Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 822 of 1013.
- CVE-2026-19768 Code injection in PowerShell Universal
- CVE-2026-19767 itsourcecode Hospital Management System viewdoctortimings.php sql injection
- CVE-2026-19766 Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
- CVE-2026-19765 eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery
- CVE-2026-19764 Raisecom Communication Command and Dispatch Management Platform getpwd.php sql injection
- CVE-2026-19763 DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal
- CVE-2026-19762 DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal
- CVE-2026-19761 DTStack Taier Upload Controller UploadController.java MultipartFile.getOriginalFilename path traversal
- CVE-2026-19760 WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header
- CVE-2026-1976 Free5GC SMF SessionDeletionResponse null pointer dereference
- CVE-2026-19759 Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution
- CVE-2026-19758 dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal
- CVE-2026-19757 Dromara lamp-cloud File-Upload Controller FileAnyoneController.java path traversal
- CVE-2026-19756 Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal
- CVE-2026-19755 NoSleep 1.5.1 - Unauthorized disclosure of root-owned files through privileged XPC helper
- CVE-2026-19754 Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
- CVE-2026-19753 Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgery
- CVE-2026-19752 EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery
- CVE-2026-19751 EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery
- CVE-2026-19750 Tenda CH/CP/TX3 SSH hard-coded password
- CVE-2026-1975 Free5GC pfcp_reports.go identityTriggerType null pointer dereference
- CVE-2026-19749 Tenda CH7 RTSP/ONVIF missing authentication
- CVE-2026-19748 Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy
- CVE-2026-19747 Tenda CH7 ATE Module Kylin HandleCmd command injection
- CVE-2026-19746 Calix GigaSpire traceroute.cmd denial of service
- CVE-2026-19745 Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service
- CVE-2026-19744 Stored Cross-site Scripting in Pentestify Markdown renderer via unescaped quotes
- CVE-2026-19743 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients
- CVE-2026-19742 IPv6 stable and temporary interface identifiers derived from a non-cryptographic PRNG secret key
- CVE-2026-19741 OpenThread joiner autostart uses a publicly documented default Joining Device Credential (PSKd)
- CVE-2026-19740 Bluetooth LE Controller: retained RX node leak and reachable assertion in the PHY Update procedure
- CVE-2026-1974 Free5GC SMF datapath.go ResolveNodeIdToIp denial of service
- CVE-2026-19739 Bluetooth LE controller leaks a retained RX node when an unexpected LL Control PDU arrives during a Connection Update
- CVE-2026-19738 Retained RX node leak and reachable assertion in Bluetooth Controller CIS Create procedures
- CVE-2026-19737 NULL pointer dereference in the ESP32 I2S driver when triggering an unsupported direction
- CVE-2026-19736 Out-of-bounds write in the NXP MCUX TRNG entropy driver for non-word-multiple request lengths
- CVE-2026-19735 Predictable TCP initial sequence numbers when the RFC 6528 secret key generation fails silently in the Zephyr TCP stack
- CVE-2026-19734 IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking
- CVE-2026-19733 SSRF in Yordam Informatics's Library Automation System
- CVE-2026-19730 Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives
- CVE-2026-1973 Free5GC SMF establishPfcpSession null pointer dereference
- CVE-2026-19729 Keycloak-services: keycloak-services: incomplete fix for arbitrary filesystem path probing via keystore parameters
- CVE-2026-19728 Missing authorization in Extra Product Options Builder for WooCommerce
- CVE-2026-19727 HTML Injection via Improper Input Sanitization in Yordam Informatics's Library Automation System
- CVE-2026-19726 Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
- CVE-2026-19725 WPvivid Backup & Migration < 0.9.131 - Unauthenticated Path Traversal via send_to_site_connect
- CVE-2026-19723 Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler
- CVE-2026-19722 WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore
- CVE-2026-1972 Edimax BR-6208AC auth_check_userpass2 default credentials
- CVE-2026-19719 Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Contributor+ Stored XSS via Post Title
- CVE-2026-19718 BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery
- CVE-2026-19717 CatFolders Document Gallery < 2.0.7 - Unauthenticated Attachment Disclosure via REST API
- CVE-2026-19716 Stored Cross-site Scripting in Pentestify user account deletion via unescaped username
- CVE-2026-19715 WP OAuth Server < 6.3.1 - Unauthenticated OAuth Token and User Data Disclosure via Debug Log File
- CVE-2026-19714 Simple JWT Login < 3.6.8 - Unauthenticated Account Takeover via Missing Google id_token Audience Validation
- CVE-2026-19713 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-19712 Masteriyo LMS < 2.3.3 - Instructor+ Stored XSS via Quiz Description
- CVE-2026-19711 Premium Packages – Sell Digital Products Securely < 7.0.7 - Subscriber+ Arbitrary Amount Withdrawal Request
- CVE-2026-19710 SourceCodester Simple Student Information System view_department.php sql injection
- CVE-2026-1971 Edimax BR-6288ACL wiz_WISP24gmanual.asp wiz_WISP24gmanual cross site scripting
- CVE-2026-19709 Membership For WooCommerce < 3.1.2 - Unauthenticated Member Data Disclosure via REST Consumer Secret Bypass
- CVE-2026-19708 File Manager 7.2.2 - 8.0.4 - Unauthenticated Database Backup Disclosure
- CVE-2026-19704 Comments – wpDiscuz < 7.6.66 - Unauthenticated Comment Disclosure via SQLi
- CVE-2026-19702 OS Command Injection in TÜBİTAK BİLGEM's Pardus Boot Repair
- CVE-2026-1970 Edimax BR-6258n formStaDrvSetup redirect
- CVE-2026-19699 GutenKit 2.4.12 - 2.4.15 - Contributor+ Mailchimp Audience Data Disclosure
- CVE-2026-19698 GutenKit < 2.5.1 - Contributor+ Stored CSS Injection
- CVE-2026-19697 GutenKit < 2.5.0 - Author+ Stored XSS via SVG Upload
- CVE-2026-19696 Out-of-bounds Write in Wireshark
- CVE-2026-19695 Stack-based Buffer Overflow in Wireshark
- CVE-2026-19694 Heap-based Buffer Overflow in Wireshark
- CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component
- CVE-2026-1969 ThemeREX Addons < 2.38.5 - Unauthenticated Arbitrary File Upload
- CVE-2026-19685 Security feature bypass in Red Hat Enterprise Linux 10
- CVE-2026-19683 Unencrypted Credential Transmission in Omada Gateway Dynamic DNS Authentication in Omada Gateways
- CVE-2026-19682 Command Injection
- CVE-2026-19681 Command Injection
- CVE-2026-19680 SQL Injection
- CVE-2026-19679 Improper Input Validation
- CVE-2026-19678 Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure
- CVE-2026-19677 Authentication Bypass Leading to Server-Side Command Execution
- CVE-2026-19676 Memory corruption in zephyr
- CVE-2026-19673 Out-of-bounds read and net_buf length underflow in Zephyr Ethernet L2 when parsing a truncated VLAN header
- CVE-2026-19672 tarfile extraction filter bypass allows creation of directories outside the destination
- CVE-2026-19671 Improper handling of highly compressed data (data amplification) in CISA Malcolm
- CVE-2026-19670 Incorrect Authorization in CISA Malcolm
- CVE-2026-19669 Unbounded variable-length array in fuel gauge syscall verifiers allows kernel stack overflow from user mode
- CVE-2026-19668 Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching
- CVE-2026-19667 Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`
- CVE-2026-19666 Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path
- CVE-2026-19662 qpcache NOQNAME proof use-after-free crashes recursive resolver
- CVE-2026-19660 Divi Membership <= 2.3.0 - Unauthenticated Authentication Bypass via 'paypal_param' Parameter
- CVE-2026-1966 YugabyteDB Anywhere Exposes LDAP Credentials in Cleartext in Web UI
- CVE-2026-19658 Deserialization in Give Tributes
- CVE-2026-19657 ScadaLTS Unauthenticated Reflected XSS
- CVE-2026-19656 ScadaLTS Authenticated Remote Code Execution
- CVE-2026-19655 Denial of service in EOS
- CVE-2026-19654 Memory corruption in Red Hat Enterprise Linux 10
- CVE-2026-19653 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-19652 Divi Membership <= 2.2.0 - Unauthenticated Privilege Escalation via 'form_id' Parameter