Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 705 of 1013.
- CVE-2026-33891 Forge has Denial of Service via Infinite Loop in BigInteger.modInverse() with Zero Input
- CVE-2026-33890 MyTube has an Unauthenticated Admin Privilege Escalation via Passkey Registration
- CVE-2026-3389 Squirrel sqstdrex.cpp sqstd_rex_newnode null pointer dereference
- CVE-2026-33889 ApostropheCMS: Stored XSS via CSS Custom Property Injection in `@apostrophecms/color-field` Escaping Style Tag Context
- CVE-2026-33888 ApostropheCMS: publicApiProjection Bypass via `project` Query Builder in Piece-Type REST API
- CVE-2026-33887 Statamic allows unauthorized content access through missing authorization in its revision controllers
- CVE-2026-33886 Statamic's sensitive configuration values are exposed to content editors via Antlers-enabled fields
- CVE-2026-33885 Statamic has an Open Redirect on unauthenticated endpoints via URL parsing differential
- CVE-2026-33884 Statamic's live preview token bypasses content protection for unrelated entries
- CVE-2026-33883 Statamic has Reflected XSS via unescaped redirect parameter in its password reset form tag
- CVE-2026-33882 Statamic's Markdown preview endpoint exposes sensitive user data
- CVE-2026-33881 Code injection in windmill
- CVE-2026-3388 Squirrel sqcompiler.cpp UnaryOP recursion
- CVE-2026-33879 FLIP doesn't have rate limiting or brute-force protection on login
- CVE-2026-33877 ApostropheCMS: User Enumeration via Timing Side Channel in Password Reset Endpoint
- CVE-2026-33875 Authenticator Vulnerable to Authentication Flow Hijack
- CVE-2026-33874 Authenticator vulnerable to Remote Code Execution
- CVE-2026-33873 Langflow has Authenticated Code Execution in Agentic Assistant Validation
- CVE-2026-33872 elixir-nodejs has Cross-User Data Leakage or Information Disclosure due to Worker Protocol Race Condition
- CVE-2026-33871 Netty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass
- CVE-2026-33870 Netty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
- CVE-2026-3387 wren-lang wren wren_compiler.c getByteCountForArguments null pointer dereference
- CVE-2026-33869 Mastodon has a denial of service for quote authorization
- CVE-2026-33868 Mastodon has a GET-Based Open Redirect via '/web/%2F<domain>'
- CVE-2026-33867 AVideo has Plaintext Video Password Storage
- CVE-2026-33866 Authorization Bypass in MLflow AJAX Endpoint
- CVE-2026-33865 Stored XSS via unsafe YAML parsing in MLflow
- CVE-2026-33862 Cross-site scripting in Teamcenter V2312
- CVE-2026-3386 wren-lang wren wren_compiler.c emitOp out-of-bounds
- CVE-2026-33858 Apache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom API
- CVE-2026-33857 Apache HTTP Server: Off-by-one OOB reads in AJP getter functions
- CVE-2026-33856 Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7
- CVE-2026-33855 Integer Overflow or Wraparound in MolotovCherry Android-ImageMagick7
- CVE-2026-33854 Out-of-bounds Write in MolotovCherry Android-ImageMagick7
- CVE-2026-33853 NULL Pointer Dereference in MolotovCherry Android-ImageMagick7
- CVE-2026-33852 Missing Release of Memory after Effective Lifetime in MolotovCherry Android-ImageMagick7
- CVE-2026-33851 Improper Restriction of Operations within the Bounds of a Memory Buffer in joncampbell123 doslib
- CVE-2026-33850 Out-of-bounds Write in WujekFoliarz DualSenseY-v2
- CVE-2026-3385 wren-lang wren wren_compiler.c resolveLocal recursion
- CVE-2026-33849 Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms
- CVE-2026-33848 Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms
- CVE-2026-33847 Improper Restriction of Operations within the Bounds of a Memory Buffer in linkingvision rapidvms
- CVE-2026-33846 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly
- CVE-2026-33845 Gnutls: gnutls: denial of service via dtls zero-length fragment
- CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
- CVE-2026-33843 Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
- CVE-2026-33842 Windows File Explorer Information Disclosure Vulnerability
- CVE-2026-33841 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-33840 Win32k Elevation of Privilege Vulnerability
- CVE-2026-3384 ChaiScript chaiscript_eval.hpp Function_Push_Pop recursion
- CVE-2026-33839 Win32k Elevation of Privilege Vulnerability
- CVE-2026-33838 Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
- CVE-2026-33837 Windows TCP/IP Local Elevation of Privilege Vulnerability
- CVE-2026-33835 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-33834 Windows Event Logging Service Elevation of Privilege Vulnerability
- CVE-2026-33833 Azure Machine Learning Notebook Spoofing Vulnerability
- CVE-2026-3383 ChaiScript boxed_number.hpp go divide by zero
- CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability
- CVE-2026-33828 Windows Device Health Attestation (DHA) Elevation of Privilege Vulnerability
- CVE-2026-33827 Windows TCP/IP Remote Code Execution Vulnerability
- CVE-2026-33826 Windows Active Directory Remote Code Execution Vulnerability
- CVE-2026-33825 Microsoft Defender Insufficient Granularity of Access Control
- CVE-2026-33824 Microsoft Internet Key Exchange (IKE) Service Extensions Double Free
- CVE-2026-33823 Microsoft Team Events Portal Information Disclosure Vulnerability
- CVE-2026-33822 Microsoft Word Information Disclosure Vulnerability
- CVE-2026-33821 Microsoft Dynamics 365 Customer Insights Elevation of Privilege Vulnerability
- CVE-2026-3382 ChaiScript boxed_number.hpp get_as memory corruption
- CVE-2026-33819 Microsoft Bing Remote Code Execution Vulnerability
- CVE-2026-33818 Enforce maximum recursion depth in encoding/asn1
- CVE-2026-33816 CVE-2026-33816 in github.com/jackc/pgx
- CVE-2026-33815 CVE-2026-33815 in github.com/jackc/pgx
- CVE-2026-33814 Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
- CVE-2026-33813 Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
- CVE-2026-33812 Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
- CVE-2026-33811 Crash when handling long CNAME response in net
- CVE-2026-33810 Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509
- CVE-2026-3381 Compress::Raw::Zlib versions through 2.219 for Perl use potentially insecure versions of zlib
- CVE-2026-33809 OOM from malicious IFD offset in golang.org/x/image/tiff
- CVE-2026-33808 @fastify/express has a middleware authentication bypass via URL normalization gaps (duplicate slashes and semicolons)
- CVE-2026-33807 @fastify/express vulnerable to middleware path doubling causing authentication bypass in child plugin scopes
- CVE-2026-33806 fastify vulnerable to Body Schema Validation Bypass via Leading Space in Content-Type Header
- CVE-2026-33805 @fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers
- CVE-2026-33804 @fastify/middie vulnerable to middleware bypass via deprecated ignoreDuplicateSlashes option
- CVE-2026-33803 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-33802 Junos OS: EX Series: Unauthorized users can execute service-impacting CLI command
- CVE-2026-33801 Junos OS and Junos OS Evolved: When a specifically malformed BGP route update is received RPD crashes
- CVE-2026-33800 Junos OS: MX Series: In a VC scenario a high rate of micro-BFD session flaps will cause an FPC crash
- CVE-2026-3380 Tenda F453 L7Im frmL7ImForm buffer overflow
- CVE-2026-33799 Junos OS and Junos OS Evolved: Receipt of a specific SNMPv3 request results in memory leak and eventual snmpd crash
- CVE-2026-33798 Junos OS and Junos OS Evolved: SRX Series: An attacker causes remote code execution when SRX chassis-cluster is enabled
- CVE-2026-33797 Junos OS and Junos OS Evolved: An attacker sending a specific genuine BGP packet causes a BGP reset
- CVE-2026-33796 Junos OS and Junos OS Evolved: An attacker causes remote root command execution when BMP route monitoring is enabled
- CVE-2026-33795 Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP Prefix-SID routes are re-advertised
- CVE-2026-33794 Junos OS Evolved: PTX Series: Receipt of repeated ECMP routing updates results in PFE crash
- CVE-2026-33793 Privilege escalation in Junos OS
- CVE-2026-33792 Junos OS: SRX Series: An attacker causes remote code execution and denial of service when a GRE tunnel is configured
- CVE-2026-33791 Junos OS and Junos OS Evolved: Execution of crafted CLI commands allows for arbitrary shell injection as root
- CVE-2026-33790 Denial of service in Junos OS
- CVE-2026-3379 Tenda F453 SetIpBind fromSetIpBind buffer overflow
- CVE-2026-33789 Memory corruption in Junos OS