Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 656 of 1013.
- CVE-2026-41887 Flarum: Path traversal in LESS parser via theme color settings (incomplete fix for CVE-2023-27577)
- CVE-2026-41886 locize Client SDK: Cross-origin DOM XSS & Handler Hijack Through Missing e.origin Validation in InContext Editor
- CVE-2026-41885 Path traversal / URL injection via unsanitised lng/ns/projectId/version in i18next-locize-backend
- CVE-2026-41883 OmniFaces: EL injection via crafted resource name in wildcard CDN mapping
- CVE-2026-41882 Path traversal in IntelliJ IDEA
- CVE-2026-41880 OS Command Injection in R-SOFT DMS
- CVE-2026-4188 D-Link DIR-619L boa formSchedule stack-based overflow
- CVE-2026-41879 Weak password hashing in R-SOFT DMS
- CVE-2026-41878 Insecure Direct Object Reference in R-SOFT DMS
- CVE-2026-41877 Stored XSS in R-SOFT DMS
- CVE-2026-41876 OS Command Injection in R-SOFT DMS
- CVE-2026-41875 Cross-Site Request Forgery in admin panel of Quick.Cart
- CVE-2026-41874 Hard-coded admin credentials in Quick.Cart
- CVE-2026-41873 Pony Mail: Admin account takeover via request smuggling
- CVE-2026-41872 Weak cryptography in "Kura Sushi Official App" for Android
- CVE-2026-41871 Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)
- CVE-2026-41870 Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
- CVE-2026-4187 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication
- CVE-2026-41869 Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
- CVE-2026-41863 Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk
- CVE-2026-41862 Spring Statemachine's Kryo-based persistence backends deserialize persisted state-machine contexts without enforcing a class allowlist
- CVE-2026-41861 Arbitrary Root File Write via Path Traversal in BOSH agent
- CVE-2026-41860 Weak cryptography in BOSH
- CVE-2026-4186 UEditor JSONP Callback controller.php cross site scripting
- CVE-2026-41859 Weak cryptography in BOSH
- CVE-2026-41858 Weak cryptography in windows-utilities-release
- CVE-2026-41857 BOSH CLI Shell Injection
- CVE-2026-41856 Spring GraphQL Annotation Detection Vulnerability
- CVE-2026-41855 Spring Framework Unsafe Deserialization via Jackson JMS Converters
- CVE-2026-41854 Spring Framework Server-Side Request Forgery via UriComponentsBuilder
- CVE-2026-41853 Spring Framework Multipart Request Smuggling in Spring MVC and WebFlux
- CVE-2026-41852 Spring Framework Arbitrary Method Invocation in SpEL Expressions
- CVE-2026-41851 Spring Framework Denial of Service via Unbounded Cache in SpEL
- CVE-2026-41850 Spring Framework Algorithmic Denial of Service via SpEL Expressions
- CVE-2026-4185 GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based overflow
- CVE-2026-41849 Spring Framework Denial of Service via Integer Overflow in SpEL Expressions
- CVE-2026-41848 Spring Framework Denial of Service via AntPathMatcher
- CVE-2026-41847 Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL
- CVE-2026-41846 Spring Framework Cross-site Scripting via JSP Form Tags
- CVE-2026-41845 Spring Framework Cross-site Scripting via JavaScriptUtils
- CVE-2026-41844 Spring Framework Open Redirect in Spring MVC and WebFlux
- CVE-2026-41843 Spring Framework Path Traversal via Versioned Static Resources in Spring MVC and WebFlux
- CVE-2026-41842 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux
- CVE-2026-41841 Spring Framework Information Disclosure via Static Resource Cache in Spring MVC and WebFlux
- CVE-2026-41840 Spring Framework Denial of Service via Multipart Requests in WebFlux
- CVE-2026-4184 D-Link DIR-816 goahead form2Wl5BasicSetup.cgi stack-based overflow
- CVE-2026-41839 Spring Framework Escalation via Session Fixation in WebFlux
- CVE-2026-41838 Spring Framework Predictable Session ID in WebSocket Module
- CVE-2026-41837 Spring Data REST Querydsl integration exposes Jackson-hidden persistent fields as filter keys
- CVE-2026-4183 D-Link DIR-816 goahead form2WlanBasicSetup.cgi stack-based overflow
- CVE-2026-4182 D-Link DIR-816 goahead form2Wl5RepeaterStep2.cgi stack-based overflow
- CVE-2026-4181 D-Link DIR-816 goahead form2RepeaterStep2.cgi stack-based overflow
- CVE-2026-4180 D-Link DIR-816 goahead redirect.asp access control
- CVE-2026-4179 stm32: usb: Infinite while loop in Interrupt Handler
- CVE-2026-4177 Memory corruption in YAML::Syck
- CVE-2026-4176 Supply chain in perl
- CVE-2026-4175 Aureus ERP Chatter Message content-text-entry.blade.php cross site scripting
- CVE-2026-4174 Radare2 Mach-O File mach0.c walk_exports_trie resource consumption
- CVE-2026-41732 Spring for Apache Pulsar: JsonPulsarHeaderMapper Trusted-Package Prefix Check Allows Unintended Subpackage Deserialization
- CVE-2026-41731 In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization
- CVE-2026-41730 Spring Data REST exposes persistence-layer internals in error responses
- CVE-2026-4173 CodePhiliaX Chat2DB Database Export DMDBManage.java updateProcedure sql injection
- CVE-2026-41729 Spring Data REST SpEL Injection via Map Key in JSON Patch
- CVE-2026-41728 Spring Data REST JSON Patch bypasses Jackson read-only property protection on nested objects and collections
- CVE-2026-41727 In Spring for Apache Kafka, forged retry topic headers subvert retry routing and backoff behavior
- CVE-2026-41726 In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header
- CVE-2026-41724 Cross-site scripting in VCF operations
- CVE-2026-41723 Cross-site scripting in VCF operations
- CVE-2026-41722 Cross-site scripting in VCF operations
- CVE-2026-41721 Spring Data Commons Denial of Service via Data Binding
- CVE-2026-41720 Authentication Bypass with Empty Password in Spring LDAP
- CVE-2026-4172 TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow
- CVE-2026-41719 Spring Data KeyValue - SpEL Injection vulnerability in SpelPropertyComparator
- CVE-2026-41717 Spring Data MongoDB - SpEL Expression Injection via Annotated Query Parameter Binding
- CVE-2026-41716 Spring Data web support unbounded negative-result cache keyed on attacker-supplied property names
- CVE-2026-41715 Reactor Netty HTTP Client Leaks Credentials On Protocol Downgrade Redirect
- CVE-2026-41714 Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean
- CVE-2026-41713 Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor
- CVE-2026-41712 ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage
- CVE-2026-41711 Potential Denial of Service through crafted Sort Parameters
- CVE-2026-41710 Cache Exhaustion in Stateful Retries leads to Denial of Service
- CVE-2026-4171 CodeGenieApp serverless-express API Endpoint TodoList.ts authorization
- CVE-2026-41709 Broadcom VMWare ESX Insufficient Logging
- CVE-2026-41708 Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability
- CVE-2026-41707 Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay
- CVE-2026-41706 Open Redirect When Using CookieRequestCache
- CVE-2026-41705 Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs
- CVE-2026-41704 Compromised VM can make arbitrary blobstore deletes
- CVE-2026-41703 Out-of-bounds read vulnerability
- CVE-2026-41702 TOCTOU local privilege escalation vulnerability
- CVE-2026-41701 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues
- CVE-2026-41700 Cross-Site WebSocket Hijacking in Spring for GraphQL
- CVE-2026-4170 Topsec TopACM HTTP Request nmc_sync.php os command injection
- CVE-2026-41699 Unsafe Deserialization in Spring GraphQL
- CVE-2026-41697 Spring Data Relational Parameter not Escaped for Query By Example LIKE Pattern
- CVE-2026-41696 Spring Data MongoDB Bind Parameter Literal Quoting Breakout
- CVE-2026-41695 Denial of Service in Spring Data Commons Property Path Resolution
- CVE-2026-41694 SAML Payloads Decrypted Without Valid Signature
- CVE-2026-41693 i18next-fs-backend: Path traversal via unsanitised lng/ns allows arbitrary file read/overwrite
- CVE-2026-41692 i18nextify is vulnerable to DOM XSS via javascript:/data: URL schemes in translated href/src attributes