Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 808 of 1013.
- CVE-2026-21293 Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-21292 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21291 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21290 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-2129 D-Link DIR-823X set_ac_status os command injection
- CVE-2026-21289 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21288 Illustrator | NULL Pointer Dereference (CWE-476)
- CVE-2026-21287 Substance3D - Stager | Use After Free (CWE-416)
- CVE-2026-21286 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21285 Adobe Commerce | Incorrect Authorization (CWE-863)
- CVE-2026-21284 Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21283 Bridge | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21282 Adobe Commerce | Improper Input Validation (CWE-20)
- CVE-2026-21281 InCopy | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21280 Illustrator | Untrusted Search Path (CWE-426)
- CVE-2026-2128 Information disclosure in Breeze Cache
- CVE-2026-21279 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-21278 InDesign Desktop | Out-of-bounds Read (CWE-125)
- CVE-2026-21277 InDesign Desktop | Heap-based Buffer Overflow (CWE-122)
- CVE-2026-21276 InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2026-21275 InDesign Desktop | Access of Uninitialized Pointer (CWE-824)
- CVE-2026-21274 Dreamweaver Desktop | Incorrect Authorization (CWE-863)
- CVE-2026-21273 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-21272 Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2026-21271 Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2026-2127 Missing authorization in SiteOrigin Widgets Bundle
- CVE-2026-21269 ColdFusion | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-21268 Dreamweaver Desktop | Improper Input Validation (CWE-20)
- CVE-2026-21267 Command injection in Adobe Dreamweaver Desktop
- CVE-2026-21265 Secure Boot Certificate Expiration Security Feature Bypass Vulnerability
- CVE-2026-21264 Microsoft Account Spoofing Vulnerability
- CVE-2026-21262 SQL Server Elevation of Privilege Vulnerability
- CVE-2026-21261 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-21260 Microsoft Outlook Spoofing Vulnerability
- CVE-2026-2126 Missing authorization in User Submitted Posts – Enable Users to Submit Posts from the Front End
- CVE-2026-21259 Microsoft Excel Elevation of Privilege Vulnerability
- CVE-2026-21258 Microsoft Excel Information Disclosure Vulnerability
- CVE-2026-21257 GitHub Copilot and Visual Studio Elevation of Privilege Vulnerability
- CVE-2026-21256 GitHub Copilot and Visual Studio Remote Code Execution Vulnerability
- CVE-2026-21255 Windows Hyper-V Security Feature Bypass Vulnerability
- CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability
- CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability
- CVE-2026-21250 Windows HTTP.sys Elevation of Privilege Vulnerability
- CVE-2026-21249 Windows NTLM Spoofing Vulnerability
- CVE-2026-21248 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2026-21247 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2026-21246 Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-21245 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-21244 Windows Hyper-V Remote Code Execution Vulnerability
- CVE-2026-21243 Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
- CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability
- CVE-2026-21241 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-21240 Windows HTTP.sys Elevation of Privilege Vulnerability
- CVE-2026-21239 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-21238 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability
- CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
- CVE-2026-21235 Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-21234 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
- CVE-2026-21232 Windows HTTP.sys Elevation of Privilege Vulnerability
- CVE-2026-21231 Windows Kernel Elevation of Privilege Vulnerability
- CVE-2026-2123 Privilege escalation vulnerability in Operations Agent
- CVE-2026-21229 Power BI Remote Code Execution Vulnerability
- CVE-2026-21228 Azure Local Remote Code Execution Vulnerability
- CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability
- CVE-2026-21226 Azure Core shared client library for Python Remote Code Execution Vulnerability
- CVE-2026-21224 Azure Connected Machine Agent Elevation of Privilege Vulnerability
- CVE-2026-21223 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
- CVE-2026-21222 Windows Kernel Information Disclosure Vulnerability
- CVE-2026-21221 Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability
- CVE-2026-2122 Xiaopi Panel WAF Firewall demo.php sql injection
- CVE-2026-21219 Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
- CVE-2026-21218 .NET Spoofing Vulnerability
- CVE-2026-2121 Cross-site scripting in Weaver Show Posts
- CVE-2026-2120 D-Link DIR-823X Configuration Parameter set_server_settings os command injection
- CVE-2026-2118 UTT HiPER 810 rehttpd formReleaseConnect sub_4407D4 command injection
- CVE-2026-2117 itsourcecode Society Management System edit_activity.php sql injection
- CVE-2026-2116 itsourcecode Society Management System edit_expenses.php sql injection
- CVE-2026-21157 Other in Bixby
- CVE-2026-2115 itsourcecode Society Management System delete_expenses.php sql injection
- CVE-2026-21140 Missing authorization in Samsung Mobile Devices
- CVE-2026-2114 itsourcecode Society Management System edit_admin.php sql injection
- CVE-2026-21139 Missing authorization in Samsung Continuity Service for windows
- CVE-2026-21138 Security feature bypass in Smart Switch
- CVE-2026-21137 Path traversal in Smart Switch
- CVE-2026-21136 Missing authorization in Smart Switch
- CVE-2026-21135 Missing authorization in Samsung Internet
- CVE-2026-21134 Auth bypass in Samsung Flow
- CVE-2026-21133 Path traversal in Samsung Flow
- CVE-2026-21132 Cross-site scripting in Samsung Internet
- CVE-2026-21131 Misconfiguration in Samsung Flow
- CVE-2026-21130 Other in Samsung Checkout
- CVE-2026-2113 yuan1994 tpadmin WebUploader preview.php deserialization
- CVE-2026-21129 Other in Samsung Checkout
- CVE-2026-21128 Other in Samsung Checkout
- CVE-2026-21127 Missing authorization in Samsung Account
- CVE-2026-21126 Memory corruption in Samsung Mobile Devices
- CVE-2026-21125 Memory corruption in Samsung Mobile Devices
- CVE-2026-21124 Memory corruption in Samsung Mobile Devices
- CVE-2026-21123 Privilege escalation in Samsung Mobile Devices