Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 669 of 1013.
- CVE-2026-40393 Memory corruption in Mesa
- CVE-2026-4039 OpenClaw Skill Env applySkillConfigenvOverrides code injection
- CVE-2026-40386 Integer overflow in libexif
- CVE-2026-40385 Integer overflow in libexif
- CVE-2026-40384 Joomla! Core - [20260510] - Path traversal in com_media webservice endpoint
- CVE-2026-40383 Joomla! Core - [20260509] - LFI in HTMLView layout parameter
- CVE-2026-40382 Windows Telephony Service Elevation of Privilege Vulnerability
- CVE-2026-40381 Azure Connected Machine Agent Elevation of Privilege Vulnerability
- CVE-2026-40380 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
- CVE-2026-4038 Aimogen Pro <= 2.7.5 - Unauthenticated Privilege Escalation via Arbitrary Function Call
- CVE-2026-40379 Azure Entra ID Spoofing Vulnerability
- CVE-2026-40378 Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
- CVE-2026-40377 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
- CVE-2026-40376 Visual Studio Code Elevation of Privilege Vulnerability
- CVE-2026-40375 Microsoft Dynamics Business Central Information Disclosure Vulnerability
- CVE-2026-40374 Microsoft Power Automate Desktop Information Disclosure Vulnerability
- CVE-2026-40372 ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-40371 Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability
- CVE-2026-40370 SQL Server Remote Code Execution Vulnerability
- CVE-2026-40369 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-40368 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-40367 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40366 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40365 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-40364 Microsoft Word Remote Code Execution Vulnerability
- CVE-2026-40363 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-40362 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-40361 Microsoft Outlook and Word Remote Code Execution Vulnerability
- CVE-2026-40360 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-4036 SQL injection in DiskStation Manager (DSM)
- CVE-2026-40359 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-40358 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-40357 Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2026-40356 Integer overflow in Kerberos 5
- CVE-2026-40355 Null dereference in Kerberos 5
- CVE-2026-40354 Path traversal in xdg-desktop-portal
- CVE-2026-40353 wger: Stored XSS via Unescaped License Attribution Fields
- CVE-2026-40352 FastGPT: NoSQL Injection in updatePasswordByOld Leads to Account Takeover
- CVE-2026-40351 FastGPT: NoSQL Injection in loginByPassword leads to Authentication Bypass
- CVE-2026-40350 Missing authorization in movary
- CVE-2026-4035 Environment Variable Resolution Vulnerability in mlflow/mlflow
- CVE-2026-40349 Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true
- CVE-2026-40348 Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing
- CVE-2026-40347 Python-Multipart affected by Denial of Service via large multipart preamble or epilogue data
- CVE-2026-40346 NocoBase has SSRF in Workflow HTTP Request and Custom Request Plugins
- CVE-2026-40345 deepmerge-ts: Stack exhaustion when merging recursive object graphs
- CVE-2026-40344 MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads
- CVE-2026-40343 free5GC UDR: Fail-open handling in PolicyDataSubsToNotifyPost allows unintended subscription creation
- CVE-2026-40342 Firebird: Path Traversal + Arbitrary File Write Leads to Remote Code Execution
- CVE-2026-40341 libgphoto2 has an OOB Read in ptp_unpack_EOS_FocusInfoEx
- CVE-2026-40340 libgphoto2 has OOB read in ptp_unpack_OI() in ptp-pack.c via malicious PTP ObjectInfo response
- CVE-2026-4034 TIBCO Administrator Injection Vulnerability
- CVE-2026-40339 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() FormFlag parsing in ptp-pack.c
- CVE-2026-40338 libgphoto2 has OOB read in ptp_unpack_Sony_DPD() enumeration count parsing in ptp-pack.c
- CVE-2026-40337 Sentry kernel has incomplete ownership check for IRQ line manipulation
- CVE-2026-40336 libgphoto2 has memory leak in ptp_unpack_Sony_DPD() secondary enumeration list in ptp-pack.c
- CVE-2026-40335 libgphoto2 has OOB read in ptp_unpack_DPV() UINT128/INT128 handling in ptp-pack.c
- CVE-2026-40334 libgphoto2 missing null termination in ptp_unpack_Canon_FE() filename buffer in ptp-pack.c
- CVE-2026-40333 Memory corruption in libgphoto2
- CVE-2026-40332 Masa CMS open redirect via improper handling of scheme-relative URLs
- CVE-2026-40331 Masa CMS unauthenticated SQL injection via altTable parameter in JSON API
- CVE-2026-40330 Masa CMS SQL injection via sortDirection parameter in beanFeed
- CVE-2026-40329 SQL Injection vulnerability via sortBy in beanFeed
- CVE-2026-40326 Masa CMS CSRF in site bundle creation allows unauthorized site data export
- CVE-2026-40325 Masa CMS CSRF in content restoration allows unauthorized restoration of deleted content
- CVE-2026-40324 Hot Chocolate's Utf8GraphQLParser has Stack Overflow via Deeply Nested GraphQL Documents
- CVE-2026-40323 SP1 V6 Recursion Circuit Row-Count Binding Gap
- CVE-2026-40322 SiYuan: Mermaid `javascript:` Link Injection Leads to Stored XSS and Electron RCE
- CVE-2026-40321 DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
- CVE-2026-40320 Giskard has an Unsandboxed Jinja2 Template Rendering in ConformityCheck
- CVE-2026-4032 CodeColorer <= 0.10.1 - Unauthenticated Stored Cross-Site Scripting via 'class' attribute in 'cc' Comment Shortcode
- CVE-2026-40319 Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check
- CVE-2026-40318 SiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView`
- CVE-2026-40317 NovumOS has Privilege Escalation in the Syscall Interface
- CVE-2026-40316 OWASP BLT has RCE in Github Actions via untrusted Django model execution in workflow
- CVE-2026-40315 PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries
- CVE-2026-40314 NamelessMC: Reactions on private or blocking profile posts can be read and modified without proper authorization
- CVE-2026-40313 PraisonAI: ArtiPACKED Vulnerability via GitHub Actions Credential Persistence
- CVE-2026-40312 ImageMagick: Off-by-One in MSL decoder could result in crash
- CVE-2026-40311 ImageMagick: Heap-use-after-free via XMP profile could result in a crash when printing values
- CVE-2026-40310 ImageMagick: Heap out-of-bounds write in JP2 encoder
- CVE-2026-4031 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Backup Interception
- CVE-2026-40309 Masa CMS CSRF in trash management allows unauthorized permanent deletion of deleted content
- CVE-2026-40308 My Calendar: Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog
- CVE-2026-40306 DNN has same HostGUID for all new installs
- CVE-2026-40305 DNN has Force Friend Request Acceptance
- CVE-2026-40304 zrok's broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records
- CVE-2026-40303 zrok allows unauthenticated DoS via unbounded memory allocation in striped session cookie parsing
- CVE-2026-40302 zrok has reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering
- CVE-2026-40301 rhukster/dom-sanitizer: SVG <style> tag allows CSS injection via unfiltered url() and @import directives
- CVE-2026-40300 Zulip: Message edit history visible in "moves only" policy through /api/v1/messages/{id}/history
- CVE-2026-4030 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Arbitrary File Read and Deletion
- CVE-2026-40299 next-intl has an open redirect vulnerability
- CVE-2026-40296 PhpSpreadsheet vulnerable to XSS in HTML writer via custom number format codes
- CVE-2026-40295 Devise: Open Redirect via Unvalidated `request.referrer` in Timeoutable Session Timeout Handler
- CVE-2026-40293 OpenFGA Playground Preshared Key Exposure
- CVE-2026-40291 Chamilo LMS has Privilege Escalation via API User Role Modification
- CVE-2026-40290 OP-TEE has a Use-After-Free race in FF-A shared-memory teardown
- CVE-2026-4029 Database Backup for WordPress <= 2.5.2 - Missing Authorization to Unauthenticated Database Export
- CVE-2026-40289 PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions