Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 691 of 1013.
- CVE-2026-35371 uutils coreutils id Misleading Identity Reporting in Pretty Print Mode
- CVE-2026-35370 uutils coreutils id Incorrect Access-Control Decisions via Misrepresented Group Membership
- CVE-2026-3537 Memory corruption in Chrome
- CVE-2026-35369 uutils coreutils kill System-wide Process Termination and Denial of Service via Argument Misinterpretation
- CVE-2026-35368 uutils coreutils chroot Local Privilege Escalation and chroot Escape in via Name Service Switch (NSS) Injection
- CVE-2026-35367 uutils coreutils nohup Information Disclosure via Insecure Default Output Permissions
- CVE-2026-35366 uutils coreutils printenv Security Inspection Bypass via UTF-8 Enforcement
- CVE-2026-35365 uutils coreutils mv Denial of Service and Data Duplication via Improper Symlink Expansion
- CVE-2026-35364 uutils coreutils mv Arbitrary File Overwrite via Cross-Device TOCTOU Race Condition
- CVE-2026-35363 uutils coreutils rm Safeguard Bypass via Improper Path Normalization
- CVE-2026-35362 uutils coreutils Missing TOCTOU Protection on Non-Linux Unix Platforms in Safe Traversal Module
- CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems
- CVE-2026-35360 uutils coreutils touch Arbitrary File Truncation via TOCTOU Race Condition
- CVE-2026-3536 Integer overflow in Chrome
- CVE-2026-35359 uutils coreutils cp Information Disclosure via Time-of-Check to Time-of-Use Symlink Swap
- CVE-2026-35358 uutils coreutils cp Semantic Loss and Potential Denial of Service with -R via Device Node Stream Reading
- CVE-2026-35357 uutils coreutils cp Information Disclosure via Permission Handling Race
- CVE-2026-35356 uutils coreutils install Arbitrary File Overwrite with -D via Path Component Symlink Race
- CVE-2026-35355 uutils coreutils install Arbitrary File Overwrite via Symlink TOCTOU Race
- CVE-2026-35354 uutils coreutils mv Security Xattr TOCTOU Race in Cross-Device
- CVE-2026-35353 uutils coreutils mkdir Permission Exposure Race Condition with -m
- CVE-2026-35352 uutils coreutils mkfifo Privilege Escalation via TOCTOU Race Condition
- CVE-2026-35351 uutils coreutils mv Silent Ownership Loss in Cross-Device Operations
- CVE-2026-35350 uutils coreutils cp Unexpected Privileged Executable Creation with -p
- CVE-2026-3535 DSGVO Google Web Fonts GDPR <= 1.1 - Unauthenticated Arbitrary File Upload via 'fonturl' Parameter
- CVE-2026-35349 uutils coreutils Path-Based Safety Bypass with --preserve-root
- CVE-2026-35348 uutils coreutils sort Local Denial of Service via Forced UTF-8 Parsing
- CVE-2026-35347 uutils coreutils comm Silent Data Loss or Denial of Service via Improper Input Validation
- CVE-2026-35346 uutils coreutils comm Silent Data Corruption via Lossy UTF-8 Normalization
- CVE-2026-35345 uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race
- CVE-2026-35344 uutils coreutils dd Silent Data Corruption via Unconditional Truncation Error Suppression
- CVE-2026-35343 uutils coreutils cut Inconsistent Output Suppression with Newline Delimiters
- CVE-2026-35342 uutils coreutils mktemp Insecure Temporary File Placement via Empty TMPDIR
- CVE-2026-35341 uutils coreutils mkfifo Unauthorized Permission Change on Existing Files
- CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode
- CVE-2026-3534 Astra <= 4.12.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta
- CVE-2026-35339 uutils coreutils chmod False Success Exit Code in Recursive Mode
- CVE-2026-35338 uutils coreutils chmod Path Traversal Bypass of --preserve-root
- CVE-2026-35337 Apache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential Handling
- CVE-2026-3533 File upload in Jupiter X Core
- CVE-2026-35327 Missing authorization in Oracle WebCenter Content
- CVE-2026-35326 Missing authorization in Oracle WebCenter Content
- CVE-2026-35325 Missing authorization in Oracle WebCenter Content
- CVE-2026-35324 Missing authorization in Oracle WebCenter Content
- CVE-2026-35323 Missing authorization in Oracle WebCenter Content
- CVE-2026-35322 Missing authorization in Oracle WebCenter Content
- CVE-2026-35321 Missing authorization in Oracle WebCenter Content
- CVE-2026-35320 Missing authorization in Oracle WebCenter Content
- CVE-2026-3532 OpenID Connect / OAuth client - Less critical - Access bypass - SA-CONTRIB-2026-027
- CVE-2026-35319 Missing authorization in Oracle WebCenter Content
- CVE-2026-35318 Missing authorization in Oracle WebCenter Sites
- CVE-2026-35317 Missing authorization in Oracle WebCenter Content
- CVE-2026-35316 Missing authorization in Oracle WebCenter Content
- CVE-2026-35315 Missing authorization in Oracle WebCenter Content
- CVE-2026-35314 Missing authorization in Oracle Access Manager
- CVE-2026-35313 Missing authorization in Oracle Access Manager
- CVE-2026-35312 Missing authorization in Oracle Virtual Directory
- CVE-2026-35311 Missing authorization in WebLogic Server
- CVE-2026-35310 Missing authorization in Oracle Coherence
- CVE-2026-3531 OpenID Connect / OAuth client - Moderately critical - Access bypass - SA-CONTRIB-2026-026
- CVE-2026-35309 Missing authorization in Oracle Coherence
- CVE-2026-35308 Missing authorization in Oracle Coherence
- CVE-2026-35307 Missing authorization in Oracle Coherence
- CVE-2026-35306 Missing authorization in Oracle Coherence
- CVE-2026-35305 Missing authorization in Oracle Coherence
- CVE-2026-35304 Missing authorization in Oracle Coherence
- CVE-2026-35303 Auth bypass in WebLogic Server
- CVE-2026-35302 Open redirect in WebLogic Server
- CVE-2026-35301 Auth bypass in WebLogic Server
- CVE-2026-35300 Deserialization in WebLogic Server
- CVE-2026-3530 Server-side request forgery in OpenID Connect / OAuth client
- CVE-2026-35299 Missing authorization in WebLogic Server
- CVE-2026-35298 Missing authorization in WebLogic Server
- CVE-2026-35296 Auth bypass in Oracle WebCenter Sites
- CVE-2026-35295 Missing authorization in Oracle WebCenter Sites
- CVE-2026-35294 Missing authorization in Identity Manager Connector
- CVE-2026-35293 Auth bypass in Oracle WebCenter Sites
- CVE-2026-35292 Auth bypass in WebLogic Server
- CVE-2026-35291 Privilege escalation in WebLogic Server
- CVE-2026-35290 Missing authorization in Oracle Application Testing Suite
- CVE-2026-3529 Google Analytics GA4 - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-024
- CVE-2026-35289 Auth bypass in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35288 Privilege escalation in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35287 Missing authorization in Oracle Application Testing Suite
- CVE-2026-35286 Missing authorization in Oracle WebCenter Content
- CVE-2026-35285 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-35284 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-35283 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-35282 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-35281 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-35280 Missing authorization in Oracle WebCenter Enterprise Capture
- CVE-2026-3528 Calculation Fields - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-023
- CVE-2026-35279 Auth bypass in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35278 Missing authorization in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35277 Other in Oracle REST Data Services
- CVE-2026-35276 Auth bypass in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35275 Other in Oracle VM VirtualBox
- CVE-2026-35274 Missing authorization in PeopleSoft Enterprise PT PeopleTools
- CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function
- CVE-2026-35272 Privilege escalation in PeopleSoft Enterprise PT PeopleTools