Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 740 of 1013.
- CVE-2026-29068 PJSIP: Stack buffer overflow in Opus codec parser
- CVE-2026-29067 ZITADEL: Account Takeover Due to Improper Instance Validation in V2 Login
- CVE-2026-29066 Arbitrary File Read via Disabled Vite Filesystem Restriction in TinaCMS CLI
- CVE-2026-29065 changedetection.io: Zip Slip vulnerability in the backup restore functionality
- CVE-2026-29064 Zarf: Symlink targets in archives are not validated against destination directory
- CVE-2026-29063 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
- CVE-2026-29062 jackson-core: Nesting Depth Constraint Bypass in `UTF8DataInputJsonParser` potentially allowing Resource Exhaustion
- CVE-2026-29061 Gokapi: Privilege escalation via incomplete API-key permission revocation on user rank demotion
- CVE-2026-29060 Gokapi: Privilege escalation with auth token
- CVE-2026-2906 Tenda HG9 Samba Configuration Endpoint formSamba stack-based overflow
- CVE-2026-29059 Windmill: SUPERADMIN_SECRET (rarely used) can be accessed publicly
- CVE-2026-29058 AVideo: Unauthenticated OS Command Injection via base64Url in objects/getImage.php
- CVE-2026-29057 Next.js: HTTP request smuggling in rewrites
- CVE-2026-29056 Kanboard's privilege escalation via mass assignment in user invite registration allows any invited user to become admin
- CVE-2026-29055 Tandoor Recipes: WebP and GIF Image Uploads Bypass EXIF/Metadata Stripping, Leaking GPS Coordinates and PII
- CVE-2026-29054 Traefik: lowercase `Connection` tokens can delete traefik-managed forwarded identity headers (for example, `X-Real-Ip`)
- CVE-2026-29053 Ghost Vulnerable to Remote Code Execution via Malicious Themes
- CVE-2026-29052 HumHub Calendar Module: Stored XSS in Event Types
- CVE-2026-29051 melange has Path Traversal via .PKGINFO in --persist-lint-results
- CVE-2026-29050 melange has Path Traversal When Resolving External Pipelines via Unvalidated pipeline[].uses
- CVE-2026-2905 Tenda HG9 Wireless Configuration Endpoint formWlanSetup stack-based overflow
- CVE-2026-29049 melange: unbounded HTTP download in `melange update-cache` can exhaust disk in CI
- CVE-2026-29048 HumHub: XSS in Button component
- CVE-2026-29047 GLPI has an Authenticated SQL Injection via log exports
- CVE-2026-29046 TinyWeb: HTTP Header Control Character Injection into CGI Environment
- CVE-2026-29045 Hono: Arbitrary file access via serveStatic vulnerability
- CVE-2026-29044 EVerest: Charging Continues When WithdrawAuthorization Is Processed Before TransactionStarted
- CVE-2026-29043 HDF5 H5T__ref_mem_setnull Heap Buffer Overflow
- CVE-2026-29042 Nuclio Shell Runtime Command Injection Leading to Privilege Escalation
- CVE-2026-29041 Chamilo: Authenticated Remote Code Execution via Unrestricted File Upload
- CVE-2026-2904 UTT HiPER 810G ConfigExceptAli strcpy buffer overflow
- CVE-2026-29039 changedetection.io: XPath - Arbitrary File Read via unparsed-text()
- CVE-2026-29038 changedetection.io: Reflected XSS in RSS Tag Error Response
- CVE-2026-29036 cJSON 1.7.19 Wrong-Key Modification via JSON Pointer Escape Decoding
- CVE-2026-29035 CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompression
- CVE-2026-2903 skvadrik re2c ast.cc check_and_merge_special_rules null pointer dereference
- CVE-2026-29023 Keygraph Shannon Hard-coded Router API Key
- CVE-2026-29022 mackron / dr_libs dr_wav.h Heap Buffer Overflow via WAV File
- CVE-2026-2902 WP Meteor Website Speed Optimization Addon <= 3.4.16 - Unauthenticated Stored Cross-Site Scripting via Comment
- CVE-2026-29014 MetInfo CMS Unauthenticated PHP Code Injection RCE
- CVE-2026-29013 libcoap Out-of-Bounds Read in OSCORE CBOR Unwrap Handling
- CVE-2026-29009 U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
- CVE-2026-29008 U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
- CVE-2026-29007 U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c
- CVE-2026-29004 BusyBox DHCPv6 Client Heap Buffer Overflow via DNS_SERVERS
- CVE-2026-29002 CouchCMS Privilege Escalation via f_k_levels_list Parameter
- CVE-2026-29001 TastyIgniter 4.4.5 PHP Object Injection via Settings Deserialization
- CVE-2026-29000 pac4j-jwt JwtAuthenticator Authentication Bypass
- CVE-2026-2900 Missing Authorization in GitLab
- CVE-2026-28996 Race condition in iOS and iPadOS
- CVE-2026-28995 Privilege escalation in iOS and iPadOS
- CVE-2026-28994 Use after free in iOS and iPadOS
- CVE-2026-28993 Security feature bypass in iOS and iPadOS
- CVE-2026-28992 Race condition in iOS and iPadOS
- CVE-2026-28991 Memory corruption in iOS and iPadOS
- CVE-2026-28990 Memory corruption in iOS and iPadOS
- CVE-2026-2899 Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
- CVE-2026-28988 Security feature bypass in iOS and iPadOS
- CVE-2026-28987 Information disclosure in iOS and iPadOS
- CVE-2026-28986 Race condition in iOS and iPadOS
- CVE-2026-28985 Null dereference in iOS and iPadOS
- CVE-2026-28984 Use after free in Safari
- CVE-2026-28983 Memory corruption in iOS and iPadOS
- CVE-2026-28982 Race condition in macOS
- CVE-2026-28981 Memory corruption in macOS
- CVE-2026-2898 funadmin Backend Endpoint AuthCloudService.php getMember deserialization
- CVE-2026-28979 Memory corruption in Safari
- CVE-2026-28978 Security feature bypass in macOS
- CVE-2026-28977 Memory corruption in iOS and iPadOS
- CVE-2026-28976 Privilege escalation in macOS
- CVE-2026-28974 Missing authorization in iOS and iPadOS
- CVE-2026-28973 Integer overflow in iOS and iPadOS
- CVE-2026-28972 Memory corruption in iOS and iPadOS
- CVE-2026-28971 Security feature bypass in Safari
- CVE-2026-2897 funadmin Backend index.html cross site scripting
- CVE-2026-28969 Use after free in iOS and iPadOS
- CVE-2026-28968 Memory corruption in iOS and iPadOS
- CVE-2026-28967 Denial of service in iOS and iPadOS
- CVE-2026-28966 Memory corruption in iOS and iPadOS
- CVE-2026-28965 Security feature bypass in iOS and iPadOS
- CVE-2026-28964 Other in iOS and iPadOS
- CVE-2026-28963 Information disclosure in iOS and iPadOS
- CVE-2026-28962 Information disclosure in Safari
- CVE-2026-28961 Information disclosure in macOS
- CVE-2026-28960 Denial of service in iOS and iPadOS
- CVE-2026-2896 funadmin Configuration Ajax.php setConfig improper authorization
- CVE-2026-28959 Memory corruption in iOS and iPadOS
- CVE-2026-28958 Information disclosure in Safari
- CVE-2026-28957 Missing authorization in iOS and iPadOS
- CVE-2026-28956 Memory corruption in iOS and iPadOS
- CVE-2026-28955 Memory corruption in Safari
- CVE-2026-28954 Security feature bypass in iOS and iPadOS
- CVE-2026-28953 Memory corruption in Safari
- CVE-2026-28952 Integer overflow in iOS and iPadOS
- CVE-2026-28951 Privilege escalation in iOS and iPadOS
- CVE-2026-28950 Information disclosure in iOS and iPadOS
- CVE-2026-2895 funadmin Member.php repass password recovery
- CVE-2026-28947 Use after free in Safari
- CVE-2026-28946 Use after free in Safari
- CVE-2026-28945 Security feature bypass in macOS