Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 654 of 1013.
- CVE-2026-42091 goshs has Cross-Origin Arbitrary File Write via Missing CSRF on PUT and Wildcard CORS
- CVE-2026-42090 Notesnook: RCE via stored XSS in note export rendering
- CVE-2026-4209 D-Link DNS-1550-04 account_mgr.cgi cgi_chg_admin_pw command injection
- CVE-2026-42089 yeoman-environment Vulnerable to Arbitrary Package Installation without User Confirmation
- CVE-2026-42088 OpenC3 COSMOS: Administrative Actions via the Script Runner Tool
- CVE-2026-42087 OpenC3 COSMOS: SQL Injection in QuestDB Time-Series Data Base
- CVE-2026-42086 OpenC3 COSMOS: Self-XSS in the Command Sender
- CVE-2026-42085 OpenC3 COSMOS: Arbitrary write to plugins directory via path-traversed config filenames
- CVE-2026-42084 OpenC3 COSMOS: Hijacked session token can be used to reset password for persistence
- CVE-2026-42083 Free5GC PCF: Missing authentication middleware in Npcf_SMPolicyControl allows access to SM policy handlers and disclosure of subscriber SUPI
- CVE-2026-42082 free5GC: Missing Concurrent NAS SMC Validation During NGAP Handover
- CVE-2026-42081 free5GC: UE Security Capability bypass on NGAP PathSwitchRequest
- CVE-2026-42080 PPTAgent: Arbitrary File Write via `save_generated_slides`
- CVE-2026-4208 Authentication Bypass in extension "E-Mail MFA Provider" (mfa_email)
- CVE-2026-42079 PPTAgent: Arbitrary Code Execution via Python eval() of LLM-Generated Code with Builtins in Scope
- CVE-2026-42078 PPTAgent: Arbitrary File Write + Directory Creation via markdown_table_to_image
- CVE-2026-42077 Evolver: Prototype Pollution via `Object.assign()` in mailbox store operations
- CVE-2026-42076 Evolver: Command Injection via `execSync` in `_extractLLM()` function allows Remote Code Execution
- CVE-2026-42075 Evolver: Path Traversal via `--out` flag in `fetch` command allows Arbitrary File Write
- CVE-2026-42074 OpenClaude: Sandbox Bypass via Model-Controlled `dangerouslyDisableSandbox` Input
- CVE-2026-42073 OpenClaude's MCP OAuth Callback: State Check Bypass via error Param Leads to DoS
- CVE-2026-42072 Nornicdb: Improper Network Binding in NornicDB Bolt Server allows unauthorized remote access
- CVE-2026-42071 MantisBT: Private Bugnote Attachment Content Leak via REST API
- CVE-2026-42070 MantisBT: Authorization Bypass in Bugnote Editing via Issue Update API
- CVE-2026-4207 D-Link DNS-1550-04 system_mgr.cgi cgi_ntp_time command injection
- CVE-2026-42069 Kirby: Read access to site, user and role information is not gated by permissions
- CVE-2026-42063 iControl SOAP vulnerability
- CVE-2026-42062 Command injection in WRC-BE65QSD-B
- CVE-2026-42061 Privilege escalation in Acronis DeviceLock DLP
- CVE-2026-4206 D-Link DNS-1550-04 dsk_mgr.cgi ScanDisk_run_e2fsck command injection
- CVE-2026-42058 BIG-IP iControl REST vulnerability
- CVE-2026-42057 Memory corruption in vtk
- CVE-2026-42055 NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
- CVE-2026-42052 beets is Vulnerable to XSS
- CVE-2026-42051 Kirby: System API endpoint leaks license data and installed version to authenticated users
- CVE-2026-42050 ImageMagick: Stack buffer overflow in XTileImage
- CVE-2026-4205 D-Link DNS-1550-04 app_mgr.cgi FTP_Server_BlockIP_Del command injection
- CVE-2026-42049 jadx: RCE Via Groovy Code Injection in Gradle Export
- CVE-2026-42048 Langflow: Path Traversal in Langflow Knowledge Bases API
- CVE-2026-42047 Inngest TypeScript SDK exposes environment variables via serve() handler on unhandled HTTP methods
- CVE-2026-42046 libcaca: Heap OOB write in canvas import functions caused by int overflow
- CVE-2026-42045 LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)
- CVE-2026-42044 Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`
- CVE-2026-42043 Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
- CVE-2026-42042 Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion
- CVE-2026-42041 Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy
- CVE-2026-42040 Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams
- CVE-2026-4204 D-Link DNS-1550-04 gui_mgr.cgi cgi_mycloud_auto_downlaod command injection
- CVE-2026-42039 Axios: unbounded recursion in toFormData causes DoS via deeply nested request data
- CVE-2026-42038 Axios: no_proxy bypass via IP alias allows SSRF
- CVE-2026-42037 Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream
- CVE-2026-42036 Axios: HTTP adapter streamed responses bypass maxContentLength
- CVE-2026-42035 Axios: Header Injection via Prototype Pollution
- CVE-2026-42034 Axios: HTTP adapter streamed uploads bypass maxBodyLength when maxRedirects: 0
- CVE-2026-42033 Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking
- CVE-2026-42032 CKAN: Unauthenticated Authorization Bypass in `datastore_search_sql`
- CVE-2026-42031 CKAN: Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`
- CVE-2026-42030 MapServer: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in OpenLayers viewer
- CVE-2026-4203 D-Link DNS-1550-04 network_mgr.cgi cgi_dhcpd command injection
- CVE-2026-42028 novaGallery: Unauthenticated Path Traversal in Album and Cached Image Routes Allows Reading Images Outside Gallery Root
- CVE-2026-42027 Apache OpenNLP: Arbitrary Class Instantiation via Model Manifest in ExtensionLoader
- CVE-2026-42026 Memory corruption in Totolink
- CVE-2026-42025 Memory corruption in Totolink
- CVE-2026-42024 Memory corruption in Totolink
- CVE-2026-42023 Memory corruption in Totolink
- CVE-2026-42022 Memory corruption in Totolink
- CVE-2026-42021 Memory corruption in Totolink
- CVE-2026-42020 Memory corruption in Totolink
- CVE-2026-4202 Broken Access Control in extension "Redirect Tab"
- CVE-2026-42019 Memory corruption in Totolink
- CVE-2026-42018 JFrog Artifactory Improper Authentication
- CVE-2026-42017 Privilege escalation via JFrog Worker event token exposure
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization
- CVE-2026-42015 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling
- CVE-2026-42014 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
- CVE-2026-42013 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name
- CVE-2026-42012 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans
- CVE-2026-42011 Gnutls: gnutls: security bypass due to incorrect name constraint handling
- CVE-2026-42010 Gnutls: gnutls: authentication bypass via nul character in username
- CVE-2026-4201 glowxq glowxq-oj SysFileController.java upload unrestricted upload
- CVE-2026-42009 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability
- CVE-2026-42008 Auth bypass in OX Dovecot CE
- CVE-2026-42007 Use after free in OX Dovecot CE
- CVE-2026-42006 Denial of service in OX Dovecot Pro
- CVE-2026-42005 Insufficient input validation of internal web server
- CVE-2026-42004 EDNS options smuggling
- CVE-2026-42002 Concurrency and locking defects in GSS-TSIG
- CVE-2026-42001 Insufficient Validation of Autoprimary SOA Queries
- CVE-2026-42000 Insufficient Validation of Names During AXFR
- CVE-2026-4200 glowxq glowxq-oj ProblemCaseController.java uploadTestcaseZipUrl server-side request forgery
- CVE-2026-41999 Incorrect Behaviour of Views with TCP PROXY Requests
- CVE-2026-41993 Security feature bypass in SafePortAgent
- CVE-2026-41992 Global Buffer Overflow in GNU gzip
- CVE-2026-41991 Predictable Temporary File in GNU gzip
- CVE-2026-41990 Memory corruption in Libgcrypt
- CVE-2026-4199 bazinga012 mcp_code_executor index.ts installDependencies command injection
- CVE-2026-41989 Memory corruption in Libgcrypt
- CVE-2026-41988 Other in uuid
- CVE-2026-41987 Missing authorization in EMUI
- CVE-2026-41986 Business logic in HarmonyOS