Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 663 of 1013.
- CVE-2026-41050 Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
- CVE-2026-4105 Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method
- CVE-2026-41049 Caching of Authentication allows Authentication Bypass between users in qSnapper
- CVE-2026-41048 Caching of Authentication allows Authentication Bypass in qSnapper
- CVE-2026-41047 Information leak via “diff” methods in qSnapper
- CVE-2026-41046 path traversal via `config` parameter in qSnapper
- CVE-2026-41045 Weak polkit authentication check in qSnapper
- CVE-2026-41044 Apache ActiveMQ Vulnerable to Code Injection
- CVE-2026-41043 Apache ActiveMQ, Apache ActiveMQ Web: ActiveMQ Web Console - XSS vulnerability when browsing queues
- CVE-2026-41042 Code injection in Apache Gravitino
- CVE-2026-41041 Path traversal in Apache Gravitino
- CVE-2026-41040 Denial of service in GROWI
- CVE-2026-4104 SQLi in Akmer Informatics' TeknoPass
- CVE-2026-41039 Information Disclosure Vulnerability in Quantum Networks Router QN-I-470
- CVE-2026-41038 Weak Password Policy Vulnerability in Quantum Networks Router QN-I-470
- CVE-2026-41037 Missing Rate Limiting Vulnerability in Quantum Networks Router QN-I-470
- CVE-2026-41036 Command Injection Vulnerability in Quantum Networks Router QN-I-470
- CVE-2026-41035 Use after free in rsync
- CVE-2026-41034 Memory corruption in ONLYOFFICE DocumentServer
- CVE-2026-41032 Phoenix Contact: Unauthenticated log download vulnerability in the firmware of CHARX SEC-3xxx charging controllers
- CVE-2026-41031 A Stored Cross-Site Scripting (XSS) vulnerability occurs in Vinna Process Monitor
- CVE-2026-41030 Privilege escalation in ONLYOFFICE DesktopEditors
- CVE-2026-4103 Cross-Site Scripting via HTML Sanitization in WSO2 Publisher and Developer Portals Allows Malicious Script Execution
- CVE-2026-41022 Security feature bypass in easySoft
- CVE-2026-41021 Weak cryptography in easyE4
- CVE-2026-41020 Auth bypass in easyE4
- CVE-2026-41018 Apache Airflow Providers Elasticsearch: Elasticsearch task-log handler leaks credentials embedded in the host URL
- CVE-2026-41017 Apache Airflow: JWT cookie missing Secure flag in JWTRefreshMiddleware behind HTTPS-terminating proxy
- CVE-2026-41016 Apache Airflow Providers SMTP: No certificate validation on SMTP STARTTLS connections in SMTP provider
- CVE-2026-41015 Command injection in radare2
- CVE-2026-41014 Apache Airflow: per-DAG RBAC bypass on /ui/partitioned_dag_runs endpoints
- CVE-2026-41013 Tenant-controlled comma smuggles arbitrary CIFS mount options
- CVE-2026-41012 BOSH vSphere CPI Improper Cert Validation
- CVE-2026-41011 Command injection in BOSH
- CVE-2026-41010 Command injection in BOSH Director
- CVE-2026-4101 Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-41009 Local Blobstore may allow arbitrary reads/deletes
- CVE-2026-41008 Spring Security Authorization Server Open Redirect via request_uri
- CVE-2026-41007 Spring HATEOAS heap exhaustion through unbounded internal caching
- CVE-2026-41006 Spring HATEOAS Collection+JSON/UBER deserializers do not honor Jackson configuration
- CVE-2026-41005 UAA accepts SAML Encrypted Assertions authentication bypass
- CVE-2026-41004 Spring Cloud Config Server Logged Sensitive Information
- CVE-2026-41003 Unencoded HTML Outputs in Spring Security May Allow Cross-Site Scripting
- CVE-2026-41002 Spring Cloud Config Server Susceptible To TOCTOU Attack
- CVE-2026-41001 Predictable Temp Directory in Artemis Auto-configuration
- CVE-2026-41000 WSS4J validation does not use configured replay cache
- CVE-2026-4100 Missing authorization in Paid Memberships Pro – Content Restriction, User Registration, & Paid Subscriptions
- CVE-2026-40999 Spring WS SSRF via unvalidated WS-Addressing reply destinations
- CVE-2026-40998 Jaxp13 XPath XXE via StreamSource and SAXSource
- CVE-2026-40997 SOAP security faults leak Spring Security account state
- CVE-2026-40996 Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default
- CVE-2026-40995 X.509 authentication bypasses Spring Security account checks
- CVE-2026-40994 Wss4jSecurityInterceptor disables WS-I BSP validation by default
- CVE-2026-40993 Unfiltered Java Native Deserialization of SAML 2.0 Asserting Party Credentials BLOB Database Entry
- CVE-2026-40992 Mail Auto-Configuration Does Not Enable SSL Hostname Verification
- CVE-2026-40991 XML External Entity (XXE) injection when documenting untrusted XML content
- CVE-2026-40990 Unbounded cache for function definitions
- CVE-2026-40989 Self Routing guard bypassed via function composition
- CVE-2026-40988 Unbounded DEFLATE Inflation in SAML 2.0 Service Provider
- CVE-2026-40987 Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystem
- CVE-2026-40986 Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
- CVE-2026-40985 Data Binding Vulnerability in Spring Web Flow with Unified EL Parser
- CVE-2026-40984 Micrometer HTTP server instrumentations DoS vulnerability
- CVE-2026-40983 Micrometer gRPC server instrumentation DoS vulnerability
- CVE-2026-40982 Spring Cloud Config vulnerable to Path Traversal
- CVE-2026-40981 Spring Cloud Config has an Authorization Bypass Through User-Controlled Key
- CVE-2026-40980 Spring AI Vulnerable to OOM by attacker-controlled PDF
- CVE-2026-40979 Spring AI's ONNX model cache defaults to world-writable predictable /tmp directory
- CVE-2026-40978 Spring AI has SQL Injection in CosmosDBVectorStore.doDelete()
- CVE-2026-40977 Spring Boot's PID file write follows symlinks at predictable default path
- CVE-2026-40976 Spring Boot's default security filter chain has no authorization rule with Actuator but without Health
- CVE-2026-40975 Spring Boot's random value property source uses a weak PRNG unsuitable for secrets
- CVE-2026-40974 Spring Boot's Cassandra SSL auto-configuration disables TLS hostname verification
- CVE-2026-40973 Spring Boot accepts predictable temp directory without ownership verification
- CVE-2026-40972 Spring Boot DevTools remote secret comparison is vulnerable to timing attacks
- CVE-2026-40971 Spring Boot's RabbitMQ auto-configuration doesn't perform hostname verification when connecting to the RabbitMQ broker
- CVE-2026-40970 Spring Boot's Elasticsearch auto-configuration doesn't perform hostname verification when connecting to the Elasticsearch server.
- CVE-2026-40969 Spring gRPC AuthenticationException message reflected to remote client
- CVE-2026-40968 Spring gRPC SecurityContext leaks across requests on authorization failure
- CVE-2026-40967 Spring AI has a VectorStore FilterExpression Converter injection
- CVE-2026-40966 VectorStoreChatMemoryAdvisor conversation scoping can lead to cross-tenant memory exfiltration
- CVE-2026-40965 Information disclosure in CF Deployment
- CVE-2026-40964 Auth bypass in CF Deployment
- CVE-2026-40963 Apache Airflow: DAG authorization bypass on /ui/structure/structure_data
- CVE-2026-40962 Integer overflow in FFmpeg
- CVE-2026-40961 Apache Airflow: Open Redirect Bypass Vulnerability
- CVE-2026-40960 Security feature bypass in Luanti
- CVE-2026-4096 Other in DevOps Plan
- CVE-2026-40959 Security feature bypass in Luanti
- CVE-2026-40958 Input validation error in Secure Access clients prior to 14.55
- CVE-2026-40957 Frameable content vulnerability in the Secure Access server login page
- CVE-2026-40956 Memory disclosure in Secure Access Clients
- CVE-2026-40955 Integer underflow vulnerability in Secure Access clients
- CVE-2026-40954 Integer underflow in Secure Access clients prior to 14.55
- CVE-2026-40953 Heap overflow in Secure Access clients
- CVE-2026-40952 Privilge misconfiguration in Secure Access installers
- CVE-2026-40951 Memory corruption in Secure Access Windows clients prior to 14.50
- CVE-2026-40950 Buffer overflow in the Secure Access server prior to 14.50
- CVE-2026-40949 Buffer overflow in Windows clients prior to 14.50
- CVE-2026-40948 Apache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth Manager