Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 781 of 1013.
- CVE-2026-24317 DLL Hijacking vulnerability in SAP GUI for Windows with active GuiXT
- CVE-2026-24316 Server-Side Request Forgery (SSRF) in SAP NetWeaver Application Server for ABAP
- CVE-2026-24315 Path Traversal Vulnerability in SAP Fiori (launchpad)
- CVE-2026-24314 Information Disclosure vulnerability in S/4HANA (Manage Payment Media)
- CVE-2026-24313 Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
- CVE-2026-24312 Missing authorization check in SAP Business Workflow
- CVE-2026-24311 Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0
- CVE-2026-24310 Missing Authorization check in SAP NetWeaver Application Server for ABAP
- CVE-2026-2431 CM Custom Reports <= 1.2.7 - Reflected Cross-Site Scripting via 'date_from' and 'date_to' Parameters
- CVE-2026-24309 Missing Authorization check in SAP NetWeaver Application Server for ABAP
- CVE-2026-24308 Apache ZooKeeper: Sensitive information disclosure in client configuration handling
- CVE-2026-24307 M365 Copilot Information Disclosure Vulnerability
- CVE-2026-24306 Azure Front Door Elevation of Privilege Vulnerability
- CVE-2026-24305 Azure Entra ID Elevation of Privilege Vulnerability
- CVE-2026-24304 Azure Resource Manager Elevation of Privilege Vulnerability
- CVE-2026-24303 Microsoft Partner Center Elevation of Privilege Vulnerability
- CVE-2026-24302 Azure Arc Elevation of Privilege Vulnerability
- CVE-2026-24301 Microsoft Copilot Information Disclosure Vulnerability
- CVE-2026-24300 Azure Front Door Elevation of Privilege Vulnerability
- CVE-2026-2430 Autoptimize <= 3.1.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy-loaded Image Attributes
- CVE-2026-24299 M365 Copilot Information Disclosure Vulnerability
- CVE-2026-24297 Windows Kerberos Security Feature Bypass Vulnerability
- CVE-2026-24296 Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-24295 Windows Device Association Service Elevation of Privilege Vulnerability
- CVE-2026-24294 Windows SMB Server Elevation of Privilege Vulnerability
- CVE-2026-24293 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-24292 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2026-24291 Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
- CVE-2026-24290 Windows Projected File System Elevation of Privilege Vulnerability
- CVE-2026-2429 Community Events <= 1.5.8 - Authenticated (Administrator+) SQL Injection via 'ce_venue_name' CSV Field
- CVE-2026-24289 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-24288 Windows Mobile Broadband Driver Remote Code Execution Vulnerability
- CVE-2026-24287 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-24285 Win32k Elevation of Privilege Vulnerability
- CVE-2026-24283 Multiple UNC Provider Kernel Driver Elevation of Privilege Vulnerability
- CVE-2026-24282 Push message Routing Service Elevation of Privilege Vulnerability
- CVE-2026-24281 Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
- CVE-2026-2428 Fluent Forms Pro Add On Pack <= 6.1.17 - Missing Authorization to Unauthenticated Payment Status modification
- CVE-2026-24272 Memory corruption in TensorRT
- CVE-2026-24271 Denial of service in TensorRT-LLM
- CVE-2026-24270 Auth bypass in AIStore framework
- CVE-2026-2427 itsukaita <= 0.1.2 - Reflected Cross-Site Scripting via 'day_from' Parameter
- CVE-2026-24269 Server-side request forgery in TensorRT-LLM
- CVE-2026-24268 Memory corruption in TensorRT
- CVE-2026-24267 Deserialization in NeMo Speech
- CVE-2026-24266 Use after free in Triton Inference Server
- CVE-2026-24264 Denial of service in Triton Inference Server
- CVE-2026-24263 Null dereference in DGX Spark
- CVE-2026-24262 Memory corruption in DGX Spark
- CVE-2026-24260 Race condition in Container Toolkit
- CVE-2026-2426 Path traversal in WP-DownloadManager
- CVE-2026-24259 Auth bypass in TensorRT-LLM
- CVE-2026-24255 Other in Dynamo
- CVE-2026-24254 Memory corruption in Dynamo
- CVE-2026-24253 Memory corruption in Dynamo
- CVE-2026-24252 Command injection in NeMo Framework
- CVE-2026-24251 Deserialization in Megatron-Bridge
- CVE-2026-24250 Deserialization in Megatron-Bridge
- CVE-2026-2425 hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting via 'new_domain' Parameter
- CVE-2026-24249 Deserialization in Megatron-Bridge
- CVE-2026-24248 Code injection in Megatron-Bridge
- CVE-2026-24247 Deserialization in Megatron-Bridge
- CVE-2026-24246 Other in Megatron-Bridge
- CVE-2026-24245 Deserialization in Megatron-Bridge
- CVE-2026-24244 Deserialization in Megatron-Bridge
- CVE-2026-24243 Deserialization in Megatron-Bridge
- CVE-2026-24242 Server-side request forgery in Megatron-Bridge
- CVE-2026-24241 Auth bypass in DLS component of NVIDIA License System
- CVE-2026-24240 Deserialization in Megatron-Bridge
- CVE-2026-2424 Reward Video Ad for WordPress <= 1.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via Admin Settings
- CVE-2026-24239 Deserialization in NeMo Speech
- CVE-2026-24238 Memory corruption in TensorRT
- CVE-2026-24237 Deserialization in NVTabular
- CVE-2026-24234 Server-side request forgery in TensorRT-LLM
- CVE-2026-24233 Deserialization in TensorRT-LLM
- CVE-2026-24232 Deserialization in Tranformers4Rec
- CVE-2026-24231 Server-side request forgery in NemoClaw
- CVE-2026-24229 Missing authorization in TensorRT-LLM
- CVE-2026-24228 Deserialization in NeMo Framework
- CVE-2026-24227 Deserialization in TensorRT
- CVE-2026-24226 Code injection in TensorRT-LLM
- CVE-2026-24225 Memory corruption in DGX Spark
- CVE-2026-24222 Information disclosure in NemoClaw
- CVE-2026-24221 Deserialization in NVTabular
- CVE-2026-24220 Deserialization in TensorRT-LLM
- CVE-2026-2422 WP Composer <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pbwp_raw_shortcode' Shortcode
- CVE-2026-24218 Hardcoded credentials in DGX Spark
- CVE-2026-24217 Path traversal in BioNeMo Framework
- CVE-2026-24216 Deserialization in BioNeMo Framework
- CVE-2026-24215 Denial of service in Triton Inference Server
- CVE-2026-24214 Integer overflow in Triton Inference Server
- CVE-2026-24213 Memory corruption in Triton Inference Server
- CVE-2026-24212 Information disclosure in Isaac Launchable
- CVE-2026-24210 Integer overflow in Triton Inference Server
- CVE-2026-2421 Path traversal in ilGhera Carta Docente for WooCommerce
- CVE-2026-24209 Path traversal in Triton Inference Server
- CVE-2026-24208 Path traversal in Triton Inference Server
- CVE-2026-24207 Auth bypass in Triton Inference Server
- CVE-2026-24206 Auth bypass in Triton Inference Server
- CVE-2026-24204 Path traversal in FLARE SDK