Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 715 of 1013.
- CVE-2026-32891 Anchorr Privilege Escalation: Jellyseerr User → Anchorr Admin via Stored XSS
- CVE-2026-32890 Cross-site scripting in Anchorr
- CVE-2026-3289 Sanluan PublicCMS Template Cache Generation TemplateCacheComponent.java saveMetadata path traversal
- CVE-2026-32889 tinytag: Denial of Service via non-terminating SYLT frame parsing loop
- CVE-2026-32888 Open Source Point of Sale is Vulnerable to SQL Injection Through its Item Search Functionality
- CVE-2026-32887 Effect Bug: `AsyncLocalStorage` context lost/contaminated inside Effect fibers under concurrent load with RPC
- CVE-2026-32886 Parse Server's Cloud function dispatch crashes server via prototype chain traversal
- CVE-2026-32885 DDEV has ZipSlip path traversal in tar and zip archive extraction
- CVE-2026-32884 Botan: Case-Insensitive CN Values Bypass DNS excludedSubtrees Name Constraints (RFC 5280 Violation)
- CVE-2026-32883 Botan: Missing OCSP Response Signature Verification Allows MitM Certificate Revocation Bypass
- CVE-2026-32882 libheif: Heap Buffer OOB Read in overlay compositing due to wrong alpha stride
- CVE-2026-32881 ewe has an Overly Permissive List of Allowed Inputs
- CVE-2026-32880 ChurchCRM is vulnerable to Stored XSS through JSON handling in SystemSettings.php
- CVE-2026-3288 ingress-nginx rewrite-target nginx configuration injection
- CVE-2026-32879 New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure
- CVE-2026-32878 Parse Server vulnerable to schema poisoning via prototype pollution in deep copy
- CVE-2026-32877 Botan: Heap Buffer Over-read in SM2 Decryption via Undersized C3 Hash Field
- CVE-2026-32875 UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop
- CVE-2026-32874 UltraJSON has a Memory Leak parsing large integers allows DoS
- CVE-2026-32873 ewe: Loop with Unreachable Exit Condition ('Infinite Loop')
- CVE-2026-32871 FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
- CVE-2026-32870 Kirby has XML injection in its XML creator toolkit
- CVE-2026-3287 youlaitech youlai-mall App-side Product Pagination Endpoint SpuController.java listPagedSpuForApp sql injection
- CVE-2026-32869 OPEXUS eComplaint and eCASE XSS via Name of Organization field
- CVE-2026-32868 OPEXUS eComplaint and eCASE XSS via my information
- CVE-2026-32867 OPEXUS eComplaint unauthenticated file upload
- CVE-2026-32866 OPEXUS eComplaint and eCase stored XSS via profile first and last name
- CVE-2026-32865 OPEXUS eComplaint and eCase insecure password reset
- CVE-2026-32864 Out-of-Bounds Read in mgcore_SH_25_3!aligned_free()
- CVE-2026-32863 Out-of-Bounds Read in sentry_transaction_context_set_operation()
- CVE-2026-32862 Out-of-Bounds Write in ResFileFactory::InitResourceMgr()
- CVE-2026-32861 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvclass file
- CVE-2026-32860 Out-of-Bounds Write Vulnerability in NI LabVIEW when loading lvlib file
- CVE-2026-3286 itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery
- CVE-2026-32859 ByteDance DeerFlow Stored XSS via Inline Artifact Rendering
- CVE-2026-32857 Firecrawl Playwright Service SSRF Protection Bypass via Missing Post-Redirect Validation
- CVE-2026-32856 Ellucian Banner Self-Service Reflected XSS via dateConverter
- CVE-2026-32854 LibVNCServer httpd proxy NULL Pointer Dereference
- CVE-2026-32853 LibVNCServer UltraZip Encoding Heap Out-of-bounds Read
- CVE-2026-32852 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter
- CVE-2026-32851 MailEnable < 10.55 Reflected XSS via FreeBusy.aspx StartDate Parameter
- CVE-2026-32850 MailEnable < 10.55 Reflected XSS via ManageShares.aspx SelectedIndex Parameter
- CVE-2026-3285 berry-lang berry be_lexer.c scan_string out-of-bounds
- CVE-2026-32849 NetBSD Signed Integer Overflow in cryptodev_op via cryptodev.c
- CVE-2026-32848 NetBSD cryptodev Race Condition Double-Free via cryptodev_op()
- CVE-2026-32847 DeepCode 1.2.0 Path Traversal via SPA Catch-All Route in main.py
- CVE-2026-32846 OpenClaw < 2026.3.28 Media Parsing Path Traversal to Arbitrary File Read
- CVE-2026-32845 jkuhlmann / cgltf <= 1.15 Sparse Accessor Validation Integer Overflow
- CVE-2026-32844 XinLiangCoder / php_api_doc Reflected XSS via list_method.php
- CVE-2026-32843 Linkit ONE Location Aware Sensor System (LASS) Reflected XSS via PM25.php
- CVE-2026-32842 Edimax GS-5008PL <= 1.00.54 Admin Credentials Stored in Cleartext
- CVE-2026-32841 Edimax GS-5008PL <= 1.00.54 Global Authentication State Across All Clients
- CVE-2026-32840 Edimax GS-5008PL <= 1.00.54 Stored XSS via Device Name
- CVE-2026-3284 libvips extract.c vips_extract_area_build integer overflow
- CVE-2026-32839 Edimax GS-5008PL <= 1.00.54 CSRF via Management CGI Endpoints
- CVE-2026-32838 Edimax GS-5008PL <= 1.00.54 Transmits Credentials Over Cleartext HTTP
- CVE-2026-32837 mackron / miniaudio Out-of-Bounds Read in BEXT Coding History Parsing
- CVE-2026-32836 mackron / dr_libs dr_flac.h Excessive Memory Allocation in PICTURE Metadata Parsing
- CVE-2026-32834 Easy PayPal Events & Tickets < 1.4 Authentication Bypass via QR Code Scanning
- CVE-2026-32833 Cudy LT300 3.0 OS Command Injection via NTP Configuration
- CVE-2026-3283 libvips extract.c vips_extract_band_build out-of-bounds
- CVE-2026-32829 lz4_flex: Decompression can leak information from uninitialized memory or reused output buffer
- CVE-2026-32828 Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration
- CVE-2026-32825 dataCycle No Brute-Force Protection On Web And API Login Endpoints
- CVE-2026-32824 dataCycle User API Password Reset And Confirmation Flows Trust Attacker- Controlled Redirect Targets
- CVE-2026-32823 dataCycle State-Changing GET Endpoints Enable CSRF
- CVE-2026-32822 dataCycle Unauthenticated Reflected DOM XSS Via flash[...] On Public Pages
- CVE-2026-32821 API Collection Impersonation Via user_email And Missing Object- Level Authorization
- CVE-2026-32820 dataCycle Public Markdown Path Traversal Via /docs/*path
- CVE-2026-3282 libvips unpremultiply.c vips_unpremultiply_build out-of-bounds
- CVE-2026-32819 dataCycle User Directory Enumeration Via /users/search
- CVE-2026-32818 Admidio is Missing Authorization on Forum Topic and Post Deletion
- CVE-2026-32817 Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion
- CVE-2026-32816 Admidio has Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions
- CVE-2026-32815 SiYuan: Cross-Origin WebSocket Hijacking via Authentication Bypass — Unauthenticated Information Disclosure
- CVE-2026-32814 libheif: Uninitialized Heap Memory Information Leak via Failed Grid Tiles
- CVE-2026-32813 Admidio: Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
- CVE-2026-32812 Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint
- CVE-2026-32811 Heimdall: Path received via Envoy gRPC corrupted when containing query string
- CVE-2026-32810 Halloy has insecure file permissions on credential files
- CVE-2026-3281 libvips bandrank.c vips_bandrank_build heap-based overflow
- CVE-2026-32808 pyLoad: Arbitrary File Deletion via Path Traversal during Encrypted 7z Password Verification
- CVE-2026-32807 dataCycle Public DataLink Text File Download Ignores Validity And Authorization
- CVE-2026-32806 dataCycle Authorization Bypass Via /remote_render
- CVE-2026-32805 Romeo is vulnerable to Archive Slip due to missing checks in sanitization
- CVE-2026-32804 Auth bypass in PowerFlex
- CVE-2026-32803 Other in PowerScale OneFS
- CVE-2026-32802 Privilege escalation in PowerPath
- CVE-2026-32794 Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange
- CVE-2026-32792 Packet of death with DNSCrypt
- CVE-2026-32791 Privilege escalation in Intel(R) Performance Counter Monitor (Intel(R) PCM)
- CVE-2026-3279 Enable jQuery Migrate Helper <= 1.4.1 - Missing Authorization to Authenticated (Subscriber+) jQuery Version Downgrade
- CVE-2026-32788 Privilege escalation in Approximate Bayesian Inference Framework
- CVE-2026-3278 XSS Vulnerability discovered in OpenText™ ZENworks Service Desk.
- CVE-2026-32778 Null dereference in libexpat
- CVE-2026-32777 Denial of service in libexpat
- CVE-2026-32776 Null dereference in libexpat
- CVE-2026-32775 Integer overflow in libexif
- CVE-2026-32774 Vulnogram - Stored Cross-Site Scripting via Comment Hypertext
- CVE-2026-32773 Apache Spark: XSS Vulnerability in Spark Web 3.5.4