Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 795 of 1013.
- CVE-2026-22844 Zoom Node Deployments - Command Injection
- CVE-2026-2284 News Element Elementor Blog Magazine <= 1.0.8 - Missing Authorization to Authenticated (Subscriber+) Data Loss
- CVE-2026-2283 User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter
- CVE-2026-22828 Memory corruption in FortiAnalyzer Cloud
- CVE-2026-22822 External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function
- CVE-2026-22821 mreporting affected by a SQLI on date change
- CVE-2026-22820 Outray cli is vulnerable to race conditions in tunnels creation
- CVE-2026-2282 Slidorion <= 1.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via Slidorion Settings
- CVE-2026-22819 Outray has a Race Condition in main/apps/web/src/routes/api/$orgSlug/subdomains/index.ts
- CVE-2026-22818 JWT algorithm confusion in Hono JWK Auth Middleware when JWK lacks "alg" (untrusted header.alg fallback)
- CVE-2026-22817 JWT Algorithm Confusion via Unsafe Default (HS256) in Hono JWT Middleware Allows Token Forgery and Auth Bypass
- CVE-2026-22816 Gradle fails to disable repositories which can expose builds to malicious artifacts
- CVE-2026-22815 AIOHTTP: Uncapped memory usage possible through aiohttp allowing unlimited trailer headers
- CVE-2026-22814 Mass Assignment in AdonisJS Lucid Allows Overwriting Internal ORM State
- CVE-2026-22813 Malicious website can execute commands on the local system through XSS in the OpenCode web UI
- CVE-2026-22812 OpenCode's Unauthenticated HTTP Server Allows Arbitrary Command Execution
- CVE-2026-22810 Joplin: Path traversal in OneNote importer allows overwriting arbitrary files
- CVE-2026-2281 Private Comment <= 0.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Label Text Setting
- CVE-2026-22809 tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
- CVE-2026-22808 Fleet Windows MDM endpoint has a Cross-site Scripting vulnerability
- CVE-2026-22807 vLLM affected by RCE via auto_map dynamic module loading during model initialization
- CVE-2026-22806 vCluster Platform's Access Keys Allows Access Beyond Scope
- CVE-2026-22805 Metabase channel test endpoint can reach internal local addresses
- CVE-2026-22804 Cross-site scripting in Termix
- CVE-2026-22803 SvelteKit has a memory amplification DoS in Remote Functions binary form deserializer
- CVE-2026-22801 LIBPNG has an integer truncation causing heap buffer over-read in png_image_write_*
- CVE-2026-22800 PILOS affected by a CSRF via GET request allows unintentional termination of all active video conferences
- CVE-2026-2280 rexCrawler <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings
- CVE-2026-22799 emlog Arbitrary File Upload Vulnerability
- CVE-2026-22798 hermes's raw options logging may disclose secrets passed in via subcommand options argument
- CVE-2026-22797 Auth bypass in keystonemiddleware
- CVE-2026-22796 ASN1_TYPE Type Confusion in the PKCS7_digest_from_attributes() function
- CVE-2026-22795 Missing ASN1_TYPE validation in PKCS#12 parsing
- CVE-2026-22794 Account Takeover Vulnerability in Appsmith
- CVE-2026-22793 5ire vulnerable to Remote Code Execution (RCE) via ECharts
- CVE-2026-22792 5ire vulnerable to Remote Code Execution (RCE)
- CVE-2026-22791 openCryptoki incorrectly calculates the buffer size in C_WrapKey with CKM_ECDH_AES_KEY_WRAP
- CVE-2026-22790 EVerest's unchecked SLAC payload length causes stack overflow in HomeplugMessage::setup_payload
- CVE-2026-2279 myLinksDump <= 1.6 - Authenticated (Administrator+) SQL Injection via 'sort_by' and 'sort_order' Parameters
- CVE-2026-22789 WebErpMesv2 has a File Upload Validation Bypass Leading to RCE
- CVE-2026-22788 WebErpMesv2 allows unauthenticated API Access
- CVE-2026-22787 html2pdf.js has a cross-site scripting vulnerability
- CVE-2026-22786 Gin-vue-admin has arbitrary file upload vulnerability caused by path traversal
- CVE-2026-22785 orval MCP client is vulnerable to a code injection attack.
- CVE-2026-22784 Lychee cross-album password propagation on Album unlocking
- CVE-2026-22783 Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management
- CVE-2026-22782 RustFS RPC signature verification logs shared secret
- CVE-2026-22781 TinyWeb CGI Command Injection
- CVE-2026-22780 Rizin has a heap overflow on mach0_chained_fixups.c
- CVE-2026-2278 VW Writer Blog <= 1.3.8 - Missing Authorization to Authenticated (Subscriber+) Theme Settings Reset
- CVE-2026-22779 BlackSheep ClientSession is vulnerable to CRLF injection
- CVE-2026-22778 vLLM leaks a heap address when PIL throws an error
- CVE-2026-22777 ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
- CVE-2026-22776 cpp-httplib vulnerable to a denial of service (DOS) using a zip bomb
- CVE-2026-22775 devalue vulnerable to denial of service due to memory/CPU exhaustion in devalue.parse
- CVE-2026-22774 devalue vulnerable to denial of service due to memory exhaustion in devalue.parse
- CVE-2026-22773 vLLM is vulnerable to DoS in Idefics3 vision models via image payload with ambiguous dimensions
- CVE-2026-22772 Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass
- CVE-2026-22771 Envoy Extension Policy lua scripts injection causes arbitrary command execution
- CVE-2026-22770 ImageMagick vulnerable to Release of Invalid Pointer in BilateralBlur when memory allocation fails
- CVE-2026-2277 rexCrawler <= 1.0.15 - Reflected Cross-Site Scripting via 'url' and 'regex' Parameters
- CVE-2026-22769 Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials
- CVE-2026-22768 Privilege escalation in AppSync
- CVE-2026-22767 Path traversal in AppSync
- CVE-2026-22766 File upload in Wyse Management Suite
- CVE-2026-22765 Missing authorization in Wyse Management Suite
- CVE-2026-22764 Auth bypass in OpenManage Network Integration
- CVE-2026-22762 Path traversal in Avamar Server
- CVE-2026-22761 Command injection in PowerProtect Data Domain
- CVE-2026-22760 Denial of service in Device Management Agent (DDMA)
- CVE-2026-2276 Reflected Cross-Site Scripting in the Wix web application
- CVE-2026-22755 Legacy Vivotek Camera Firmware Command Injection in upload_map.cgi
- CVE-2026-22754 ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules
- CVE-2026-22753 Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers
- CVE-2026-22752 Auth bypass in Spring Authorization Server
- CVE-2026-22751 Spring Security JdbcOneTimeTokenService allows a one-time token to authenticate multiple sessions
- CVE-2026-22750 SSL bundle configuration silently bypassed in Spring Cloud Gateway
- CVE-2026-2275 CVE-2026-2275
- CVE-2026-22748 Potential Security Misconfiguration when Using withIssuerLocation
- CVE-2026-22747 Unauthorized User Impersonation when Using X.509 Client Certificates
- CVE-2026-22746 User Attribute Enumeration when Using DaoAuthenticationProvider
- CVE-2026-22745 CVE-2026-22745 : Denial of service in static resource handling on Windows platforms
- CVE-2026-22744 Spring AI Redis Store has TAG Field Query Injection Through Improper Neutralization of Special Characters
- CVE-2026-22743 Server-Side Request Forgery via Filter Expression Keys in Neo4jVectorStore
- CVE-2026-22742 Server-Side Request Forgery in BedrockProxyChatModel via Unvalidated Media URL Fetching
- CVE-2026-22741 Static resource cache poisoning in Spring MVC and WebFlux
- CVE-2026-22740 Spring Framework DoS with Multipart Temp Files in WebFlux
- CVE-2026-2274 Arbitrary File Read and SSRF in Google AppSheet
- CVE-2026-22739 Spring Cloud Config Profile Substitution Can Allow Unintended Access To Files And Enable SSRF Attacks
- CVE-2026-22738 SpEL Injection via Unescaped Filter Key in SimpleVectorStore Leads to Remote Code Execution
- CVE-2026-22737 Spring Framework Improper Path Limitation with Script View Templates
- CVE-2026-22735 Server Sent Event stream corruption
- CVE-2026-22734 Cloud Foundry UAA SAML 2.0 Signature Bypass
- CVE-2026-22733 Authentication Bypass under Actuator CloudFoundry endpoints
- CVE-2026-22732 Under Some Conditions Spring Security HTTP Headers Are not Written
- CVE-2026-22731 Authentication Bypass under Actuator Health groups paths
- CVE-2026-22730 CVE-2026-22730: SQL Injection in Spring AI MariaDBFilterExpressionConverter
- CVE-2026-2273 Code injection in EcoStruxure™ Automation Expert
- CVE-2026-22729 CVE-2026-22729: JSONPath Injection in Spring AI Vector Stores FilterExpressionConverter
- CVE-2026-22728 sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations