Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 738 of 1013.
- CVE-2026-29649 Security feature bypass in xiangshan:nemu
- CVE-2026-29648 In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg.
- CVE-2026-29647 In OpenXiangShan NEMU, insufficient Smstateen permission enforcement allows lower-privileged code to access IMSIC state via stopei/vstopei C
- CVE-2026-29646 In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interr
- CVE-2026-29645 Other in xiangshan:nemu
- CVE-2026-29644 XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating o
- CVE-2026-29643 XiangShan (Open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) contains an improper
- CVE-2026-29642 A local attacker who can execute privileged CSR operations (or can induce firmware to do so) performs carefully crafted reads/writes to menv
- CVE-2026-2964 higuma web-audio-recorder-js Dynamic Config Handling WebAudioRecorder.js extend prototype pollution
- CVE-2026-2963 Jinher OA C6 OfficeSupplyTypeRight.aspx sql injection
- CVE-2026-29628 A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service
- CVE-2026-2962 D-Link DWR-M960 Scheduled Reboot Configuration Endpoint formDateReboot sub_460F30 stack-based overflow
- CVE-2026-29613 OpenClaw < 2026.2.12 - Webhook Authentication Bypass via Loopback remoteAddress Trust
- CVE-2026-29612 OpenClaw < 2026.2.14 - Denial of Service via Large Base64 Media File Decoding
- CVE-2026-29611 OpenClaw < 2026.2.14 - Local File Inclusion via mediaPath Parameter in BlueBubbles Media Handling
- CVE-2026-29610 OpenClaw < 2026.2.14 - Command Hijacking via Unsafe PATH Handling
- CVE-2026-2961 D-Link DWR-M960 VPN Configuration Endpoint formVpnConfigSetup sub_4196C4 stack-based overflow
- CVE-2026-29609 OpenClaw < 2026.2.14 - Denial of Service via Unbounded URL-backed Media Fetch
- CVE-2026-29608 OpenClaw 2026.3.1 < 2026.3.2 - Approval Integrity Bypass via system.run argv Rewriting
- CVE-2026-29607 OpenClaw < 2026.2.22 - Authorization Bypass via allow-always Wrapper Persistence
- CVE-2026-29606 OpenClaw < 2026.2.14 - Webhook Signature Verification Bypass via ngrok Loopback Compatibility
- CVE-2026-2960 D-Link DWR-M960 formDhcpv6s sub_468D64 stack-based overflow
- CVE-2026-29598 Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow a
- CVE-2026-29597 DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.
- CVE-2026-2959 D-Link DWR-M960 formNewSchedule sub_44E0F8 stack-based overflow
- CVE-2026-2958 D-Link DWR-M960 formWsc sub_457C5C stack-based overflow
- CVE-2026-2957 qinming99 dst-admin File BackupController.java deleteBackup denial of service
- CVE-2026-2956 qinming99 dst-admin restore revertBackup command injection
- CVE-2026-2955 Cross-site scripting in AI Chatbot & Workflow Automation by AIWU
- CVE-2026-2954 Dromara UJCMS ImportDataController import-channel importChanel injection
- CVE-2026-2953 Dromara UJCMS Template WebFileTemplateController.delete deleteDirectory path traversal
- CVE-2026-29522 ZwickRoell Test Data Management < 3.0.8 Path Traversal LFI
- CVE-2026-29521 Hereta ETH-IMC408M CSRF via Configuration Setup
- CVE-2026-29520 Hereta ETH-IMC408M Reflected XSS via ping_ipaddr Parameter
- CVE-2026-2952 Vaelsys HTTP POST Request tree_server.php os command injection
- CVE-2026-29519 Lucee CFML Server Reflected XSS via URL Path Parsing
- CVE-2026-29518 Rsync < 3.4.3 TOCTOU Race Condition Allows Symlink-Based Arbitrary File Write
- CVE-2026-29516 Buffalo TeraStation TS5400R Excessive File Permissions Information Disclosure
- CVE-2026-29515 MiCode FileExplorer SwiFTP Server Authentication Bypass
- CVE-2026-29514 NetBox 4.3.5 - 4.5.4 RCE via RenderTemplateMixin
- CVE-2026-29513 Hereta ETH-IMC408M Stored XSS via Device Location
- CVE-2026-29510 Hereta ETH-IMC408M Stored XSS via Device Name
- CVE-2026-2951 Cross-site scripting in Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor
- CVE-2026-29509 Patool < 4.0.5 Path Traversal via safe_extract() Function
- CVE-2026-2950 lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
- CVE-2026-2949 Cross-site scripting in Xpro Addons — 140+ Widgets for Elementor
- CVE-2026-2948 Server-side request forgery in Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- CVE-2026-2947 rymcu forest User Profile UserInfoController.java updateUserInfo cross site scripting
- CVE-2026-2946 rymcu forest Article Content/Comments/Portfolio XssUtils.java XssUtils.replaceHtmlCode cross site scripting
- CVE-2026-2945 JeecgBoot uploadImgByHttp server-side request forgery
- CVE-2026-2944 Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection
- CVE-2026-2943 SapneshNaik Student Management System index.php cross site scripting
- CVE-2026-2942 ProSolution WP Client <= 1.9.9 - Unauthenticated Arbitrary File Upload via proSol_fileUploadProcess
- CVE-2026-2941 Missing authorization in Linksy Search and Replace
- CVE-2026-2940 Zaher1307 tiny_web_server URL tiny.c out-of-bounds write
- CVE-2026-2939 itsourcecode Student Management System Add Student add_student cross site scripting
- CVE-2026-2938 SourceCodester Student Result Management System update_smtp.php access control
- CVE-2026-2936 Visitor Traffic Real Time Statistics <= 8.4 - Unauthenticated Stored Cross-Site Scripting
- CVE-2026-2935 UTT HiPER 810G ConfigExceptMSN strcpy buffer overflow
- CVE-2026-2934 YiFang CMS Extended Management D_friendLinkGroup.php update cross site scripting
- CVE-2026-2933 YiFang CMS Extended Management D_adManage.php update cross site scripting
- CVE-2026-2932 YiFang CMS Extended Management D_adPosition.php update cross site scripting
- CVE-2026-2931 Amelia Booking <= 9.1.2 - Authenticated (Customer+) Insecure Direct Object Reference to Arbitrary User Password Change
- CVE-2026-2930 Tenda A18 Httpd Service UploadCfg webCgiGetUploadFile stack-based overflow
- CVE-2026-2929 D-Link DWR-M960 Wireless Access Control Endpoint formWlAc sub_453140 stack-based overflow
- CVE-2026-2928 D-Link DWR-M960 WLAN Encryption Configuration Endpoint formWlEncrypt sub_452CCC stack-based overflow
- CVE-2026-2927 D-Link DWR-M960 Operation Mode Configuration Endpoint formOpMode sub_462590 stack-based overflow
- CVE-2026-2926 D-Link DWR-M960 LTE Configuration Endpoint formLteSetup sub_4237AC stack-based overflow
- CVE-2026-2925 D-Link DWR-M960 Bridge VLAN Configuration Endpoint formBridgeVlan sub_42B5A0 stack-based overflow
- CVE-2026-2924 Cross-site scripting in Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- CVE-2026-2923 GStreamer DVB Subtitles Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-29226 Apache OFBiz: Low-Privilege SSRF in Content Component
- CVE-2026-29220 Apache OFBiz: Low-Privilege LFI in Content Component
- CVE-2026-2922 GStreamer RealMedia Demuxer Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2026-2921 GStreamer RIFF Palette Integer Overflow Remote Code Execution Vulnerability
- CVE-2026-29207 Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Content Component
- CVE-2026-29206 SQL injection in WP Squared
- CVE-2026-29205 Path traversal in WP Squared
- CVE-2026-29204 Missing authorization in WHMCS
- CVE-2026-29203 Privilege escalation in WP Squared
- CVE-2026-29202 Code injection in WP Squared
- CVE-2026-29201 Path traversal in WP Squared
- CVE-2026-29200 Missing authorization in Comet Backup
- CVE-2026-2920 GStreamer ASF Demuxer Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2026-29199 phpBB has Password Reset Link Poisoning via Host Header injection
- CVE-2026-29198 SQL injection in Rocket.Chat
- CVE-2026-29197 Missing authorization in Rocket.Chat
- CVE-2026-29196 Netmaker: Service User with Network Access Can Access config files with WireGuard Private Keys
- CVE-2026-29195 Netmaker: Privilege Escalation from Admin to Super-Admin via User Update
- CVE-2026-29194 Netmaker: Insufficient Authorization in Host Token Verification
- CVE-2026-29193 ZITADEL: Bypassing Zitadel Login Behavior and Security Policy in Login V2
- CVE-2026-29192 ZITADEL: Stored XSS via Default URI Redirect Leads to Account Takeover
- CVE-2026-29191 ZITADEL: 1-Click Account Takeover via XSS in /saml-post Endpoint
- CVE-2026-29190 Karapace: Path Traversal in Backup Reader
- CVE-2026-2919 Attacker-controlled content shown under spoofed domains in Focus for iOS via stalled navigation and iframe redirect
- CVE-2026-29189 SuiteCRM has a REST API V8 IDOR: Missing ACL Checks on User Preferences and Relationship Endpoints
- CVE-2026-29188 File Browser: TUS Delete Endpoint Bypasses Delete Permission Check
- CVE-2026-29187 OpenEMR Vulnerable to Authenticated Blind Boolean-Based SQL Injection in new_search_popup.php
- CVE-2026-29186 @backstage/plugin-techdocs-node: TechDocs Mkdocs Configuration Key Enables Arbitrary Code Execution
- CVE-2026-29185 @backstage/integration: Potential reading of SCM URLs using built in token