Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 730 of 1013.
- CVE-2026-31436 dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
- CVE-2026-31435 netfs: Fix read abandonment during retry
- CVE-2026-31434 btrfs: fix leak of kobject name for sub-group space_info
- CVE-2026-31433 ksmbd: fix potencial OOB in get_file_all_info() for compound requests
- CVE-2026-31432 ksmbd: fix OOB write in QUERY_INFO for compound requests
- CVE-2026-31431 Linux Kernel Incorrect Resource Transfer Between Spheres
- CVE-2026-31430 X.509: Fix out-of-bounds access when parsing extensions
- CVE-2026-3143 Total Upkeep <= 1.17.1 - Missing Authorization to Unauthenticated Rollback Cancellation
- CVE-2026-31429 net: skb: fix cross-cache free of KFENCE-allocated skb head
- CVE-2026-31428 netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD
- CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
- CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup()
- CVE-2026-31425 rds: ib: reject FRMR registration before IB connection is established
- CVE-2026-31424 netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP
- CVE-2026-31423 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()
- CVE-2026-31422 net/sched: cls_flow: fix NULL pointer dereference on shared blocks
- CVE-2026-31421 net/sched: cls_fw: fix NULL pointer dereference on shared blocks
- CVE-2026-31420 bridge: mrp: reject zero test interval to avoid OOM panic
- CVE-2026-3142 Cross-site scripting in Pinterest Site Verification plugin using Meta Tag
- CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast()
- CVE-2026-31418 netfilter: ipset: drop logically empty buckets in mtype_del
- CVE-2026-31417 net/x25: Fix overflow when accumulating packets
- CVE-2026-31416 netfilter: nfnetlink_log: account for netlink header size
- CVE-2026-31415 ipv6: avoid overflows in ip6_datagram_send_ctl()
- CVE-2026-31414 netfilter: nf_conntrack_expect: use expect->helper
- CVE-2026-31413 bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR
- CVE-2026-31412 usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks()
- CVE-2026-31411 net: atm: fix crash due to unvalidated vcc pointer in sigd_send()
- CVE-2026-31410 ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION
- CVE-2026-3141 FormGent <= 1.9.2- Missing Authorization to Unauthenticated Arbitrary File Deletion via 'file_token' Parameter
- CVE-2026-31409 ksmbd: unset conn->binding on failed binding request
- CVE-2026-31408 Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold
- CVE-2026-31407 netfilter: conntrack: add missing netlink policy validations
- CVE-2026-31406 xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini()
- CVE-2026-31405 media: dvb-net: fix OOB access in ULE extension header tables
- CVE-2026-31403 NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd
- CVE-2026-31402 nfsd: fix heap overflow in NFSv4.0 LOCK replay cache
- CVE-2026-31401 HID: bpf: prevent buffer overflow in hid_hw_request
- CVE-2026-31400 sunrpc: fix cache_request leak in cache_release
- CVE-2026-3140 Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation
- CVE-2026-31399 nvdimm/bus: Fix potential use after free in asynchronous initialization
- CVE-2026-31398 mm/rmap: fix incorrect pte restoration for lazyfree folios
- CVE-2026-31397 mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd()
- CVE-2026-31396 net: macb: fix use-after-free access to PTP clock
- CVE-2026-31395 bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler
- CVE-2026-31394 mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations
- CVE-2026-31393 Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access
- CVE-2026-31392 smb: client: fix krb5 mount with username option
- CVE-2026-31391 crypto: atmel-sha204a - Fix OOM ->tfm_count leak
- CVE-2026-31390 drm/xe: Fix memory leak in xe_vm_madvise_ioctl
- CVE-2026-3139 Missing authorization in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- CVE-2026-31389 spi: fix use-after-free on controller registration failure
- CVE-2026-31388 Apache OFBiz: Cross-Tenant Data Exposure via Program Export Feature
- CVE-2026-31387 Apache OFBiz: Cookie Manipulation Allows Authenticated JWT Forgery and Account Impersonation
- CVE-2026-31386 Command injection in LSWS Enterprise
- CVE-2026-31382 Gainsight Assist reflected XSS/HTML injection
- CVE-2026-31381 Gainsight Assist plugin information disclosure
- CVE-2026-31380 Apache OFBiz: FreeMarker SSTI via Duplicate Parameter Sanitization Bypass
- CVE-2026-3138 Missing authorization in Product Filter for WooCommerce by WBW
- CVE-2026-31379 Path traversal in Apache OFBiz
- CVE-2026-31378 Apache OFBiz: JSON Attribute Override and URL Allowlist Bypass Leads to Remote Code Execution
- CVE-2026-31377 Apache Doris: Improper Authentication Allows Unauthorized Access to FE Meta Service
- CVE-2026-31370 Information Leak Vulnerability in Honor E
- CVE-2026-3137 CodeAstro Food Ordering System food_ordering.exe stack-based overflow
- CVE-2026-31369 Privilege Bypass in PcManager
- CVE-2026-31368 Privilege Bypass in AiAssistant
- CVE-2026-3136 Google Cloud Build Comment Control Bypass
- CVE-2026-31354 Feehi CMS has authenticated stored cross-site scripting (XSS) vulnerabilities via the Permissions module
- CVE-2026-31353 Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Category module
- CVE-2026-31352 Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Role Management module
- CVE-2026-31351 Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module
- CVE-2026-31350 Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the Page Sign parameter
- CVE-2026-3135 itsourcecode News Portal Project add-category.php sql injection
- CVE-2026-3134 itsourcecode News Portal Project edit-category.php sql injection
- CVE-2026-3133 itsourcecode Document Management System Login loging.php sql injection
- CVE-2026-3132 Master Addons for Elementor Premium <= 2.1.3 - Authenticated (Subscriber+) Remote Code Execution via render_preview
- CVE-2026-31317 Craftql vulnerable to Server-Side Request Forgery
- CVE-2026-31313 Feehi CMS has an authenticated stored cross-site scripting (XSS) vulnerability via the creation/editing module
- CVE-2026-3131 Missing authorization in Server
- CVE-2026-31309 Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node from v1.21.1-rc0 before v1.36.0 allows an unauthenticated at
- CVE-2026-3130 Business logic in Server
- CVE-2026-3129 LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes
- CVE-2026-31283 In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address.
- CVE-2026-31282 Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.
- CVE-2026-31281 Totara LMS v19.1.5 and before is vulnerable to HTML Injection.
- CVE-2026-31280 An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service
- CVE-2026-31278 Information disclosure in BioStar 2
- CVE-2026-31272 Missing authorization in mrcms:mrcms
- CVE-2026-31271 megagao production_ssm v1.0 contains an authorization bypass vulnerability in the user addition functionality.
- CVE-2026-31267 Mercusys MW302R MW302R(EU)_V1_1.4.10 Build 231023 is vulnerable to Buffer Overflow in the administrative web interface.
- CVE-2026-31266 Craft CMS 5.9.5 and earlier contains a Missing Authorization vulnerability in the migrate endpoint (/actions/app/migrate).
- CVE-2026-31262 Cross-site scripting in altenar:sportsbook
- CVE-2026-31256 Null dereference in mercurycom:mipc252w firmware
- CVE-2026-31255 Command injection in tenda:ac18 firmware
- CVE-2026-31254 The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains a code injection vulnerability (CWE-9
- CVE-2026-31253 flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
- CVE-2026-31252 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in
- CVE-2026-31251 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in
- CVE-2026-31250 CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in
- CVE-2026-3125 SSRF vulnerability in opennextjs-cloudflare via /cdn-cgi/ path normalization bypass