Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 702 of 1013.
- CVE-2026-34219 libp2p-gossipsub: Gossipsub PRUNE Backoff Heartbeat Instant Overflow
- CVE-2026-34218 ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification
- CVE-2026-34217 SandboxJS has a Sandbox Escape via Prop Object Leak in New Handler
- CVE-2026-34216 CtrlPanel: Authenticated Remote Code Execution via Dynamic Class Instantiation in SettingsController.php
- CVE-2026-34215 Parse Server: Auth data exposed via verify password endpoint
- CVE-2026-34214 Trino: Iceberg REST catalog static and vended credentials are accessible via query JSON
- CVE-2026-34213 Docmost has cross-page attachment overwrite via flawed attachmentId overwrite validation
- CVE-2026-34212 Docmost page content has stored XSS via unsanitized attachment URLs
- CVE-2026-34211 SandboxJS: Stack overflow DoS via deeply nested expressions in recursive descent parser
- CVE-2026-34210 mppx has Stripe charge credential replay via missing idempotency check
- CVE-2026-34209 mppx: Tempo has a session close voucher bypass vulnerability due to settled amount equality
- CVE-2026-34208 SandboxJS: Sandbox integrity escape
- CVE-2026-34207 TypeBot: SSRF Protection Bypass via DNS-Resolved Hostnames in Webhook / HTTP Request Validation
- CVE-2026-34206 Captcha Protect: Reflected XSS in challenge page via unsanitized destination rendered with text/template
- CVE-2026-34205 Home Assistant: Unauthenticated App (Add-on) Endpoints Exposed to Local Network via Host Network Mode
- CVE-2026-34204 MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
- CVE-2026-34203 Nautobot: Management of users via REST API does not apply configured password validators
- CVE-2026-34202 Zebra node crash — V5 transaction hash panic (P2P reachable)
- CVE-2026-34200 Nhost CLI MCP Server: Missing Inbound Authentication on Explicitly Bound Network Port
- CVE-2026-34198 Coolify: Password reset link poisoning via X-Forwarded-Host header spoofing
- CVE-2026-34197 Apache ActiveMQ Improper Input Validation
- CVE-2026-34196 GPU DDK - UAF read and/or write of arbitrary physical memory due to integer truncation in PMRDevPhysAddrOSMem
- CVE-2026-34195 Memory corruption in Graphics DDK
- CVE-2026-34194 Use after free in Graphics DDK
- CVE-2026-34193 GPU DDK - Arbitrary write via UFO updates due insufficient pointer validation in rgxfw_to_ptr()
- CVE-2026-34192 GPU DDK - _MMU_AllocLevel error recovery paths leave dangling page table entries
- CVE-2026-34191 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle
- CVE-2026-34190 CSRF in Alert Command Deletion
- CVE-2026-3419 Fastify's Missing End Anchor in "subtypeNameReg" Allows Malformed Content-Types to Pass Validation
- CVE-2026-34189 CSRF in Event Response Deletion
- CVE-2026-34188 OS Command Injection in Event Response Execution
- CVE-2026-34187 SQL Injection in Graph Container Parameter
- CVE-2026-34186 SQL Injection in Custom Fields leads to Database Compromise
- CVE-2026-34185 SQL Injection in AlanWeb SCADA
- CVE-2026-34184 Missing Authorization inAlanWeb SCADA
- CVE-2026-34183 Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
- CVE-2026-34182 CMS AuthEnvelopedData Processing May Accept Forged Messages
- CVE-2026-34181 PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
- CVE-2026-34180 Heap Buffer Over-read in ASN.1 Content Parsing
- CVE-2026-3418 Arbitrary File Upload via System REST API in Multiple WSO2 Products Allows Remote Code Execution
- CVE-2026-34179 Update of type field in restricted TLS certificate allows privilege escalation to cluster admin
- CVE-2026-34178 Importing a crafted backup leads to project restriction bypass
- CVE-2026-34177 VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf
- CVE-2026-34176 Knowledge Appliance mode iControl REST vulnerability
- CVE-2026-34175 Privilege escalation in Hardware-Aware-Automated-MachineLearning NA
- CVE-2026-34172 Giskard Agents have Server-side template injection via ChatWorkflow.chat() using non-sandboxed Jinja2 Environment
- CVE-2026-34171 Coolify: Account takeover via CSRF-able GET endpoint that resets password to attacker-known value
- CVE-2026-34170 Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL
- CVE-2026-34168 Coolify: Command injection via unsanitized persistent storage name in docker volume commands
- CVE-2026-34167 Coolify: Cross-tenant activity log disclosure via unlocked Livewire property in ActivityMonitor
- CVE-2026-34166 LiquidJS has a Memory Limit Bypass via Quadratic Amplification in `replace` Filter
- CVE-2026-34165 go-git: Maliciously crafted idx file can cause asymmetric memory consumption
- CVE-2026-34164 Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService
- CVE-2026-34163 Server-Side Request Forgery via MCP Tools Endpoint in FastGPT
- CVE-2026-34162 FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
- CVE-2026-34161 Chamilo LMS: Stored XSS via Malicious File Upload in Social Post Attachments Leads to Arbitrary JavaScript Execution
- CVE-2026-34160 Server-side request forgery in chamilo-lms
- CVE-2026-3416 Weak cryptography in WSO2 API Control Plane
- CVE-2026-34159 llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
- CVE-2026-34158 Coolify: Command injection via single-quote breakout in Docker Compose custom commands
- CVE-2026-34156 NocoBase Affected by Sandbox Escape to RCE via console._stdout Prototype Chain Traversal in Workflow Script Node
- CVE-2026-34155 RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB
- CVE-2026-34154 Discourse has a subscription access bypass in its discourse-subscriptions plugin
- CVE-2026-34153 Coolify LocalFileVolume fs_path command injection enables RCE
- CVE-2026-34152 Coolify: Command Injection via Newline in Pre/Post Deployment Commands (Heredoc Transport)
- CVE-2026-34151 XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+
- CVE-2026-34150 Wazuh: Heap buffer overflow in wazuh-analysisd via rootcheck event parsing
- CVE-2026-3415 XML external entity in WSO2 API Control Plane
- CVE-2026-34149 Coolify: Authenticated Host-Level RCE via Unescaped Database Credentials in Backup Jobs
- CVE-2026-34148 Fedify affected by resource exhaustion caused by unbounded redirect following during remote key/document resolution
- CVE-2026-3413 itsourcecode University Management System admin_single_student.php sql injection
- CVE-2026-34127 Stored Cross-Site Scripting (XSS) via Configuration File Import on TP-Link's TL-SG108PE
- CVE-2026-34126 Bluetooth Communication Uses Unencrypted Transmission During Initial Setup on TP-Link's Tapo L535E, P300 and D100C
- CVE-2026-34124 Denial of Service via Path Expansion Overflow in HTTP Service in TP-Link Tapo C520WS
- CVE-2026-34123 Whitelist Validation Bypass in TP-Link Tapo C520WS
- CVE-2026-34122 Stack-based Buffer Overflow Leading to Denial of Service in TP-Link Tapo C520WS
- CVE-2026-34121 Authentication Bypass in DS Configuration Service via HTTP Request Parsing Differential of TP-Link Tapo C520WS
- CVE-2026-34120 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
- CVE-2026-3412 itsourcecode University Management System att_single_view.php cross site scripting
- CVE-2026-34119 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C520WS
- CVE-2026-34118 Heap-based Buffer Overflow Vulnerability Leading to Denial-of-Service in TP-Link Tapo C100, C101, C210 & C520WS
- CVE-2026-34117 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text_to_subtitles.php
- CVE-2026-34116 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe.php
- CVE-2026-34115 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in transcribe_amazon.php
- CVE-2026-34114 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate_text.php
- CVE-2026-34113 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech_text.php
- CVE-2026-34112 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac.php
- CVE-2026-34111 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speechmac_text.php
- CVE-2026-34110 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in complex_start.php
- CVE-2026-3411 itsourcecode University Management System admin_single_student_update.php sql injection
- CVE-2026-34109 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in speech.php
- CVE-2026-34108 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in text.php
- CVE-2026-34107 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in translate.php
- CVE-2026-34106 Guardian Language-System Unauthenticated OS Command Injection via id Parameter in subtitles.php
- CVE-2026-34105 Guardian Language-System SQL Injection via id Parameter in translate_text.php
- CVE-2026-34104 Guardian Language-System SQL Injection via name Parameter in designer.php
- CVE-2026-34103 Guardian Language-System SQL Injection via id Parameter in subtitles.php
- CVE-2026-34102 Guardian Language-System SQL Injection via id Parameter in job_info_get.php
- CVE-2026-34101 Guardian Language-System SQL Injection via id Parameter in text_file.php
- CVE-2026-34100 Guardian Language-System SQL Injection via id Parameter in media.php