Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 722 of 1013.
- CVE-2026-32194 Microsoft Bing Images Remote Code Execution Vulnerability
- CVE-2026-32193 Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability
- CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2026-32191 Microsoft Bing Images Remote Code Execution Vulnerability
- CVE-2026-32190 Microsoft Office Remote Code Execution Vulnerability
- CVE-2026-3219 pip doesn't reject concatenated ZIP and tar archives
- CVE-2026-32189 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-32188 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-32186 Microsoft Bing Elevation of Privilege Vulnerability
- CVE-2026-32185 Microsoft Teams Spoofing Vulnerability
- CVE-2026-32184 Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability
- CVE-2026-32183 Windows Snipping Tool Remote Code Execution Vulnerability
- CVE-2026-32181 Connected User Experiences and Telemetry Service Denial of Service Vulnerability
- CVE-2026-3218 Responsive Favicons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-019
- CVE-2026-32178 .NET Spoofing Vulnerability
- CVE-2026-32177 .NET Elevation of Privilege Vulnerability
- CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
- CVE-2026-32175 .NET Core Tampering Vulnerability
- CVE-2026-32174 Azure Bot Service Elevation of Privilege Vulnerability
- CVE-2026-32173 Azure SRE Agent Information Disclosure Vulnerability
- CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability
- CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability
- CVE-2026-32170 Windows Rich Text Edit Elevation of Privilege Vulnerability
- CVE-2026-3217 SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018
- CVE-2026-32169 Azure Cloud Shell Elevation of Privilege Vulnerability
- CVE-2026-32168 Azure Monitor Agent Elevation of Privilege Vulnerability
- CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability
- CVE-2026-32165 Windows User Interface Core Elevation of Privilege Vulnerability
- CVE-2026-32164 Windows User Interface Core Elevation of Privilege Vulnerability
- CVE-2026-32163 Windows User Interface Core Elevation of Privilege Vulnerability
- CVE-2026-32162 Windows COM Elevation of Privilege Vulnerability
- CVE-2026-32161 Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability
- CVE-2026-32160 Windows Push Notifications Elevation of Privilege Vulnerability
- CVE-2026-3216 Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017
- CVE-2026-32159 Windows Push Notifications Elevation of Privilege Vulnerability
- CVE-2026-32158 Windows Push Notifications Elevation of Privilege Vulnerability
- CVE-2026-32157 Remote Desktop Client Remote Code Execution Vulnerability
- CVE-2026-32156 Windows UPnP Device Host Remote Code Execution Vulnerability
- CVE-2026-32155 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-32154 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-32153 Windows Speech Runtime Elevation of Privilege Vulnerability
- CVE-2026-32152 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-32151 Windows Shell Information Disclosure Vulnerability
- CVE-2026-32150 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability
- CVE-2026-3215 Islandora - Moderately critical - Arbitrary file upload, Cross-site scripting - SA-CONTRIB-2026-016
- CVE-2026-32149 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2026-32148 Lockfile checksums not verified in Hex allows dependency integrity bypass
- CVE-2026-32147 SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT
- CVE-2026-32146 Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification
- CVE-2026-32145 Multipart form body parser bypasses body size limits in wisp
- CVE-2026-32144 OCSP designated-responder authorization bypass via missing signature verification
- CVE-2026-32143 Discourse: Admin-only report can be exported by moderators
- CVE-2026-32142 shopware/commercial: `/api/_info/config` route exposes information about licenses
- CVE-2026-32141 flatted: Unbounded recursion DoS in parse() revive phase
- CVE-2026-32140 Dataease: Redshift JDBC RCE Bypass
- CVE-2026-3214 CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015
- CVE-2026-32139 Dataease: Unfiltered active SVG content leads to Stored XSS
- CVE-2026-32138 NEXULEAN API Key Leak
- CVE-2026-32137 DataEase SQL Injection Vulnerability
- CVE-2026-32136 AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass
- CVE-2026-32135 NanoMQ has Heap Buffer Overflow in URI Parameter Parsing
- CVE-2026-32134 NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore
- CVE-2026-32133 2FAuth has Blind SSRF in image parameter allows internal network access and more
- CVE-2026-32132 ZITADEL: Reactivation of Expired Passkey Registration Codes
- CVE-2026-32131 ZITADEL Cross-Tenant Information Disclosure in Management API
- CVE-2026-32130 ZITADEL SCIM Authentication Bypass via URL Encoding
- CVE-2026-3213 Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014
- CVE-2026-32129 Poseidon V1 variable-length input collision via implicit zero-padding
- CVE-2026-32128 FastGPT Python Sandbox Bypass of File-Write Restriction
- CVE-2026-32127 SQL Injection Vulnerability in ajax graphs library (OpenEMR)
- CVE-2026-32126 Missing authorization in openemr
- CVE-2026-32125 OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels
- CVE-2026-32124 OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS)
- CVE-2026-32123 OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced
- CVE-2026-32122 OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2)
- CVE-2026-32121 OpenEMR: Stored DOM XSS via `.html()` in Portal Signer Modal
- CVE-2026-32120 OpenEMR has IDOR in Fee Sheet Product Save
- CVE-2026-3212 Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013
- CVE-2026-32119 OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report page
- CVE-2026-32118 OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text
- CVE-2026-32117 grafanacubism-panel : Stored XSS via javascript: URL in panel zoom link (Editor → Viewer)
- CVE-2026-32116 Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite
- CVE-2026-32114 Discourse's unscoped status lookups leak restricted metadata
- CVE-2026-32113 Discourse: Open redirect via `sso_destination_url` cookie in `enter`
- CVE-2026-32112 ha-mcp has XSS via Unescaped HTML in OAuth Consent Form
- CVE-2026-32111 ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle
- CVE-2026-32110 SiYuan has a Full-Read SSRF via /api/network/forwardProxy
- CVE-2026-3211 Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012
- CVE-2026-32109 Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
- CVE-2026-32108 Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
- CVE-2026-32107 xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails
- CVE-2026-32106 StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts
- CVE-2026-32105 xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode
- CVE-2026-32104 StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings
- CVE-2026-32103 StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation
- CVE-2026-32102 OliveTin Unauthorized Action Output Disclosure via EventStream
- CVE-2026-32101 StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check
- CVE-2026-32100 swag/platform-security: `/api/_info/config` route exposes information about licenses and active security fixes
- CVE-2026-3210 Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011
- CVE-2026-32099 Discourse prevents hidden profile data leak via user onebox