Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 658 of 1013.
- CVE-2026-41567 Docker: `PUT /containers/{id}/archive` executes container binary on the host
- CVE-2026-41566 Apache Kvrocks: Improper permission for the APPLYBATCH command
- CVE-2026-41565 CryptX versions before 0.088_001 for Perl have a stack buffer overflow in four AEAD decrypt_verify helpers
- CVE-2026-41564 CryptX versions before 0.088 for Perl do not reseed the Crypt::PK PRNG state after forking
- CVE-2026-41563 WordPress Sitemovr plugin <= 1.0.1 - Sensitive Data Exposure vulnerability
- CVE-2026-41562 WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability
- CVE-2026-41561 WordPress Museder RestoreOne plugin <= 2.7.276 - Sensitive Data Exposure vulnerability
- CVE-2026-41560 WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability
- CVE-2026-4156 ChargePoint Home Flex OCPP getpreq Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-41559 WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability
- CVE-2026-41558 WordPress WP Migration Plugin DB & Files – WP Synchro plugin <= 1.16.1 - 2FA Bypass vulnerability
- CVE-2026-41557 WordPress Kapee theme < 1.7.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-41556 WordPress ProfilePress plugin <= 4.16.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-41555 SQL injection in Newsletter Subscription Form – User Subscriptions Form, Capture Email
- CVE-2026-41554 WordPress Bricks Builder theme 1.9.2-2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-41553 Remote Code Execution in PDF Export Module
- CVE-2026-41552 Path Traversal in PDF Export Module
- CVE-2026-41551 Path traversal in ROS#
- CVE-2026-4155 ChargePoint Home Flex Inclusion of Sensitive Information in Source Code Information Disclosure Vulnerability
- CVE-2026-41545 WebSocket timelapse path traversal and command injection
- CVE-2026-41544 Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint
- CVE-2026-41541 Symlink creation in qsyncsrv.cgi
- CVE-2026-4154 GIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2026-41539 QTS, QuTS hero
- CVE-2026-41530 Path traversal in Lhaz
- CVE-2026-4153 GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-41527 Privilege escalation in Kleopatra
- CVE-2026-41526 Command injection in KCoreAddons
- CVE-2026-41525 Security feature bypass in Dolphin
- CVE-2026-41524 Ajax30/BraveCMS-2.0: Stored XSS in Page / Article Content
- CVE-2026-41523 vLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code Execution
- CVE-2026-41522 Iris has an Improper Authorization issue
- CVE-2026-41521 xrdp: lib_framebuffer_update Has Integer Overflow Heap Info Leak & ASLR Bypass
- CVE-2026-41520 Cillium exposes sensitive information included in the cilium-bugtool debug archive
- CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-41519 Weblate's API Token Not Invalidated on Password Change
- CVE-2026-41518 Chartbrew has a stored DOM XSS via Chart Tooltip innerHTML (ChartDatasetConfig.legend)
- CVE-2026-41517 Emlog: Remote Code Execution via Malicious Plugin Upload
- CVE-2026-41516 OP-TEE: Hisilicon HPRE PKCS#1 v1.5 Decryption Padding Oracle
- CVE-2026-41515 OP-TEE: RSA-OAEP padding oracle in NXP CAAM driver enables plaintext recovery
- CVE-2026-41514 OP-TEE: RSA-OAEP padding oracle in Hisilicon HPRE driver enables plaintext recovery
- CVE-2026-41513 Horilla: Open Redirect via Unvalidated `next` Parameter in Notification Endpoints
- CVE-2026-41512 Remote code execution via JavaScript injection in `BrowserAutomation::PlaywrightService`
- CVE-2026-41511 OpenMcdf has an Infinite loop DoS via crafted CFB directory cycle
- CVE-2026-41510 OWASP Coraza WAF: Silent argument drop at ArgumentLimit allows bypass of ARGS-targeted rules via parameter flooding
- CVE-2026-4151 GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2026-41509 Integer underflow in crypto_sign_open() leads to buffer overflow
- CVE-2026-41508 Coraza: Truncated multipart body bypasses MULTIPART_STRICT_ERROR (rule 200003) via silent io.ErrUnexpectedEOF handling
- CVE-2026-41507 Remote Code Execution (RCE) via String Literal Injection into math-codegen
- CVE-2026-41506 go-git Credential leak via cross-host redirect in smart HTTP transport
- CVE-2026-41505 RELATE: Predictable Token Generation in auth.py and exam.py
- CVE-2026-41504 OWASP Coraza WAF: Native audit-log format allows CRLF injection and log forgery via request body and header fields
- CVE-2026-41503 BACnet Stack: Out-of-Bounds Read in ReadPropertyMultiple Property Decoder via Deprecated Tag Parser
- CVE-2026-41502 BACnet Stack: Off-by-One Out-of-Bounds Read in ReadPropertyMultiple Object ID Decoder
- CVE-2026-41501 electerm has Command Injection Vulnerability via runLinux function
- CVE-2026-41500 electerm has Command Injection Vulnerability via runMac function
- CVE-2026-4150 GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2026-41499 Wazuh: Multiple Heap-based NULL WRITE Buffer Underflows in parse_uname_string()
- CVE-2026-41498 Kimai: Team API Missing Object-Level Authorization
- CVE-2026-41497 Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI
- CVE-2026-41496 PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)
- CVE-2026-41495 n8n-MCP Logs Sensitive Request Data on Unauthorized /mcp Requests
- CVE-2026-41493 yard: Possible arbitrary path traversal and file access via yard server
- CVE-2026-41492 Unauthenticated Admin Token Disclosure Leading to Authentication Bypass via /debug/vars in Dgraph
- CVE-2026-41491 Dapr: Service Invocation path traversal ACL bypass
- CVE-2026-41490 Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations
- CVE-2026-4149 Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability
- CVE-2026-41489 Pi-hole: Local privilege escalation via config-controlled path in root-executed service hooks
- CVE-2026-41488 angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding
- CVE-2026-41487 Missing authorization in langfuse
- CVE-2026-41486 Ray: Remote Code Execution via Parquet Arrow Extension Type Deserialization
- CVE-2026-41485 Kyverno Controller Denial of Service via forEach Mutation Panic
- CVE-2026-41484 OpenTelemetry.Exporter.OneCollector vulnerable to denial of service via unbounded HTTP error response body
- CVE-2026-41483 Unbounded HTTP response body read in OpenTelemetry.Resources.Azure
- CVE-2026-41482 Frappe: Possible Path Traversal and Local File Inclusion via Chrome PDF Generator
- CVE-2026-41481 LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
- CVE-2026-4148 ExpressionContext use-after-free in classic engine $lookup and $graphLookup aggregation operators
- CVE-2026-41479 Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type
- CVE-2026-41478 Saltcorn: SQL Injection via Unparameterized Sync Endpoints (maxLoadedId)
- CVE-2026-41477 Deskflow: Local privilege escalation via unauthenticated IPC
- CVE-2026-41476 Deskflow: clipboard deserialization global-buffer-overflow
- CVE-2026-41475 BACnet Stack: Out-of-Bounds Read in WritePropertyMultiple Decoder via Deprecated Tag Parser
- CVE-2026-41473 CyberPanel < 2.4.5 Unauthenticated API Access via AI Scanner Endpoints
- CVE-2026-41472 CyberPanel < 2.4.5 Stored XSS via AI Scanner Dashboard
- CVE-2026-41471 Easy PayPal Events & Tickets < 1.4 Information Disclosure via QR Code Endpoint
- CVE-2026-41470 LIVE555 < 2026.04.22 RTSP Server Authorization Bypass via Session Token
- CVE-2026-4147 Stack memory disclosure in filemd5 command
- CVE-2026-41469 Beghelli Sicuro24 SicuroWeb Missing Content Security Policy
- CVE-2026-41468 Beghelli Sicuro24 SicuroWeb AngularJS Sandbox Escape via Template Injection
- CVE-2026-41467 ProjeQtor < 12.4.4 Stored XSS via checkValidFileName()
- CVE-2026-41466 ProjeQtor < 12.4.4 Stored XSS via checkValidHtmlText()
- CVE-2026-41465 ProjeQtor < 12.4.4 Path Traversal via dynamicDialog.php
- CVE-2026-41464 ProjeQtor < 12.4.4 Missing Authorization via objectDetail.php
- CVE-2026-41463 ProjeQtor < 12.4.4 ZipSlip Path Traversal via uploadPlugin.php
- CVE-2026-41462 ProjeQtor < 12.4.4 Unauthenticated SQL Injection via Login
- CVE-2026-41461 SocialEngine <= 7.8.0 Blind SSRF via /core/link/preview
- CVE-2026-41460 SocialEngine <= 7.8.0 SQL Injection via activity/index/get-memberall
- CVE-2026-4146 Loco Translate <= 2.8.2 - Reflected Cross-Site Scripting via 'update_href' Parameter
- CVE-2026-41459 Xerte Online Toolkits Path Disclosure via /setup
- CVE-2026-41458 OwnTone Server < 29.1 Race Condition DoS via DAAP Login