CVE-2026-42518 Information Disclosure Vulnerability in e-Sushrut HMIS
- CVE-2026-42517 Cryptographic Failure Vulnerability in e-Sushrut HMIS
- CVE-2026-42516 Broken Access Control Vulnerability in e-Sushrut HMIS
- CVE-2026-42515 Insecure Direct Object Reference (IDOR) Vulnerability in e-Sushrut HMIS
- CVE-2026-42514 Sensitive Data Exposure Vulnerability in e-Sushrut HMIS
- CVE-2026-42513 Authentication Bypass Vulnerability in e-Sushrut HMIS
- CVE-2026-42512 Remotely triggerable out-of-bounds heap write in dhclient
- CVE-2026-42511 Remote code execution via malicious DHCP options
- CVE-2026-42510 OpenStack Ironic is Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
- CVE-2026-4251 CityData CityChat ai.citydata.citychat credentials.json credentials storage
- CVE-2026-42509 Apache Wicket: crafted strings can break out of the JavaScript sequence
- CVE-2026-42508 Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
- CVE-2026-42507 Arbitrary inputs are included in errors without any escaping in net/textproto
- CVE-2026-42506 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/html
- CVE-2026-42505 Invoking Encrypted Client Hello privacy leak in crypto/tls
- CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime
- CVE-2026-42503 Accidental binding to INADDR_ANY might lead to RCE in golang.org/x/tools/gopls
- CVE-2026-42502 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
- CVE-2026-42501 Malicious module proxy can bypass checksum database in cmd/go
- CVE-2026-42500 Panic when reading out of bound palette index in golang.org/x/image/bmp
- CVE-2026-4250 Hardcoded credentials in Albert Health
- CVE-2026-42499 Quadratic string concatenation in consumePhrase in net/mail
- CVE-2026-42498 Apache Tomcat: WebSocket authentication header exposure
- CVE-2026-42497 Path traversal in Archive::Tar
- CVE-2026-42496 Path traversal in Archive::Tar
- CVE-2026-42495 buffer overruns in libfsimage iso9660 handling
- CVE-2026-42494 buffer overruns in libfsimage iso9660 handling
- CVE-2026-42493 x86 shadow paging is deprecated
- CVE-2026-42492 vIRQ event channel binding may break Xenstore
- CVE-2026-42490 domctl lock open to abuse
- CVE-2026-4249 Denial of service in WSO2 API Control Plane
- CVE-2026-42489 domctl lock open to abuse
- CVE-2026-42488 x86: mismatched mapcache metadata
- CVE-2026-42487 x86 HVM I/O port list traversal
- CVE-2026-42486 Multiple RBAC issues in XAPI
- CVE-2026-42485 AGL agl-service-can-low-level contains a stack buffer overflow in the uds-c library.
- CVE-2026-42484 Memory corruption in hashcat:hashcat
- CVE-2026-42483 Memory corruption in hashcat:hashcat
- CVE-2026-42482 Memory corruption in hashcat:hashcat
- CVE-2026-42481 Memory corruption in opencascade:open cascade technology
- CVE-2026-42480 Memory corruption in opencascade:open cascade technology
- CVE-2026-4248 Information disclosure in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
- CVE-2026-42479 Memory corruption in opencascade:open cascade technology
- CVE-2026-42478 Null dereference in opencascade:open cascade technology
- CVE-2026-42477 Memory corruption in opencascade:open cascade technology
- CVE-2026-42476 Memory corruption in opencascade:open cascade technology
- CVE-2026-42475 MixPHP Framework has an SQL injection vulnerability
- CVE-2026-42474 MixPHP Framework has an SQL injection vulnerability via crafted `data` array
- CVE-2026-42473 Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.
- CVE-2026-42472 Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.
- CVE-2026-42471 Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.
- CVE-2026-4247 TCP: remotely exploitable DoS vector (mbuf leak)
- CVE-2026-42469 Memory corruption in openvehicles:open vehicle monitoring system firmware
- CVE-2026-42468 Memory corruption in openvehicles:open vehicle monitoring system firmware
- CVE-2026-42467 An issue was discovered in Open-SAE-J1939 thru commit b6caf884df46435e539b1ecbf92b6c29b345bdfe (2025-11-30) in SAE_J1939_Read_Binary_Data_Tr
- CVE-2026-42463 SQLBot: Unauthorized Access Vulnerability
- CVE-2026-42462 Fedify has an LD-Signature Bypass via JSON-LD Named-Graph Restructuring
- CVE-2026-42461 Arcane Vulnerable to Unauthenticated Disclosure of Custom Compose Template Content (incl. `.env` secrets)
- CVE-2026-4246 ElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter
- CVE-2026-42459 Free5GC UDM has Improper Input Validation and Generation of Error Messages Containing Sensitive Information
- CVE-2026-42458 Magento LTS: Reflected XSS - Import -> Data Flow (profiles)
- CVE-2026-42457 vCluster Platform: Stored XSS can lead to privilege escalation
- CVE-2026-42456 AnythingLLM: Cross-User TTS Audio Disclosure via Chat ID (IDOR)
- CVE-2026-42455 LinkWarden: Stored XSS via Client-Side Archive Upload (Unsanitized HTML served from same origin)
- CVE-2026-42454 Termix: OS Command Injection in Docker Container Management Endpoints
- CVE-2026-42453 Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass
- CVE-2026-42452 Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP
- CVE-2026-42451 Grimmory: Stored XSS via Malicious EPUB Enables Session Token Theft
- CVE-2026-42450 OpenColorIO vulnerable to stack buffer overflow via unbounded `sscanf %s` in Spi3D (.spi3d) LUT parser
- CVE-2026-4245 Post Duplicator <= 3.0.11 - Authorization Bypass to Authenticated (Contributor+) Post Duplication
- CVE-2026-42449 n8n-MCP: IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders
- CVE-2026-42448 wormhole receive, with --output pointing at an existing directory can be path-traversed
- CVE-2026-42447 jadx: HTML Injection in Summary panel
- CVE-2026-42446 NanaZip: Stack out-of-bounds read in NanaZip ZealFS bitmap parser
- CVE-2026-42445 NanaZip: Uncontrolled recursion in NanaZip UFS directory traversal causes stack exhaustion
- CVE-2026-42444 NanaZip: Unbounded resource consumption in NanaZip littlefs parser via attacker-controlled BlockCount
- CVE-2026-42443 NanaZip: Integer divide-by-zero in NanaZip UFS inode offset calculation
- CVE-2026-42442 NanaZip: Null-pointer dereference in NanaZip UFS parser when root inode is a symlink
- CVE-2026-42440 Apache OpenNLP: OOM DoS via Unbounded Array Allocation in AbstractModelReader
- CVE-2026-4244 Missing authorization in Post Duplicator
- CVE-2026-42439 OpenClaw < 2026.4.10 - SSRF Policy Bypass in Browser Tabs Action Routes
- CVE-2026-42438 OpenClaw 2026.4.9 < 2026.4.10 - Sender Policy Bypass in Host Media Attachment Reads
- CVE-2026-42437 OpenClaw 2026.4.9 < 2026.4.10 - Denial of Service via Oversized WebSocket Frames in Voice-call Realtime Path
- CVE-2026-42436 OpenClaw < 2026.4.14 - Internal Page Content Exposure via Browser Snapshot and Screenshot Routes
- CVE-2026-42435 OpenClaw 2026.2.22 < 2026.4.12 - Shell-Wrapper Detection Bypass via Environment Variable Assignment Injection
- CVE-2026-42434 OpenClaw 2026.4.5 < 2026.4.10 - Sandbox Escape via host Parameter Override in Exec Routing
- CVE-2026-42433 OpenClaw < 2026.4.10 - Unauthorized Matrix Profile Config Persistence Access via operator.write Message Tools
- CVE-2026-42432 OpenClaw < 2026.4.8 - Command Escalation via Node Pairing Reconnect Bypass
- CVE-2026-42431 OpenClaw < 2026.4.8 - Persistent Profile Mutation via node.invoke(browser.proxy) Bypass
- CVE-2026-42430 OpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling
- CVE-2026-4243 La Nacion App app.lanacion.activity BuildConfig.java credentials storage
- CVE-2026-42429 OpenClaw < 2026.4.8 - Privilege Escalation via Gateway Plugin HTTP Authentication
- CVE-2026-42428 OpenClaw < 2026.4.8 - Missing Integrity Verification in Package Downloads
- CVE-2026-42427 OpenClaw < 2026.4.8 - Remote Code Execution via Build Tool Environment Variable Injection