Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 706 of 1013.
- CVE-2026-33788 Junos OS Evolved: Local, authenticated attacker can gain privileged access to FPCs
- CVE-2026-33787 Junos OS: SRX1500, SRX4100, SRX4200, SRX4600: When a specific show command is executed chassisd crashes
- CVE-2026-33786 Junos OS: SRX1600, SRX2300, SRX4300: When a specific show command is executed chassisd crashes
- CVE-2026-33785 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands in a JDM/CSDS scenario
- CVE-2026-33784 Hardcoded credentials in JSI LWC
- CVE-2026-33783 Denial of service in Junos OS Evolved
- CVE-2026-33782 Junos OS: MX Series: In specific DHCPv6 scenarios jdhcpd memory increases continuously with subscriber logouts
- CVE-2026-33781 Denial of service in Junos OS
- CVE-2026-33780 Junos OS and Junos OS Evolved: In an EVPN-MPLS scenario churn of ESI routes causes a memory leak in l2ald
- CVE-2026-3378 Tenda F453 qossetting fromqossetting buffer overflow
- CVE-2026-33779 Junos OS: SRX Series: Insufficient certificate verification for device to SD cloud communication
- CVE-2026-33778 Junos OS: SRX Series, MX Series: When a specifically malformed first ISAKMP packet is received kmd/iked crashes
- CVE-2026-33776 Junos OS and Junos OS Evolved: Specific low privileged CLI command exposes sensitive information
- CVE-2026-33775 Junos OS: MX Series: Mismatch between configured and received packet types causes memory leak in bbe-smgd
- CVE-2026-33774 Junos OS: MX Series: Firewall filters on lo0.<non-0> in the default routing instance are not in effect
- CVE-2026-33773 Security feature bypass in Junos OS
- CVE-2026-33771 CTP OS: Configuring password requirements does not work which permits the use of weak passwords
- CVE-2026-33770 AVideo has SQL Injection in category.php fixCleanTitle() via Unparameterized clean_title and id Variables
- CVE-2026-3377 Tenda F453 SafeUrlFilter fromSafeUrlFilter buffer overflow
- CVE-2026-33769 Astro: Remote allowlist bypass via unanchored matchPathname wildcard
- CVE-2026-33768 Astro: Unauthenticated Path Override via `x-astro-path` / `x_astro_path`
- CVE-2026-33767 AVideo has SQL Injection via Partial Prepared Statement — videos_id Concatenated Directly into Query
- CVE-2026-33766 AVideo has SSRF Protection Bypass via HTTP Redirect in Image Download Endpoints
- CVE-2026-33765 Pi-hole Web Interface has a Command Injection Vulnerability
- CVE-2026-33764 AVideo: IDOR in AI Plugin Allows Stealing Other Users' AI-Generated Metadata and Transcriptions
- CVE-2026-33763 AVideo has an Unauthenticated Video Password Brute-Force Vulnerability via Unrate-Limited Boolean Oracle
- CVE-2026-33762 go-git: Missing validation decoding Index v4 files leads to panic
- CVE-2026-33761 AVideo: Unauthenticated Access to Scheduler Plugin Endpoints Leaks Scheduled Tasks, Email Content, and User Mappings
- CVE-2026-33760 Langflow: IDOR/BOLA in Monitor API — Missing Ownership Enforcement on 7 Endpoints
- CVE-2026-3376 Tenda F453 SafeMacFilter fromSafeMacFilter buffer overflow
- CVE-2026-33759 AVideo: Unauthenticated IDOR in playlistsVideos.json.php Exposes Private Playlist Contents
- CVE-2026-33758 OpenBao has Reflected XSS in its OIDC authentication error message
- CVE-2026-33757 OpenBao lacks user confirmation for OIDC direct callback mode
- CVE-2026-33756 Saleor Affected by Denial of Service via Unbounded GraphQL Query Batching
- CVE-2026-33755 Authenticated SQL Injection in Contact/query addressBookIds filter
- CVE-2026-33754 Wazuh: Unauthenticated cluster packet length leads to uncontrolled memory allocation (remote DoS)
- CVE-2026-33753 Improper Certificate Validation in rfc3161-client
- CVE-2026-33752 Redirect-based SSRF leading to internal network access in curl_cffi (with TLS impersonation bypass)
- CVE-2026-33751 n8n Vulnerable to LDAP Filter Injection in LDAP Node
- CVE-2026-33750 brace-expansion: Zero-step sequence causes process hang and memory exhaustion
- CVE-2026-3375 LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints
- CVE-2026-33749 n8n Vulnerable to XSS via Binary Data Inline HTML Rendering
- CVE-2026-33748 BuildKit Git URL subdir component can cause access to restricted files
- CVE-2026-33747 BuildKit vulnerable to malicious frontend causing file escape outside of storage root
- CVE-2026-33746 Convoy: JWT Signature Verification Bypass Allows Authentication as Arbitrary Users
- CVE-2026-33745 cpp-httplib Client Leaks Authentication Credentials to Untrusted Hosts on Cross-Origin HTTP Redirect
- CVE-2026-33744 BentoML has Dockerfile Command Injection via system_packages in bentofile.yaml
- CVE-2026-33743 Incus vulnerable to denial of source through crafted bucket backup file
- CVE-2026-33742 Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes
- CVE-2026-33741 EspoCRM: Stored XSS via SVG attachment loading same-origin JavaScript
- CVE-2026-33740 EspoCRM: Email importEml can import and delete another user's attachment by raw fileId
- CVE-2026-33739 FOG has Stored XSS in Multiple Management Pages
- CVE-2026-33738 Lychee Vulnerable to Stored XSS via Photo Description in RSS/Atom/JSON Feed (No Sanitization on Public Endpoint)
- CVE-2026-33737 Chamilo LMS has an XML External Entity (XXE) Injection
- CVE-2026-33736 Chamilo LMS has an Insecure Direct Object Reference (IDOR) - User Data Exposure
- CVE-2026-33735 MyTube has an Improper Access Control that Allows Complete Application Takeover
- CVE-2026-33734 FOSSBilling has improper SQL neutralization in `Massmailer` recipient filters
- CVE-2026-33733 EspoCRM has Admin TemplateManager path traversal that allows arbitrary file read write and delete
- CVE-2026-33732 srvx is vulnerable to middleware bypass via absolute URI in request line
- CVE-2026-33731 AVideo has an Authorize.Net Webhook Signature Bypass that Enables Wallet Balance Inflation via Forged Payment Data
- CVE-2026-33730 Open Source Point of Sale has an IDOR in Password Change (Home)
- CVE-2026-33729 OpenFGA has an Authorization Bypass through cached keys
- CVE-2026-33728 dd-trace-java: Unsafe deserialization in RMI instrumentation may lead to remote code execution
- CVE-2026-33727 Pi-hole has a Local Privilege Escalation (post-compromise, pihole -> root).
- CVE-2026-33726 Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic
- CVE-2026-33725 Metabase vulnerable to RCE and Arbitrary File Read via H2 JDBC INIT Injection in EE Serialization Import
- CVE-2026-33724 n8n's Source Control SSH Configuration Uses StrictHostKeyChecking=no
- CVE-2026-33723 AVideo Vulnerable to SQL Injection in Subscribe Endpoint via Unsanitized user_id Parameter in subscribe.php
- CVE-2026-33722 n8n Has External Secrets Authorization Bypass in Credential Saving
- CVE-2026-33721 MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
- CVE-2026-33720 n8n Has Authorization Bypass in OAuth Callback via N8N_SKIP_AUTH_ON_OAUTH_CALLBACK
- CVE-2026-33719 AVideo: Unauthenticated CDN Configuration Takeover via Empty Default Key Bypass and Mass-Assignment
- CVE-2026-33718 OpenHands is Vulnerable to Command Injection through its Git Diff Handler
- CVE-2026-33717 AVideo: Remote Code Execution via PHP Temp File in Encoder downloadURL
- CVE-2026-33716 AVideo Allows Unauthenticated Live Stream Control via Token Verification URL Override in control.json.php
- CVE-2026-33715 Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action
- CVE-2026-33714 Chamilo LMS has Authenticated SQL Injection in statistics.ajax.php users_active action (2.0 RC2)
- CVE-2026-33713 n8n Vulnerable to SQL Injection in Data Table Node via orderByColumn Expression
- CVE-2026-33712 TypeBot: Unauthenticated SSRF via isolated-vm fetch in preview chat endpoint bypasses SSRF controls
- CVE-2026-33711 Incus vulnerable to local privilege escalation through VM screenshot path
- CVE-2026-33710 Chamilo LMS has Weak REST API Key Generation (Predictable)
- CVE-2026-3371 Missing authorization in Tutor LMS – eLearning and online course solution
- CVE-2026-33709 JupyterHub has an Open Redirect Vulnerability
- CVE-2026-33708 Chamilo LMS has REST API PII Exposure via get_user_info_from_username
- CVE-2026-33707 Weak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms
- CVE-2026-33706 Chamilo LMS has a REST API Self-Privilege Escalation (Student → Teacher)
- CVE-2026-33705 Chamilo LMS has unauthenticated access to Twig template source files exposes application logic
- CVE-2026-33704 Chamilo LMS Affected by Authenticated Arbitrary File Write via BigUpload endpoint
- CVE-2026-33703 Chamilo LMS Critical IDOR: Any Authenticated User Can Extract All Users’ Personal Data and API Tokens
- CVE-2026-33702 Chamilo LMS has an Insecure Direct Object Reference (IDOR)
- CVE-2026-33701 OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
- CVE-2026-33700 Vikunja has a Link Share Delete IDOR — Missing Project Ownership Check Allows Cross-Project Link Share Deletion
- CVE-2026-33699 pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
- CVE-2026-33698 Chamilo LMS affected by unauthenticated RCE in main/install folder
- CVE-2026-33697 CoCoS attested TLS is vulnerable to relay attacks via extracted ephemeral TLS keys
- CVE-2026-33696 n8n Vulnerable to Prototype Pollution in XML & GSuiteAdmin node parameters lead to RCE
- CVE-2026-33694 Junction File Manipulation
- CVE-2026-33693 Lemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()
- CVE-2026-33692 AVideo Has Unauthenticated .env File Exposure via Official Docker Compose Configuration
- CVE-2026-33691 OWASP CRS: Whitespace padding in filenames bypasses file upload extension checks