Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 671 of 1013.
- CVE-2026-40165 authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation
- CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed
- CVE-2026-40163 Saltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory read
- CVE-2026-40162 Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble
- CVE-2026-40161 Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL
- CVE-2026-40160 PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback
- CVE-2026-4016 GPAC SVG Parser load_svg.c svgin_process out-of-bounds write
- CVE-2026-40159 PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution
- CVE-2026-40158 PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai
- CVE-2026-40157 PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack`
- CVE-2026-40156 PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading
- CVE-2026-40155 Auth0 Next.js SDK has Improper Proxy Cache Lookup
- CVE-2026-40154 PraisonAI Affected by Untrusted Remote Template Code Execution
- CVE-2026-40153 PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool
- CVE-2026-40152 PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary
- CVE-2026-40151 PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS
- CVE-2026-40150 PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool
- CVE-2026-4015 GPAC TeXML File load_text.c txtin_process_texml stack-based overflow
- CVE-2026-40149 PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls
- CVE-2026-40148 PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits
- CVE-2026-40145 Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility
- CVE-2026-40144 Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments)
- CVE-2026-40141 High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40140 High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-4014 itsourcecode Cafe Reservation System Registration signup.php sql injection
- CVE-2026-40139 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40138 Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access
- CVE-2026-40137 Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER)
- CVE-2026-40136 Denial of service (DoS) in SAP Financial Consolidation
- CVE-2026-40135 OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
- CVE-2026-40134 Missing Authorization Check in SAP Incentive and Commission Management
- CVE-2026-40133 Missing Authorization check in SAP S/4HANA Condition Maintenance
- CVE-2026-40132 Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard)
- CVE-2026-40131 SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library
- CVE-2026-40130 Memory Corruption vulnerability in SAPSPrint Service
- CVE-2026-4013 SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization
- CVE-2026-40129 Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform
- CVE-2026-40128 Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
- CVE-2026-40127 Authorization Bypass Through User-Controlled Key in OutSystems Lifetime
- CVE-2026-40126 DOM-based Cross-Site Scripting in OutSystems Service Center
- CVE-2026-4012 rxi fe fe.c read_ out-of-bounds
- CVE-2026-40118 Information disclosure in UDP Console
- CVE-2026-40117 PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate
- CVE-2026-40116 PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits
- CVE-2026-40115 PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS
- CVE-2026-40114 PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API
- CVE-2026-40113 PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars
- CVE-2026-40112 PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)
- CVE-2026-40111 PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)
- CVE-2026-40110 jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat
- CVE-2026-4011 Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute
- CVE-2026-40109 Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering
- CVE-2026-40108 GLPI Vulnerable to Stored XSS in ITIL Costs
- CVE-2026-40107 SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering
- CVE-2026-40106 Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS)
- CVE-2026-40105 XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality
- CVE-2026-40104 XWiki's REST APIs can list all pages/spaces, leading to unavailability
- CVE-2026-40103 Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds
- CVE-2026-40102 Plane: ORM Field Reference Injection via `segment` Parameter in Saved Analytics
- CVE-2026-40100 FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default
- CVE-2026-4010 ThakeeNathees pocketlang pkByteBufferAddString memory corruption
- CVE-2026-40099 Kirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameter
- CVE-2026-40098 OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure
- CVE-2026-40097 Step CA affected by an index out of bounds panic in TPM attestation EKU validation
- CVE-2026-40096 immich: Open Redirect via Shared Album name
- CVE-2026-40094 nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses
- CVE-2026-40093 nimiq-blockchain is missing a wall-clock upper bound on block timestamps
- CVE-2026-40092 nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT
- CVE-2026-40091 SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs
- CVE-2026-40090 Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write
- CVE-2026-4009 jarikomppa soloud WAV File dr_wav.h drwav_read_pcm_frames_s16__msadpcm out-of-bounds
- CVE-2026-40089 Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client
- CVE-2026-40088 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai
- CVE-2026-40087 LangChain has incomplete f-string validation in prompt templates
- CVE-2026-40086 Rembg has a Path Traversal via Custom Model Loading
- CVE-2026-40084 Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter
- CVE-2026-40083 Cacti: SQL Injection in managers.php
- CVE-2026-40082 Cacti: Session Fixation via missing session_regenerate_id() after login
- CVE-2026-40080 Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect
- CVE-2026-4008 Tenda W3 POST Parameter wifiSSIDset stack-based overflow
- CVE-2026-40079 Cacti: Command Injection via escape_command() no-op in RRDtool execution
- CVE-2026-40077 Beszel has an IDOR in hub API endpoints that read system ID from URL parameter
- CVE-2026-40076 OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload
- CVE-2026-40075 OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet
- CVE-2026-40074 SvelteKit's invalidated redirect in handle hook causes Denial-of-Service
- CVE-2026-40073 SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node
- CVE-2026-40072 web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling
- CVE-2026-40071 pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actions
- CVE-2026-40070 bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths)
- CVE-2026-4007 Tenda W3 POST Parameter wifiSSIDget stack-based overflow
- CVE-2026-40069 bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts
- CVE-2026-40068 Claude Code arbitrary code execution via git worktree commondir trust dialog bypass
- CVE-2026-40067 BIG-IP APM Vulnerability
- CVE-2026-40066 Anviz Products Download of Code Without Integrity Check
- CVE-2026-40063 Information disclosure in Frangoteam
- CVE-2026-40062 Path traversal in Ziostation2
- CVE-2026-40061 iControl REST and tmsh vulnerability
- CVE-2026-40060 BIG-IP Advanced WAF and ASM vulnerability
- CVE-2026-4006 Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter
- CVE-2026-40058 Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows