Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 751 of 1013.
- CVE-2026-27892 FacturaScripts: Unstripped Image Metadata (EXIF) Leakage via Library Module File Upload/Download
- CVE-2026-27891 Remote Code Execution (RCE) via Zip Slip in Plugin Upload Mechanism
- CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments
- CVE-2026-2789 Use-after-free in the Graphics: ImageLib component
- CVE-2026-27889 NATS: Pre-auth remote server crash via WebSocket frame length overflow in wsRead
- CVE-2026-27888 pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
- CVE-2026-27887 Spin has memory leaks in various WIT interfaces
- CVE-2026-27886 Strapi may leak sensitive data via relational filtering due to lack of query sanitization
- CVE-2026-27885 Piwigo: SQL Injection in Activity.getList
- CVE-2026-27884 NetExec vulnerable to arbitrary file write via path traversal in spider_plus module
- CVE-2026-27883 Coolify: IDOR in Deployment API - Cross-Team Deployment Information Disclosure
- CVE-2026-27882 Coolify: Timing Attack in GitLab Webhook Token Validation
- CVE-2026-27881 Coolify: Cross-team deployment information disclosure via GET /api/v1/deployments/{uuid} (IDOR)
- CVE-2026-27880 OpenFeature evaluation API reads input data with no bounds
- CVE-2026-2788 Incorrect boundary conditions in the Audio/Video: GMP component
- CVE-2026-27879 Query resampling can cause unbounded memory allocations
- CVE-2026-27878 Tempo TraceQL query with exemplar hint could result in unbounded memory usage
- CVE-2026-27877 Public dashboards discloses all direct mode datasources
- CVE-2026-27876 RCE on Grafana via sqlExpressions
- CVE-2026-27875 Simplex Incident Manager Clear Test
- CVE-2026-27874 Hardcoded credentials in EasyIO FS32
- CVE-2026-27873 Hardcoded credentials in EasyIO FG
- CVE-2026-27872 EasyIO FG
- CVE-2026-27871 TL280
- CVE-2026-27870 CROSS-SITE SCRIPTING (XSS) VIA MALICIOUS FILE UPLOAD ON REGESTA SMART HD-PLC OF TELDAT
- CVE-2026-2787 Use-after-free in the DOM: Window and Location component
- CVE-2026-27869 WEB SERVICE (HTTP) DENIAL OF SERVICE VIA SLOW HEADERS ON REGESTA SMART HD-PLC OF TELDAT
- CVE-2026-27868 PUBLICATION OF SENSITIVE INFORMATION ON REGESTA SMART HD-PLC OF TELDAT
- CVE-2026-27867 CROSS-SITE SCRIPTING (XSS) VIA THE CMDCOOKIE PARAMETER REGESTA SMART HD-PLC OF TELDAT
- CVE-2026-27860 Other in OX Dovecot Pro
- CVE-2026-2786 Use-after-free in the JavaScript Engine component
- CVE-2026-27859 Denial of service in OX Dovecot Pro
- CVE-2026-27858 Denial of service in OX Dovecot Pro
- CVE-2026-27857 Denial of service in OX Dovecot Pro
- CVE-2026-27856 Weak cryptography in OX Dovecot Pro
- CVE-2026-27855 Auth bypass in OX Dovecot Pro
- CVE-2026-27854 Use after free when parsing EDNS options in Lua
- CVE-2026-27853 Out-of-bounds write when rewriting large DNS packets
- CVE-2026-27852 Denial of service in OX Dovecot CE
- CVE-2026-27851 SQL injection in OX Dovecot Pro
- CVE-2026-27850 Improper verification in Linksys MR9600, Linksys MX4200
- CVE-2026-2785 Invalid pointer in the JavaScript Engine component
- CVE-2026-27849 Missing neutralization in Linksys MR9600, Linksys MX4200
- CVE-2026-27848 Missing neutralization in Linksys MR9600, Linksys MX4200
- CVE-2026-27847 Missing authentication in Linksys MR9600, Linksys MX4200
- CVE-2026-27846 Missing authentication in Linksys MR9600, Linksys MX4200
- CVE-2026-27844 Denial of service in Controller 7000 and 6000
- CVE-2026-27843 SenseLive X3050 Missing authentication for critical function
- CVE-2026-27842 Auth bypass in MR-GM5A-L1
- CVE-2026-27841 SenseLive X3050 Cross-Site request forgery
- CVE-2026-27840 ZITADEL's truncated opaque tokens are still valid
- CVE-2026-2784 Mitigation bypass in the DOM: Security component
- CVE-2026-27839 wger: IDOR in nutritional_values endpoints exposes private dietary data via direct ORM lookup
- CVE-2026-27838 wger: IDOR via user-unscoped cache keys on routine API actions exposes workout data
- CVE-2026-27837 Dottie vulnerable to prototype pollution bypass via non-first path segments in set() and transform()
- CVE-2026-27836 phpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare Endpoint
- CVE-2026-27835 wger: IDOR in RepetitionsConfig and MaxRepetitionsConfig API leak other users' workout data
- CVE-2026-27834 Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameter
- CVE-2026-27833 Piwigo: Unauthenticated Information Disclosure via pwg.history.search API
- CVE-2026-27832 Group-Office Has Authenticated SQL Injection in advancedQueryData.comparator
- CVE-2026-27831 rldns Vulnerable to Heap-based Out-of-Bounds Read
- CVE-2026-27830 c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
- CVE-2026-2783 Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-27829 Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize
- CVE-2026-27828 EVerest: ISO15118 session_setup use-after-free can crash EVSE process
- CVE-2026-27826 MCP Atlassian has SSRF via unvalidated X-Atlassian-Jira-Url / X-Atlassian-Confluence-Url headers
- CVE-2026-27825 MCP Atlassian has an arbitrary file write leading to arbitrary code execution via unconstrained download_path in confluence_download_attachment
- CVE-2026-27824 calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing
- CVE-2026-27823 Remote Code Execution Vulnerability in EGroupware
- CVE-2026-27822 Rust has Critical Stored XSS in Preview Modal, leading to Administrative Account Takeover
- CVE-2026-27821 GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow
- CVE-2026-27820 zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption
- CVE-2026-2782 Privilege escalation in the Netmonitor component
- CVE-2026-27819 Vikunja has Path Traversal in CLI Restore
- CVE-2026-27818 TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist
- CVE-2026-27816 EVerest's ISO15118 update_energy_transfer_modes overflow can corrupt EVSE state
- CVE-2026-27815 EVerest: ISO15118 session_setup payment options overflow can corrupt EVSE state
- CVE-2026-27814 EVerest EvseManager phase-switch path has unsynchronized shared-state access race condition
- CVE-2026-27813 EVerest has use-after-free in auth timeout timer via race condition
- CVE-2026-27812 Sub2API Vulnerable to Password Reset Poisoning via Host Header Trust Issue, Leading to Account Takeover
- CVE-2026-27811 Roxy-WI has a Command Injection via diff parameter in config comparison allows authenticated RCE
- CVE-2026-27810 calibre Vulnerable to HTTP Response Header Injection
- CVE-2026-2781 Integer overflow in the Libraries component in NSS
- CVE-2026-27809 psd-tools: Compression module has unguarded zlib decompression, missing dimension validation, and hardening gaps
- CVE-2026-27808 Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API
- CVE-2026-27807 MarkUs: YAML alias (‘billion laughs’) DoS in config upload
- CVE-2026-27806 Fleet Affected by Local Privilege Escalation via Tcl Command Injection in Orbit
- CVE-2026-27804 Parse Server: Account takeover via JWT algorithm confusion in Google auth adapter
- CVE-2026-27803 Vaultwarden: Collection Management Operations Allowed Without `manage` Verification for Manager Role
- CVE-2026-27802 Vaultwarden: Privilege Escalation via Bulk Permission Update to Unauthorized Collections by Manager
- CVE-2026-27801 Vaultwarden: 2FA Bypass on Protected Actions due to Faulty Rate Limit Enforcement
- CVE-2026-27800 Zed has Zip Slip Path Traversal in Extension Archive Extraction
- CVE-2026-2780 Privilege escalation in the Netmonitor component
- CVE-2026-27799 ImageMagick has a heap Buffer Over-read in its DJVU image format handler
- CVE-2026-27798 ImageMagick: Heap Buffer Over-read in WaveletDenoise when processing small images
- CVE-2026-27797 Homarr: Unauthenticated SSRF in rssFeed.ts
- CVE-2026-27796 Homarr: Unauthenticated Information Disclosure (Integration Metadata Leak)
- CVE-2026-27795 LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader
- CVE-2026-27794 LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
- CVE-2026-27793 Seerr has Broken Object-Level Authorization in User Profile Endpoint that Exposes Third-Party Notification Credentials