Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 819 of 1013.
- CVE-2026-2007 PostgreSQL pg_trgm heap buffer overflow writes pattern onto server memory
- CVE-2026-20069 Cross-site scripting in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20068 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
- CVE-2026-20067 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
- CVE-2026-20066 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
- CVE-2026-20065 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability
- CVE-2026-20064 Null dereference in Cisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20063 Cisco Secure FTD Software Authenticated Command Injection Vulnerability
- CVE-2026-20062 Missing authorization in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20061 Cisco Unity Connection SQL Injection Vulnerability
- CVE-2026-20060 Cisco Unity Connection Open Redirect Vulnerability
- CVE-2026-2006 PostgreSQL missing validation of multibyte character length executes arbitrary code
- CVE-2026-20059 Cisco Unity Connection Reflected Cross-Site Scripting Vulnerability
- CVE-2026-20058 Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
- CVE-2026-20057 Cisco Secure Firewall Threat Defense Software Snort 3 Visual Basic for Application Denial of Service Vulnerability
- CVE-2026-20056 Cisco Secure Web Appliance TBD Bypass Vulnerability
- CVE-2026-20055 Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Cross-Site Scripting Vulnerability
- CVE-2026-20054 Denial of service in Cisco Cyber Vision
- CVE-2026-20053 Memory corruption in Cisco Cyber Vision
- CVE-2026-20052 Cisco Secure Firewall Threat Defense Software Snort 3 Memory Management Denial of Service Vulnerability
- CVE-2026-20051 Cisco Nexus 3600-R and 9500-R Series Switching Platforms Layer 2 Loop Denial of Service Vulnerability
- CVE-2026-20050 Cisco Secure Firewall Threat Defense Decryption Policy Denial of Service Vulnerability
- CVE-2026-2005 PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
- CVE-2026-20049 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20048 Cisco NX-OS Software SNMP Denial of Service Vulnerability
- CVE-2026-20047 Cisco Identity Services Engine Cross-Site Scripting Vulnerability
- CVE-2026-20046 Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- CVE-2026-20045 Cisco Unified Communications Products Code Injection
- CVE-2026-20044 Cisco Secure Firewall Management Center Command Injection Vulnerability
- CVE-2026-20043 Multiple Cisco Products Snort 3 Software Hardening Release: October 2026
- CVE-2026-20042 Cisco Nexus Dashboard Configuration REST API Unauthorized Access Vulnerability
- CVE-2026-20041 Cisco Nexus Dashboard Server Side Request Forgery Vulnerability
- CVE-2026-20040 Cisco IOS XR Software CLI Privilege Escalation Vulnerability
- CVE-2026-2004 PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
- CVE-2026-20039 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20038 Cisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability
- CVE-2026-20037 Cisco UCS Manager File Write Vulnerability
- CVE-2026-20036 Cisco UCS Manager Software Command Injection Vulnerability
- CVE-2026-20035 Cisco Unity Connection Server-Side Request Forgery Vulnerability
- CVE-2026-20034 Cisco Unity Connection Remote Code Execution Vulnerability
- CVE-2026-20033 Cisco NX-OS Software Denial of Service Vulnerability
- CVE-2026-20032 Cisco NX-OS Software Python Sandbox Escape Vulnerability
- CVE-2026-20031 ClamAV CSS Image Parsing Error Handling Denial of Service Vulnerability
- CVE-2026-20030 Cisco Crosswork Security Hardening Release: August 2026
- CVE-2026-2003 PostgreSQL oidvector discloses a few bytes of memory
- CVE-2026-20029 Cisco Identity Services Engine XML External Entity Processing Information Disclosure Vulnerability
- CVE-2026-20028 Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability
- CVE-2026-20027 Cisco Snort DCERPC Stub Data Out of Bounds Read
- CVE-2026-20026 Multiple Cisco Products Snort 3 DCERPC Vulnerabilities
- CVE-2026-20025 Integer overflow in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20024 Memory corruption in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20023 Memory corruption in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20022 Memory corruption in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20021 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20020 Memory corruption in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-2002 Cross-site scripting in Forminator Forms – Contact Form, Payment Form & Custom Form Builder
- CVE-2026-20019 Multiple Cisco Products Snort 3 Netflow Denial of Service Vulnerabilities
- CVE-2026-20018 Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability
- CVE-2026-20017 Cisco Secure FTD Software Authenticated Command Injection Vulnerability
- CVE-2026-20016 Command injection in Cisco Secure Firewall Threat Defense (FTD) Software
- CVE-2026-20015 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20014 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20013 Denial of service in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20012 Denial of service in Cisco IOS XE Software
- CVE-2026-20011 Multiple Cisco Products Snort 3 SMTP MIME Denial of Service Vulnerability
- CVE-2026-20010 Cisco Nexus 3000 and 9000 Series Switches Link Layer Discovery Protocol Denial of Service Vulnerability
- CVE-2026-2001 WowRevenue <= 2.1.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
- CVE-2026-20009 Cisco Secure Firewall Adaptive Security Appliance SSH Partial Private Key Authentication Bypass Vulnerability
- CVE-2026-20008 Code injection in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
- CVE-2026-20007 Cisco Secure Firewall Threat Defense Software Snort Deep Inspection Bypass Vulnerability
- CVE-2026-20006 Cisco Firepower Threat Defense Software and Cisco FirePOWER Services TLS with Snort 3 Denial of Service Vulnerability
- CVE-2026-20005 Denial of service in Cisco Cyber Vision
- CVE-2026-20004 Denial of service in Cisco IOS XE Software
- CVE-2026-20003 SQL injection in Cisco Secure Firewall Management Center (FMC)
- CVE-2026-20002 SQL injection in Cisco Secure Firewall Management Center (FMC)
- CVE-2026-20001 Cisco Secure Firewall Management Center Software SQL Injection Vulnerabilities
- CVE-2026-20000 itsourcecode Hospital Management System viewprescriptionrecord.php sql injection
- CVE-2026-2000 DCN DCME-320 Web Management Backend bridge_cfg.php apply_config command injection
- CVE-2026-19999 Memory corruption in Assimp
- CVE-2026-19998 code-projects Online Shopping System offersmail.php cross site scripting
- CVE-2026-19997 Webkul Bagisto Backend Sales RMA Endpoint requests authorization
- CVE-2026-19996 Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management
- CVE-2026-19995 Webkul Bagisto RMA Message send-message cross site scripting
- CVE-2026-19994 Webkul Bagisto Configuration Management execute authorization
- CVE-2026-19993 Webkul Bagisto RMA State Validation update-status behavioral workflow
- CVE-2026-19992 Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure
- CVE-2026-19991 UsersWP <= 1.2.70 - Authenticated (Subscriber+) Arbitrary File Deletion
- CVE-2026-1999 Missing authorization in Enterprise Server
- CVE-2026-19988 Alaev SEO Tools Extension Popup UI popup.html addDiv cross site scripting
- CVE-2026-19987 SourceCodester Best Employee Management System Profile exposure of information through directory listing
- CVE-2026-19986 Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorization
- CVE-2026-19985 Relevanssi <= 4.28.1 - Reflected Cross-Site Scripting
- CVE-2026-19984 jkawamoto mcp-florence2 __init__.py get_images server-side request forgery
- CVE-2026-19983 GL.iNet XE3000 NAS Command Service gl_nas_sys os command injection
- CVE-2026-19982 GL.iNet BE9300/MT6000 Firewall-management RPC os command injection
- CVE-2026-19981 GL.iNet XE3000 Wi-Fi Timer Power-Schedule Feature os command injection
- CVE-2026-19980 GL.iNet XE3000 Language Update ui.update_langs code injection
- CVE-2026-1998 micropython runtime.c mp_import_all memory corruption
- CVE-2026-19979 GL.iNet XE3000 WebDAV Service MOVE authorization
- CVE-2026-19978 jiantao88 android-mcp-server Command Execution index.js child_process.exec os command injection