Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 831 of 1013.
- CVE-2026-18661 In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern ru
- CVE-2026-18660 Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames
- CVE-2026-1866 Cross-site scripting in Name Directory
- CVE-2026-18659 Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring
- CVE-2026-18658 IBM Operational Decision Manager for Aug 2026 - Multiple CVEs addressed
- CVE-2026-18657 Executable Resolution from Untrusted Project Directory in Kiro CLI on Windows
- CVE-2026-18656 Executable Resolution from Untrusted Project Directory in Kiro IDE on Windows
- CVE-2026-18655 Broker Credential and OAuth Token Disclosure in AWS Labs Amazon MQ MCP Server via Prompt Injection
- CVE-2026-18654 Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
- CVE-2026-18653 WP Directory Kit < 1.5.7 - Admin+ SQL Injection via section Parameter
- CVE-2026-18652 Velociraptor STACK Type Download Path Bypasses Denied Prefix Check
- CVE-2026-18651 Auth bypass in Red Hat Directory Server 11
- CVE-2026-18650 Missing Authorization Leading to Root Code Execution in HAVELSAN's Liman MYS
- CVE-2026-1865 User Registration & Membership <= 5.1.2 - Authenticated (Subscriber+) SQL Injection via membership_ids[]
- CVE-2026-18649 Gstreamer1-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay rtp depayloaders
- CVE-2026-18648 Blix Email Blue Mail Calendar App react-native-receive-sharing-intent FileDirectory.getFileFromUri path traversal
- CVE-2026-18647 jina-ai reader Crawler/Puppeteer crawler.ts isValidTLD server-side request forgery
- CVE-2026-18646 danpros HTMLy Author Name htmly.php path traversal
- CVE-2026-18645 danpros HTMLy Admin Content Endpoint admin.php add_content path traversal
- CVE-2026-18644 danpros HTMLy Delete Username Endpoint htmly.php unlink path traversal
- CVE-2026-18642 Remote Code Execution via Insecure Deserialization in TÜBİTAK BİLGEM's eta-otp-lock
- CVE-2026-18641 Command injection in Operation and Maintenance Security Management System
- CVE-2026-18640 Velociraptor directory traversal via the NewNotebook API
- CVE-2026-18639 Velociraptor OIDC Authenticator susceptible to email spoofing
- CVE-2026-18638 Velociraptor server crash via the SetPassword API
- CVE-2026-18636 Velociraptor VFSGetBuffer API path deny list bypass
- CVE-2026-18635 Velociraptor query plugin allows impersonation in other orgs
- CVE-2026-18634 Deserialization in GMS
- CVE-2026-18632 langgenius dify Jinja2 jinja2_transformer.py jinja2.Template special elements used in a template engine
- CVE-2026-18631 jeequan jeepay PreAuthorize SysLogController.java WebSecurityConfig authorization
- CVE-2026-18630 SQL Injection in TMT Machine's Talassoft Industrial Management Software
- CVE-2026-18626 Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) allows Overread Buffers.
- CVE-2026-18622 Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid
- CVE-2026-18621 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening
- CVE-2026-18620 Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy
- CVE-2026-1862 Memory corruption in Chrome
- CVE-2026-18618 Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener
- CVE-2026-18617 Code injection in Red Hat OpenShift AI 2.25
- CVE-2026-18616 GL-iNet GL-MT3000 wg-server.so Native Plugin glc server.set_peer command injection
- CVE-2026-18615 GL-iNet GL-MT3000 wg-server.so Native Plugin glc wg-server.generate_publickey command injection
- CVE-2026-18614 GL-iNet GL-MT3000 s2s.so Native Plugin glc s2s.enable_echo_server command injection
- CVE-2026-18613 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection
- CVE-2026-18612 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.install_package command injection
- CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials
- CVE-2026-18610 NewType WebEIP EIP_Com_FileList.aspx improper authentication
- CVE-2026-1861 Memory corruption in Chrome
- CVE-2026-18608 Privilege escalation in Red Hat OpenShift AI 2.25
- CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow
- CVE-2026-18606 Razer RzUpdateService Named Pipe RzUpdateService.exe privileges management
- CVE-2026-18605 CheckMAL AppCheck Pro Kernel Mini-Filter Driver AppCheckD.sys uncontrolled search path
- CVE-2026-18604 textPlus Text Message and Call App com.gogii.textplus DialerActivity improper export of android application components
- CVE-2026-18603 Cancel Order & Request Woocommerce < 1.3.4.34 - Unauthenticated Order Content Disclosure via Reorder AJAX Actions
- CVE-2026-18602 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.get_recommend_config command injection
- CVE-2026-18601 GL.iNet GL-MT3000 ovpn-client.so Native Plugin glc ovpn-client.check_config command injection
- CVE-2026-18600 GL.iNet GL-MT3000 Network Lua RPC Plugin network network.switch_status command injection
- CVE-2026-1860 Kali Forms <= 2.4.8 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Form Data Exposure
- CVE-2026-18599 GL.iNet GL-MT3000 Logread Lua RPC Plugin logread logread.set_config command injection
- CVE-2026-18598 GL.iNet GL-MT3000 Logread Lua RPC plugin logread logread.get_system_log command injection
- CVE-2026-18597 Blind SSRF on Foxit PDF Services API
- CVE-2026-18595 WP-Lister Lite for eBay <= 3.8.9 - Unauthenticated Stored Cross-Site Scripting via AJAX Cron Handler Request
- CVE-2026-18594 Missing authorization in Advanced Contact form 7 DB
- CVE-2026-18593 vxcontrol PentAGI Tool Management Protocol pentester.tmpl sandbox
- CVE-2026-18592 osCommerce Email Template Configuration EmailController.php EmailController sql injection
- CVE-2026-18591 Meesho Online Shopping App com.meesho.supply cleartext storage
- CVE-2026-18590 Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection
- CVE-2026-18589 Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow
- CVE-2026-18588 Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow
- CVE-2026-18587 Wavlink WL-NU516U1 Config Import os command injection
- CVE-2026-18586 Premium Packages <= 7.0.5 - Unauthenticated Stored Cross-Site Scripting via 'order_email'
- CVE-2026-18585 GL.iNet MT2500 APPS-NAS nas-web.get_file_list heap-based overflow
- CVE-2026-18584 GL.iNet E5800/E750/X2000/X3000/XE3000/XE300 eSIM LPA API v1 improper authorization
- CVE-2026-18583 mz-automation libiec61850 MMS Request mms_mapping.c checkDataSetAccess out-of-bounds
- CVE-2026-18582 Memory corruption in libiec61850
- CVE-2026-18581 ggml-org llama.cpp Jinja Minja Template parser.cpp assertion
- CVE-2026-1858 wget2 Improper Certificate Validation
- CVE-2026-18579 WP Photo Album Plus <= 9.2.08.003 - Unauthenticated Stored Cross-Site Scripting
- CVE-2026-18577 N-able N-central Authentication Bypass Using an Alternate Path or Channel
- CVE-2026-18574 Authentication Bypass in Check Point Security Management Server
- CVE-2026-18573 Keycloak-services: keycloak-services: client access-type policy condition bypass during client update
- CVE-2026-18572 Keycloak-services: keycloak-services: uma claim token can override authorization time-policy evaluation attributes
- CVE-2026-18571 Keycloak-services: keycloak-services: fgap v2 group assignment bypass during user creation
- CVE-2026-18570 Keycloak-services: keycloak-services: full-scope-disabled client policy validation bypass via omitted fullscopeallowed
- CVE-2026-1857 Server-side request forgery in Kadence Blocks — Page Builder Toolkit for Gutenberg Editor
- CVE-2026-18569 Keycloak-services: keycloak-services: oidc backchannel logout accepts unsigned forged logout tokens
- CVE-2026-18568 Security feature bypass in XML::Sig
- CVE-2026-18567 IBM Db2 Mirror for i is affected by multiple vulnerabilities [, , ]
- CVE-2026-18562 HUSKY <= 1.4.3 - Reflected Cross-Site Scripting
- CVE-2026-18561 Unlimited Elements For Elementor <= 2.0.16 - Unauthenticated SQL Injection
- CVE-2026-18560 Missing authorization in Mattermost
- CVE-2026-1856 Cross-site scripting in Creavi Appointment Booking Calendar
- CVE-2026-18558 Embed Any Document <= 2.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'embeddoc' Shortcode
- CVE-2026-18557 Photo Gallery by 10Web <= 1.8.42 - Reflected Cross-Site Scripting via 'title' Parameter
- CVE-2026-18556 N-able N-central Authentication Bypass Using an Alternate Path or Channel
- CVE-2026-18555 Cross-site scripting in Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots
- CVE-2026-18554 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-18551 Mattermost guest account privilege escalation via member roles API
- CVE-2026-18550 Nokri - Job Board WordPress Theme <= 1.6.6 - Unauthenticated Privilege Escalation via 'token' Parameter
- CVE-2026-18549 @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit
- CVE-2026-18548 Groundhogg <= 4.5.14 - Unauthenticated Stored Cross-Site Scripting via 'ref' Parameter
- CVE-2026-18547 Cross-site scripting in Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin