Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 783 of 1013.
- CVE-2026-24099 Use after free in Intel(R) PROSet/Wireless WiFi Software for Windows
- CVE-2026-24098 Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors
- CVE-2026-24097 Authenticated Host Enumeration via Observable Response Discrepancy on Agent Register Existing Endpoint
- CVE-2026-24096 Insufficient permission validation on multiple REST API Quick Setup endpoints
- CVE-2026-24095 Missing Permission Check on Analyze Configuration Page
- CVE-2026-24092 Improper Validation of Syntactic Correctness of Input in Display
- CVE-2026-24091 Improper Validation of Syntactic Correctness of Input in Display
- CVE-2026-24090 Missing Authentication for Critical Function in HLOS
- CVE-2026-2409 SQL injection in Cloud Suite
- CVE-2026-24089 Improper Validation of Syntactic Correctness of Input in Kernel
- CVE-2026-24088 Missing Authentication for Critical Function in Boot
- CVE-2026-24087 Improper Validation of Syntactic Correctness of Input in Kernel
- CVE-2026-24085 Stack-based Buffer Overflow in Display
- CVE-2026-24084 Insecure Security Identifier Mechanism in Multi-Mode Call Processor
- CVE-2026-24083 Untrusted Pointer Dereference in Automotive Security
- CVE-2026-24082 Use After Free in Automotive GPU
- CVE-2026-24081 Buffer Over-read in BT Controller
- CVE-2026-24080 Buffer Copy Without Checking Size of Input in Biometrics
- CVE-2026-2408 Use-after-free in Cloud Workloads
- CVE-2026-24079 Missing Authentication for Critical Function in Data Modem
- CVE-2026-24078 Exposure of Private Personal Information to an Unauthorized Actor in Data Modem
- CVE-2026-24077 Integer Underflow (Wrap or Wraparound) in WLAN Host
- CVE-2026-24076 Buffer Copy Without Checking Size of Input in Bluetooth HOST
- CVE-2026-24075 Buffer Over-read in Qualcomm IPC
- CVE-2026-24074 Out-of-bounds Write in Video
- CVE-2026-24073 Out-of-bounds Write in Video
- CVE-2026-24072 Apache HTTP Server: mod_rewrite elevation of privileges via ap_expr
- CVE-2026-24071 XPC Client Validation via PID leading to Local Privilege Escalation in Native Instruments Native Access
- CVE-2026-24070 Local Privilege Escalation via DYLIB Injection in Native Instruments Native Access
- CVE-2026-24069 Improper Enforcement of Disabled Accounts in WebUI SSO in Kiuwan SAST
- CVE-2026-24068 Privilege escalation in Vienna Assistant
- CVE-2026-24067 Slate Digital Connect macOS XPC PID validation privilege escalation
- CVE-2026-24066 Slate Digital Connect macOS XPC certificate validation privilege escalation
- CVE-2026-24065 Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS
- CVE-2026-24064 Local Privilege Escalation via Dynamic Library Injection in Waves Central for macOS
- CVE-2026-24063 World-writable uninstall script executed as root in Arturia Software Center
- CVE-2026-24062 Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center
- CVE-2026-24061 GNU InetUtils Argument Injection
- CVE-2026-24060 Automated Logic WebCTRL Premium Server Cleartext Transmission of Sensitive Information
- CVE-2026-2406 IDOR in Universe Software's Online Registration and Workflow Management System
- CVE-2026-24059 Gitea runner registration-token GET endpoint performs a write under a read-only token scope
- CVE-2026-24058 Soft Serve has Critical Authentication Bypass
- CVE-2026-24056 pnpm has symlink traversal in file:/git dependencies
- CVE-2026-24055 Langfuse Slack OAuth Installation Endpoint Lacks Authentication, Enabling Arbitrary Project Linking
- CVE-2026-24054 Other in kata-containers
- CVE-2026-24053 Cluade Code has a Path Restriction Bypass via ZSH Clobber which Allows Arbitrary File Writes
- CVE-2026-24052 Claude Code has a Domain Validation Bypass which Allows Automatic Requests to Attacker-Controlled Domains
- CVE-2026-24051 OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking
- CVE-2026-24050 Zulip affected by Stored XSS in user profile modal
- CVE-2026-2405 Denial of service in PowerChute™ Serial Shutdown
- CVE-2026-24049 wheel Allows Arbitrary File Permission Modification via Path Traversal
- CVE-2026-24048 Backstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`
- CVE-2026-24047 @backstage/cli-common has a possible `resolveSafeChildPath` Symlink Chain Bypass
- CVE-2026-24046 Backstage has a Possible Symlink Path Traversal in Scaffolder Actions
- CVE-2026-24045 Docmost Affected by Stored XSS in Public Share Page
- CVE-2026-24044 ESS Community Helm Chart has a weak server key generation method
- CVE-2026-24043 jsPDF Affected by Stored XMP Metadata Injection (Spoofing & Integrity Violation)
- CVE-2026-24042 Appsmith public apps can execute unpublished actions (viewMode confusion)
- CVE-2026-24040 jsPDF has a Shared State Race Condition in addJS Plugin
- CVE-2026-2404 Other in PowerChute™ Serial Shutdown
- CVE-2026-24039 Horilla's Improper Access Control Allows Employees to Auto-Approve Documents
- CVE-2026-24038 Horilla HR has 2FA Bypass through its OTP Handling Logic
- CVE-2026-24037 Horilla HRM has XSS Bypass through Project Name
- CVE-2026-24036 Horilla Exposes Unpublished Job Disclosures through Unauthenticated API
- CVE-2026-24035 Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee
- CVE-2026-24034 Horilla has File Upload XSS
- CVE-2026-24033 Apache Traffic Server: Request smuggling via chunked extension quoted-string parsing
- CVE-2026-24032 Auth bypass in SINEC NMS
- CVE-2026-24031 SQL injection in OX Dovecot Pro
- CVE-2026-24030 Unbounded memory allocation for DoQ and DoH3
- CVE-2026-2403 Other in PowerChute™ Serial Shutdown
- CVE-2026-24029 DNS over HTTPS ACL bypass
- CVE-2026-24028 Out-of-bounds read when parsing DNS packets via Lua
- CVE-2026-24027 Crafted zones can lead to increased incoming network traffic
- CVE-2026-2402 Auth bypass in PowerChute™ Serial Shutdown
- CVE-2026-24018 Privilege escalation in FortiClientLinux
- CVE-2026-24017 Security feature bypass in FortiWeb
- CVE-2026-24016 Other in ServerView Agents for Windows
- CVE-2026-24015 Apache IoTDB: Insecure Default Configuration Vulnerability
- CVE-2026-24014 Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write
- CVE-2026-24013 Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC
- CVE-2026-24012 Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query
- CVE-2026-24010 Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover
- CVE-2026-2401 Information disclosure in PowerChute™ Serial Shutdown
- CVE-2026-24009 Docling Core vulnerable to Remote Code Execution via unsafe PyYAML usage
- CVE-2026-24007 Tuleap is missing CSRF protection in the Overview inconsistent items
- CVE-2026-24006 Seroval affected by Denial of Service via Deeply Nested Objects
- CVE-2026-24005 OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field
- CVE-2026-24004 Fleet: Unauthenticated Android device disenrollment vulnerability via Pub/Sub endpoint
- CVE-2026-24003 EvseV2G has sequence state validation bypass
- CVE-2026-24002 pyodide sandbox option is insecure
- CVE-2026-24001 jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch
- CVE-2026-24000 Fleet has a rate limiting bypass via untrusted client IP headers
- CVE-2026-2400 Other in PowerChute™ Serial Shutdown
- CVE-2026-23999 Fleet: Device lock PIN can be predicted if lock time is known
- CVE-2026-23998 Fleet has a Windows MDM management endpoint authentication bypass
- CVE-2026-23997 FacturaScripts has a Stored Cross-Site Scripting (XSS) in "Observations" field via History View
- CVE-2026-23996 FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection
- CVE-2026-23995 EVerest has stack buffer overflow in ifreq.ifr_name when interface name exceeds IFNAMSIZ
- CVE-2026-23992 go-tuf improperly validates the configured threshold for delegations