Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 743 of 1013.
- CVE-2026-28744 Gitea Git smart HTTP bypasses repository token scopes for bearer tokens
- CVE-2026-28742 Naxclow IoT Platform Use of hard-coded cryptographic key
- CVE-2026-28741 CSRF Protection Bypass Allows Updating a User's Authentication Method
- CVE-2026-28740 Gitea LFS object reuse bypasses Code-unit authorization
- CVE-2026-2874 Tenda A21 fast_setting_wifi_set form_fast_setting_wifi_set stack-based overflow
- CVE-2026-28737 Gitea 3D file viewer allows stored XSS through glTF extensionsRequired
- CVE-2026-28736 Focalboard IDOR in file content endpoint allows cross-user file access (unsupported product, no fix)
- CVE-2026-28735 GitHub OAuth Scope Validation
- CVE-2026-28733 filemanagement_storage_service has an use after free vulnerability
- CVE-2026-28732 Slash command trigger-word update allowed command hijacking
- CVE-2026-2873 Tenda A21 openSchedWifi setSchedWifi stack-based overflow
- CVE-2026-28729 Integer overflow in Intel(R) Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (low), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (none) and availability (low) impacts.
- CVE-2026-28728 Privilege escalation in Acronis True Image
- CVE-2026-28727 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28726 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28725 Information disclosure in Acronis Cyber Protect 17
- CVE-2026-28724 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28723 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28722 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28721 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28720 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-2872 Tenda A21 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow
- CVE-2026-28719 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28718 Denial of service in Acronis Cyber Protect 17
- CVE-2026-28717 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28716 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28715 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28714 Information disclosure in Acronis Cyber Protect 17
- CVE-2026-28713 Hardcoded credentials in Acronis Cyber Protect 17
- CVE-2026-28712 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28711 Privilege escalation in Acronis Cyber Protect 17
- CVE-2026-28710 Auth bypass in Acronis Cyber Protect 17
- CVE-2026-2871 Tenda A21 SetIpMacBind fromSetIpMacBind stack-based overflow
- CVE-2026-28709 Missing authorization in Acronis Cyber Protect 17
- CVE-2026-28707 Security feature bypass in LLM-on-Ray
- CVE-2026-28705 Gitea repository dumps write release assets using unsafe path names
- CVE-2026-28704 Other in Emocheck
- CVE-2026-28703 Stored XSS Vulnerability
- CVE-2026-28701 Daktronics Controller Firmware Path Traversal
- CVE-2026-28700 Privilege escalation in EquiTriton
- CVE-2026-2870 Tenda A21 formSetQosBand set_qosMib_list stack-based overflow
- CVE-2026-28699 Gitea Basic Auth bypasses OAuth2 access token scopes
- CVE-2026-28698 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Panduit IntraVUE by Pronetiqs
- CVE-2026-28697 Craft Affected by Authenticated RCE via "craft.app.fs.write()" in Twig Templates
- CVE-2026-28696 Craft affected by IDOR via GraphQL @parseRefs
- CVE-2026-28695 Craft affected by authenticated RCE via Twig SSTI - create() function + Symfony Process gadget
- CVE-2026-28693 ImageMagick has an integer overflow in DIB coder can result in out of bounds read or write
- CVE-2026-28692 ImageMagick has a heap buffer over-read via 32-bit integer overflow in MAT decoder
- CVE-2026-28691 ImageMagick has an uninitialized pointer dereference in JBIG decoder
- CVE-2026-28690 ImageMagick has a stack write buffer overflow in MNG encoder
- CVE-2026-2869 janet-lang janet handleattr specials.c janetc_varset out-of-bounds
- CVE-2026-28689 ImageMagick has a Path Policy TOCTOU symlink race bypass
- CVE-2026-28688 ImageMagick has a heap use-after-free in the MSL encoder
- CVE-2026-28687 ImageMagick has a Heap Use-After-Free in ImageMagick MSL decoder
- CVE-2026-28686 ImageMagick has a write heap-buffer-overflow in PCL encoder via undersized output buffer
- CVE-2026-28685 Kimai: API invoice endpoint missing customer-level access control (IDOR)
- CVE-2026-28684 python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback
- CVE-2026-28683 Gokapi: Stored XSS in SVG Hotlinks
- CVE-2026-28682 Gokapi: Data Leak in Upload Status Stream
- CVE-2026-28681 IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links
- CVE-2026-28680 Ghostfolio: Full-Read SSRF in Manual Asset Import
- CVE-2026-2868 Cross-site scripting in Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem
- CVE-2026-28679 HomeGallery: Path Traversal (Arbitrary File Read)
- CVE-2026-28677 OpenSift: Insufficient URL destination restrictions in ingest flow could enable SSRF-style internal access
- CVE-2026-28676 OpenSift: Insufficient path containment checks in storage helpers could allow path traversal-style file operations
- CVE-2026-28675 OpenSift: Sensitive implementation details exposed via raw exception messages and token-returning endpoints
- CVE-2026-28674 xiaoheiFS Vulnerable to RCE via Arbitrary Payment Plugin Upload (Automatic Execution)
- CVE-2026-28673 xiaoheiFS Vulnerable to RCE via Unrestricted Plugin Installation (Manifest Manipulation)
- CVE-2026-28672 Apache Ranger: OS Command Injection via Username in UnixUserGroupBuilder
- CVE-2026-28671 Race condition in Android
- CVE-2026-2867 itsourcecode Vehicle Management System billaction.php sql injection
- CVE-2026-28668 Use after free in Android
- CVE-2026-28667 Memory corruption in Android
- CVE-2026-28666 Security feature bypass in Android
- CVE-2026-28664 Business logic in Android
- CVE-2026-28663 Privilege escalation in Android
- CVE-2026-28662 Memory corruption in Android
- CVE-2026-28660 Business logic in Android
- CVE-2026-28659 Missing authorization in Android XR
- CVE-2026-28658 Security feature bypass in Android
- CVE-2026-28657 Privilege escalation in Android
- CVE-2026-28656 Other in Android
- CVE-2026-28655 Security feature bypass in Android
- CVE-2026-28653 Integer overflow in Android
- CVE-2026-28652 Missing authorization in Android
- CVE-2026-28650 Security feature bypass in Android
- CVE-2026-2865 itsourcecode Agri-Trading Online Shopping System HTTP POST Request productcontroller.php sql injection
- CVE-2026-28648 Privilege escalation in Android
- CVE-2026-28647 Privilege escalation in Android
- CVE-2026-28644 Privilege escalation in Android
- CVE-2026-28642 Privilege escalation in Android
- CVE-2026-28641 Privilege escalation in Android
- CVE-2026-28640 Privilege escalation in Android
- CVE-2026-2864 feng_ha_ha/megagao ssm-erp/production_ssm PictureController.java pictureDelete path traversal
- CVE-2026-28639 Memory corruption in Android
- CVE-2026-28638 Information disclosure in Android
- CVE-2026-28636 Security feature bypass in Android
- CVE-2026-28634 Business logic in Android
- CVE-2026-28633 Denial of service in Android
- CVE-2026-28631 Security feature bypass in Android