Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 750 of 1013.
- CVE-2026-27985 WordPress Humanum theme <= 1.1.4 - Local File Inclusion vulnerability
- CVE-2026-27984 WordPress Widget Options plugin <= 4.1.3 - Remote Code Execution (RCE) vulnerability
- CVE-2026-27983 WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability
- CVE-2026-27982 django-allauth has an open redirect vulnerability
- CVE-2026-27981 HomeBox has an Auth Rate Limit Bypass via IP Spoofing
- CVE-2026-27980 Next.js: Unbounded next/image disk cache growth can exhaust storage
- CVE-2026-2798 Use-after-free in the DOM: Core & HTML component
- CVE-2026-27979 Next.js: Unbounded postponed resume buffering can lead to DoS
- CVE-2026-27978 Next.js: null origin can bypass Server Actions CSRF checks
- CVE-2026-27977 Next.js: null origin can bypass dev HMR websocket CSRF checks
- CVE-2026-27976 Zed Extension Sandbox Escape via Tar Symlink Following
- CVE-2026-27975 Ajenti has a potential Remote Code Execution
- CVE-2026-27974 Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)
- CVE-2026-27973 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)
- CVE-2026-27971 Qwik affected by unauthenticated RCE via server$ Deserialization
- CVE-2026-27970 Angular i18n vulnerable to Cross-Site Scripting (XSS)
- CVE-2026-2797 Use-after-free in the JavaScript: GC component
- CVE-2026-27969 Vitess users with backup storage access can write to arbitrary file paths on restore
- CVE-2026-27968 Packistry accepts expired access tokens
- CVE-2026-27967 Symlink Escape in Agent File Tools
- CVE-2026-27966 Langflow has Remote Code Execution in CSV Agent
- CVE-2026-27965 Vitess users with backup storage access can gain unauthorized access to production deployment environments
- CVE-2026-27964 FacturaScripts: Reflected Cross-Site Scripting (XSS) via Cookie Manipulation
- CVE-2026-27963 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata
- CVE-2026-27962 Authlib JWS JWK Header Injection: Signature Verification Bypass
- CVE-2026-27961 Agenta's Server-Side Template Injection (SSTI) via custom evaluator Jinja2 templates allows RCE
- CVE-2026-27960 OpenCTI privilege escalation and unauthenticated access via default admin account
- CVE-2026-2796 JIT miscompilation in the JavaScript: WebAssembly component
- CVE-2026-27959 Koa has Host Header Injection via `ctx.hostname`
- CVE-2026-27957 Coolify: Authenticated RCE via command injection in CA certificate management feature
- CVE-2026-27956 Coolify: Cross-team application domain enumeration via domains_by_server endpoint
- CVE-2026-27955 Coolify: Command Injection via Single-Quote Breakout in `executeInDocker()`
- CVE-2026-27954 LiveHelperChat has department-level authorization bypass in holdaction, blockuser, and transferchat endpoints
- CVE-2026-27953 ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor
- CVE-2026-27952 Agenta has Python Sandbox Escape, Leading to Remote Code Execution (RCE)
- CVE-2026-27951 FreeRDP has possible Integer overflow in Stream_EnsureCapacity
- CVE-2026-27950 FreeRDP heap-use-after-free in update_pointer_new(SDL): Fix Applied in the Wrong File
- CVE-2026-2795 Use-after-free in the JavaScript: GC component
- CVE-2026-27949 Plane Exposes User Email (PII and part of credential) in GET Parameter
- CVE-2026-27948 Copyparty vulnerable to eflected cross-site scripting via setck parameter
- CVE-2026-27947 Group-Office Vulnerable to Remote Code Execution (RCE)
- CVE-2026-27946 ZITADEL Users Can Self-Verify Email/Phone via UpdateHumanUser API
- CVE-2026-27945 ZITADEL has potential SSRF via Actions
- CVE-2026-27944 Nginx UI: Unauthenticated Backup Download with Encryption Key Disclosure
- CVE-2026-27943 OpenEMR's Eye Exam View Trusts form_id Without Verifying Patient/Encounter Ownership
- CVE-2026-27942 fast-xml-parser has stack overflow in XMLBuilder with preserveOrder
- CVE-2026-27941 Code injection in openlit
- CVE-2026-27940 llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix
- CVE-2026-2794 Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android
- CVE-2026-27939 Statamic allows Authenticated Control Panel users to escalate privileges via elevated session bypass
- CVE-2026-27938 WPGraphQL Repo Vulnerable to Command Injection via Unsanitized GitHub Actions Expression in Release Workflow
- CVE-2026-27937 October: Reflected XSS via DataTable Form Widget
- CVE-2026-27936 Discourse discloses restricted post-action counts to non-privileged users
- CVE-2026-27935 Discourse leaks private topic metadata to non-authorized users
- CVE-2026-27934 Discourse leaks private topic title and post excerpt via user action API endpoint
- CVE-2026-27933 Manyfold vulnerable to session hijack via cookie leakage in proxy caches
- CVE-2026-27932 joserfc PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
- CVE-2026-27931 Windows GDI Information Disclosure Vulnerability
- CVE-2026-27930 Windows GDI Information Disclosure Vulnerability
- CVE-2026-2793 Memory corruption in Firefox
- CVE-2026-27929 Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability
- CVE-2026-27927 Windows Projected File System Elevation of Privilege Vulnerability
- CVE-2026-27926 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
- CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability
- CVE-2026-27924 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability
- CVE-2026-27922 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-27921 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
- CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability
- CVE-2026-2792 Memory safety bugs fixed in Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148 and Thunderbird 148
- CVE-2026-27919 Windows UPnP Device Host Elevation of Privilege Vulnerability
- CVE-2026-27918 Windows Shell Elevation of Privilege Vulnerability
- CVE-2026-27917 Windows WFP NDIS Lightweight Filter Driver (wfplwfs.sys) Elevation of Privilege Vulnerability
- CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability
- CVE-2026-27915 Windows UPnP Device Host Elevation of Privilege Vulnerability
- CVE-2026-27914 Microsoft Management Console Elevation of Privilege Vulnerability
- CVE-2026-27913 Windows BitLocker Security Feature Bypass Vulnerability
- CVE-2026-27912 Windows Kerberos Elevation of Privilege Vulnerability
- CVE-2026-27911 Windows User Interface Core Elevation of Privilege Vulnerability
- CVE-2026-27910 Windows Installer Elevation of Privilege Vulnerability
- CVE-2026-2791 Mitigation bypass in the Networking: Cache component
- CVE-2026-27909 Windows Search Service Elevation of Privilege Vulnerability
- CVE-2026-27908 Windows TDI Translation Driver (tdx.sys) Elevation of Privilege Vulnerability
- CVE-2026-27907 Windows Storage Spaces Controller Elevation of Privilege Vulnerability
- CVE-2026-27906 Windows Hello Security Feature Bypass Vulnerability
- CVE-2026-27905 BentoML has an Arbitrary File Write via Symlink Path Traversal in Tar Extraction
- CVE-2026-27904 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions
- CVE-2026-27903 minimatch has a ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments
- CVE-2026-27902 Svelte Vulnerable to XSS via HTML Comment Injection in SSR Error Boundary Hydration Markers
- CVE-2026-27901 Svelte vulnerable to XSS during SSR with contenteditable `bind:innerText` and `bind:textContent`
- CVE-2026-27900 Terraform Provider Debug Logs Vulnerable to Sensitive Information Exposure
- CVE-2026-2790 Same-origin policy bypass in the Networking: JAR component
- CVE-2026-27899 WireGuard Portal Vulnerable to Privilege Escalation to Admin via User Self-Update
- CVE-2026-27898 Vaultwarden: Unauthorized Access via Partial Update API on Another User’s Cipher
- CVE-2026-27897 Vociferous Unauthenticated Remote Path Traversal (RCE via CSRF)
- CVE-2026-27896 MCP Go SDK Vulnerable to Improper Handling of Case Sensitivity
- CVE-2026-27895 LAM has incorrect regular expression in PDF export component that allows user to upload files of any type
- CVE-2026-27894 LAM has Authenticated Local File Inclusion (LFI) in PDF export
- CVE-2026-27893 vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out