Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 817 of 1013.
- CVE-2026-20269 Cisco IOS XE Software Security Hardening Release
- CVE-2026-20268 Cisco IOS XE Software Security Hardening Release
- CVE-2026-20267 Cisco IOS XE Software Security Hardening Release
- CVE-2026-20266 OS Command Injection in the btool Configuration Helper in Splunk AI Toolkit
- CVE-2026-20265 Insecure Default Domain Allowlist in Splunk AI Toolkit
- CVE-2026-20263 Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
- CVE-2026-20262 Cisco Catalyst SD-WAN Manager Directory or Path Traversal
- CVE-2026-20260 Log Injection through HTTP Request Paths in Splunk SOAR
- CVE-2026-2026 Improper Access Control Allows Denial of Service
- CVE-2026-20259 Improper Access Control in Splunk Enterprise
- CVE-2026-20258 Stored Cross-Site Scripting (XSS) through Classic Dashboard in Splunk Enterprise
- CVE-2026-20257 Improper Input Validation through Classic Dashboard CSS in Splunk Enterprise
- CVE-2026-20256 Improper Input Validation through Protocol-Relative URL in Classic Dashboards in Splunk Enterprise
- CVE-2026-20255 Improper Input Validation through Classic Dashboards in Splunk Enterprise
- CVE-2026-20254 Information Disclosure through External Content Restriction Bypass in Splunk Enterprise
- CVE-2026-20253 Splunk Enterprise Missing Authentication for Critical Function
- CVE-2026-20252 Server-Side Request Forgery (SSRF) through Dashboard Studio PDF Export in Splunk Enterprise
- CVE-2026-20251 Remote Code Execution through Deserialization of Untrusted Data in Splunk Secure Gateway
- CVE-2026-20250 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-2025 Mail Mint < 1.19.5 - Unauthenticated Emails Disclosure
- CVE-2026-20249 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20248 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20247 Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability
- CVE-2026-20246 Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability
- CVE-2026-20245 Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output
- CVE-2026-20244 ClamAV DMG File Processing Denial of Service Vulnerability
- CVE-2026-20243 ClamAV ALZ Archive Processing Denial of Service Vulnerability
- CVE-2026-20242 Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
- CVE-2026-20240 Denial of Service through coldToFrozen.sh Script in Splunk Enterprise
- CVE-2026-2024 PhotoStack Gallery <= 0.4.1 - Unauthenticated SQL Injection via 'postid' Parameter
- CVE-2026-20239 Sensitive Information Disclosure through Log Files in Splunk Enterprise
- CVE-2026-20238 Improper Access Control through Role Inheritance in Splunk AI Toolkit app
- CVE-2026-20237 Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities
- CVE-2026-20236 Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
- CVE-2026-20235 Cisco Identity Services Engine Information Disclosure Vulnerability
- CVE-2026-20234 Cisco Identity Services Engine Hardening Release - Insuffiencently Protected Credential Vulnerabilities
- CVE-2026-20233 Cisco Webex Meetings Cross-Site Scripting Vulnerability
- CVE-2026-20232 Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability
- CVE-2026-20231 Other in Cisco Secure Workload
- CVE-2026-20230 Cisco Unified Communications Manager Server-Side Request Forgery (SSRF)
- CVE-2026-2023 WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation
- CVE-2026-20224 Cisco Catalyst SD-WAN Manager XML External Entity Injection Vulnerability
- CVE-2026-20223 Cisco Secure Workload Unauthorized API Access Vulnerability
- CVE-2026-20222 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20221 Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
- CVE-2026-20220 Cisco Crosswork Network Controller Remote Code Execution Vulnerability
- CVE-2026-2022 Smart Forms <= 2.6.99 - Missing Authorization to Authenticated (Subscriber+) Campaign Data Exposure
- CVE-2026-20219 Missing authorization in Cisco Slido
- CVE-2026-20218 Memory corruption in Cisco Open Source Snort3
- CVE-2026-20217 ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability
- CVE-2026-20216 ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability
- CVE-2026-20215 ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability
- CVE-2026-20214 ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability
- CVE-2026-20213 ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability
- CVE-2026-20212 Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
- CVE-2026-20211 Cisco Identity Services Engine Remote Code Execution Vulnerability
- CVE-2026-20210 Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- CVE-2026-2021 Cross-site scripting in Slideshow Gallery LITE
- CVE-2026-20209 Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
- CVE-2026-20206 Cisco ThousandEyes BrowserBot Command Injection Vulnerability
- CVE-2026-20205 Sensitive Information Disclosure in ''_internal'' index in Splunk MCP Server app
- CVE-2026-20204 Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk Enterprise
- CVE-2026-20203 Improper Access Control in Data Model Acceleration in Splunk Enterprise
- CVE-2026-20202 Improper Input Validation during User Account Creation in Splunk Enterprise
- CVE-2026-20200 Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
- CVE-2026-2020 JS Archive List <= 6.1.7 - Authenticated (Contributor+) PHP Object Injection via 'included' Shortcode Attribute
- CVE-2026-20199 Command injection in Cisco ThousandEyes Enterprise Agent
- CVE-2026-20198 Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
- CVE-2026-20197 Multiple Cisco Products Snort 3 Teredo Protocol Denial of Service Vulnerability
- CVE-2026-20195 Cisco Identity Services Engine Observable Response Discrepancy Vulnerability
- CVE-2026-20194 Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities
- CVE-2026-20193 Cisco Identity Services Engine Authentication Bypass Vulnerability
- CVE-2026-20192 Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
- CVE-2026-20191 Cisco Catalyst Center Arbitrary File Read Vulnerability
- CVE-2026-20190 Cisco Identity Services Engine Information Disclosure Vulnerability
- CVE-2026-2019 Cart All In One For WooCommerce <= 1.1.21 - Authenticated (Administrator+) Code Injection via 'sc_assign_page' Setting
- CVE-2026-20189 Cisco Prime Infrastructure Information Disclosure Vulnerability
- CVE-2026-20188 Cisco Crosswork Network Controller and Cisco Network Services Orchestrator Advisory
- CVE-2026-20187 Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities
- CVE-2026-20186 Cisco Identity Services Engine Multiple Authenticated Remote Code Execution Vulnerability
- CVE-2026-20185 Cisco SG350 and SG350X Series Managed Switches SNMP Denial of Service Vunerability
- CVE-2026-20184 Cisco Webex Meetings Certificate Validation Vulnerability
- CVE-2026-20182 Cisco Catalyst SD-WAN Controller Authentication Bypass
- CVE-2026-20181 Cisco Identity Services Engine Remote Code Execution Vulnerability
- CVE-2026-20180 Cisco Identity Services Engine Multiple Remote Code Execution Vulnerability
- CVE-2026-2018 itsourcecode School Management System controller.php sql injection
- CVE-2026-20179 Multiple Cisco Products Snort 3 Generic Routing Encapsulation Denial of Service Vulnerabilities
- CVE-2026-20178 Open redirect in Cisco Webex App
- CVE-2026-20177 Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability
- CVE-2026-20176 Cisco Identity Services Engine Remote Code Execution Vulnerability
- CVE-2026-20175 Cisco Finesse File Inclusion Vulnerability
- CVE-2026-20174 Cisco Nexus Dashboard Insights Arbitrary File Write Vulnerability
- CVE-2026-20173 Cisco NX-OS Software Denial of Service Vulnerability
- CVE-2026-20172 Cisco Enterprise Chat and Email Lite Agent File Upload Vulnerability
- CVE-2026-20171 Cisco Nexus 3000 and 9000 Series Border Gateway Protocol Denial of Service Vulnerability
- CVE-2026-20170 Cross-site scripting in Cisco Webex Contact Center
- CVE-2026-2017 IP-COM W30AP POST Request wx3auth R7WebsSecurityHandler stack-based overflow
- CVE-2026-20169 Cisco IoT Field Network Director Command Injection Vulnerability
- CVE-2026-20168 Cisco IoT Field Network Director Path Traversal Vulnerability
- CVE-2026-20167 Cisco IoT Field Network Director Remote Device Denial of Service Vulnerability