Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 724 of 1013.
- CVE-2026-32002 OpenClaw < 2026.2.23 - Sandbox Boundary Bypass via Image Tool workspaceOnly Bypass
- CVE-2026-32001 OpenClaw < 2026.2.22 - Node Role Device-Identity Bypass via WebSocket Authentication
- CVE-2026-32000 OpenClaw < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Tool Execution
- CVE-2026-3200 z-9527 admin user.js getUsers sql injection
- CVE-2026-31999 OpenClaw 2026.2.26 < 2026.3.1 - Current Working Directory Injection via Windows Wrapper Resolution Fallback
- CVE-2026-31998 OpenClaw 2026.2.22 < 2026.2.24 - Authorization Bypass in Synology Chat Plugin via Empty allowedUserIds
- CVE-2026-31997 OpenClaw < 2026.3.1 - Executable Rebind via Unbound PATH-token in system.run Approvals
- CVE-2026-31996 OpenClaw < 2026.2.19 - safeBins stdin-only bypass via sort output and recursive grep flags
- CVE-2026-31995 OpenClaw 2026.1.21 < 2026.2.19 - Command Injection via Windows Shell Fallback in Lobster Extension
- CVE-2026-31994 OpenClaw Windows Scheduled Task script generation allowed local command injection via unsafe cmd argument handling
- CVE-2026-31993 OpenClaw < 2026.2.22 - Allowlist Parsing Mismatch in system.run Shell Chains
- CVE-2026-31992 OpenClaw < 2026.2.23 - Allowlist Exec-Guard Bypass via env -S
- CVE-2026-31991 OpenClaw < 2026.2.26 - Authorization Bypass via DM Pairing-Store Leakage in Signal Group Allowlist
- CVE-2026-31990 OpenClaw < 2026.3.2 - Symlink Traversal in stageSandboxMedia Destination
- CVE-2026-3199 Nexus Repository 3 - Authenticated Remote Code Execution via Task Property Injection
- CVE-2026-31989 OpenClaw < 2026.3.1 - Server-Side Request Forgery via web_search Citation Redirect
- CVE-2026-31988 yauzl 3.2.0 - Denial of Service via Off-by-One Error in NTFS Timestamp Parser
- CVE-2026-31987 Apache Airflow: JWT token appearing in logs
- CVE-2026-31986 Apache OFBiz: Unauthenticated RCE via Default JWT Signing Key and Widget Template Injection
- CVE-2026-31985 Security feature bypass in Remote Collector
- CVE-2026-31984 DoS through oversized audit log entries in Guardian/CMC before 26.2.0
- CVE-2026-31983 Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
- CVE-2026-31982 Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
- CVE-2026-31981 HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
- CVE-2026-3198 Improper Access Control in mlflow/mlflow
- CVE-2026-31979 himmelblaud-tasks: local privilege escalation via /tmp symlink attack on Kerberos ccache
- CVE-2026-31978 motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint
- CVE-2026-31976 xygeni-action v5 tag poisoned with C2 backdoor
- CVE-2026-31975 Cloud CLI WebSocket shell injection
- CVE-2026-31974 Blind SSRF on OpenProject instance via webhooks
- CVE-2026-31973 NULL pointer dereference in samtools cram-size
- CVE-2026-31972 samtools mpileup has use-after-free leading to an invalid read
- CVE-2026-31971 HTSlib CRAM decoder vulnerable to buffer overflow
- CVE-2026-31970 HTSlib BGZF index file reader has a heap buffer overflow
- CVE-2026-31969 HTSlib CRAM decoder has a heap buffer overflow
- CVE-2026-31968 HTSlib CRAM decoder vulnerable to buffer overflow
- CVE-2026-31967 HTSlib CRAM reader has out-of-bounds read due to improper validation of input
- CVE-2026-31966 HTSlib CRAM reader has out-of-bounds read due to improper validation of input
- CVE-2026-31965 HTSlib CRAM reader has out-of-bounds reads due to improper validation of input
- CVE-2026-31964 HTSlib CRAM decoder has a NULL Pointer Dereference
- CVE-2026-31963 HTSlib CRAM reader has heap buffer overflow due to improper validation of input
- CVE-2026-31962 HTSlib CRAM reader has heap buffer overflow due to improper validation of input
- CVE-2026-31961 Unbounded memory allocation in Quill via unvalidated size fields in Mach-O binary parsing
- CVE-2026-31960 DoS in Quill via unbounded read of HTTP response body during notarization
- CVE-2026-3196 Qemu-kvm: virtio-snd: integer overflow leading to unbounded memory allocation
- CVE-2026-31959 SSRF in Quill via unvalidated URL from Apple notarization log retrieval
- CVE-2026-31958 Tornado has a DoS due to too many multipart parts
- CVE-2026-31957 Himmelblau unset domain configuration can allow any-tenant authentication at first login for remote deployments
- CVE-2026-31956 Xibo CMS has Preview and SavedReport IDOR via disableUserCheck without controller-level authorization
- CVE-2026-31955 Xibo CMS has Authenticated Server-Side Request Forgery (SSRF) in Remote DataSet Functionality
- CVE-2026-31954 Emlog asynchronous media file deletion missing CSRF protection
- CVE-2026-31953 Xibo CMS has Stored XSS via Notification Body with Zero-Click Execution on Login
- CVE-2026-31952 Xibo CMS API has SQL Injection via DataSet Filter Parameter
- CVE-2026-31951 LibreChat's MCP Server Header Injection Enables OAuth Token Theft
- CVE-2026-31950 LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats
- CVE-2026-3195 Qemu-kvm: virtio-snd: heap buffer overflow in virtio_snd_pcm_in_cb (incomplete fix for cve-2024-7730)
- CVE-2026-31949 LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos
- CVE-2026-31946 OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow
- CVE-2026-31945 LibreChat Server-Side Request Forgery using DNS resolution
- CVE-2026-31944 LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link
- CVE-2026-31943 LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP
- CVE-2026-31942 LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys
- CVE-2026-31941 Server-Side Request Forgery (SSRF) in Chamilo LMS
- CVE-2026-31940 Session Fixation in Chamilo LMS
- CVE-2026-3194 Chia Blockchain RPC Server Master Passphrase get_private_key missing authentication
- CVE-2026-31939 Path Traversal (Arbitrary File Delete) in Chamilo LMS
- CVE-2026-31938 jsPDF has HTML Injection in New Window paths
- CVE-2026-31937 Suricata dcerpc: quadratic complexity in dcerpc buffering
- CVE-2026-31936 Combodo iTop: Unauthorized access to object information via search operation
- CVE-2026-31935 Suricata http2: unbounded resource consumption
- CVE-2026-31934 Suricata smtp/mine: quadratic complexity in extracting urls
- CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection
- CVE-2026-31932 Suricata krb5: quadratic complexity in krb5 buffering
- CVE-2026-31931 Suricata tls: null dereference in tls.alpn rule keyword
- CVE-2026-3193 Chia Blockchain send_transaction cross-site request forgery
- CVE-2026-31928 Daktronics Controller Firmware Use of Hard-coded Credentials
- CVE-2026-31927 Anviz CX7 Firmware Relative Path Traversal
- CVE-2026-31926 IGL-Technologies eParking.fi Insufficiently Protected Credentials
- CVE-2026-31924 Apache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTP
- CVE-2026-31923 Apache APISIX: Openid-connect `tls_verify` field is disabled by default
- CVE-2026-31922 WordPress Fox LMS plugin <= 1.0.6.3 - SQL Injection vulnerability
- CVE-2026-31921 WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - Broken Access Control vulnerability
- CVE-2026-31920 WordPress Product Rearrange for WooCommerce plugin <= 1.2.2 - SQL Injection vulnerability
- CVE-2026-3192 Chia Blockchain RPC Credential rpc_server_base.py _authenticate improper authentication
- CVE-2026-31919 WordPress Advanced Coupons for WooCommerce Coupons plugin <= 4.7.1 - Broken Access Control vulnerability
- CVE-2026-31918 WordPress immonex Kickstart plugin <= 1.13.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-31917 WordPress WP ERP plugin <= 1.16.10 - SQL Injection vulnerability
- CVE-2026-31916 WordPress Latest Post Shortcode plugin <= 14.2.1 - Broken Access Control vulnerability
- CVE-2026-31915 WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability
- CVE-2026-31914 WordPress WP Courses LMS plugin <= 3.2.26 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-31913 WordPress Scape theme < 1.5.16 - Arbitrary File Deletion vulnerability
- CVE-2026-31912 OOBR in libpcap before 1.10.7
- CVE-2026-31911 abort() in libpcap before 1.10.7 on an invalid BPF opcode
- CVE-2026-31910 Apache OFBiz: Improper Input Validation in UI Factory Classes Leads to SSRF and Blind File Access
- CVE-2026-3191 Minify HTML <= 2.1.12 - Cross-Site Request Forgery to Plugin Settings Update
- CVE-2026-31909 Apache OFBiz: Unauthenticated Shipment Label Image Disclosure
- CVE-2026-31908 Apache APISIX: forward auth plugin allows header injection
- CVE-2026-31906 Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal Dialog Parameters
- CVE-2026-31904 CTEK Chargeportal Improper Restriction of Excessive Authentication Attempts
- CVE-2026-31903 IGL-Technologies eParking.fi Improper Restriction of Excessive Authentication Attempts