Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 835 of 1013.
- CVE-2026-18181 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18180 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18179 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18178 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-18177 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18176 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18175 IBM i is Affected By Improper Authorization and Authentication Vulnerabilities in DDM / DRDA [, ]
- CVE-2026-18174 @fastify/forwarded vulnerable to improper input validation via unstripped tab characters in X-Forwarded-For
- CVE-2026-18173 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18172 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18171 Docker Sandboxes read-only runtime mount writable through its shared-export alias
- CVE-2026-18170 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18169 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4
- CVE-2026-18166 Missing authorization in Db2
- CVE-2026-18165 @fastify/oauth2 vulnerable to Login CSRF via plantable OAuth state cookies
- CVE-2026-18164 Flow Neuroscience FL-100 Use of Hard-coded Credentials
- CVE-2026-18163 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18162 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18161 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-1816 OTP Bypass in TEİAŞ's Mobile Application
- CVE-2026-18157 Yggdrasil-worker-package-manager: yggdrasil-worker-package-manager: remote code execution via apt argument injection
- CVE-2026-18156 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18154 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18153 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18152 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18151 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.
- CVE-2026-18150 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-1815 Session Hijacking in TEİAŞ's Mobile Application
- CVE-2026-18149 undici vulnerable to Denial of Service via orphaned RetryHandler response body
- CVE-2026-18148 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-18147 Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url
- CVE-2026-18146 Fluent Forms <= 6.2.11 - Unauthenticated Stored Cross-Site Scripting via Notification Smartcode Values
- CVE-2026-18145 Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution
- CVE-2026-18144 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-18143 Request a Quote for WooCommerce <= 2.9.2 - Unauthenticated Arbitrary File Upload via AJAX Popup Handler
- CVE-2026-18141 Aap-gateway: aap-gateway: authentication bypass in event-driven ansible via forged http header
- CVE-2026-18140 aws-smithy-json: Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
- CVE-2026-1814 Rapid7 Nexpose Insecure Java Keystore Password Generation
- CVE-2026-18137 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18134 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18133 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18132 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18131 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-1813 bolo-blog bolo-solo FreeMarker Template PicUploadProcessor.java unrestricted upload
- CVE-2026-18129 Information disclosure in Endpoint Manager
- CVE-2026-18127 Path traversal in Endpoint Manager
- CVE-2026-18125 Memory corruption in Endpoint Manager
- CVE-2026-18124 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18123 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18122 Concrete CMS 9.2.0 to 9.5.2 Express REST API list endpoint exposes restricted Express entries via Missing Authorization
- CVE-2026-18121 Missing authorization in Concrete CMS
- CVE-2026-18120 Missing Authorization in legacy Express entries search endpoint allows disclosure of Express entry data
- CVE-2026-1812 bolo-blog bolo-solo Filename BackupService.java importFromCnblogs path traversal
- CVE-2026-18119 Concrete CMS below 9.5.3 is vulnerable to Stored XSS via unsanitized inline block custom style values
- CVE-2026-18117 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Custom Page Alias Name
- CVE-2026-18116 Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications
- CVE-2026-18115 Missing authorization in Concrete CMS
- CVE-2026-18114 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18113 Concrete CMS 9.0 to 9.5.2 is vulnerable to Stored XSS in the Top Navigation Bar Block via Dropdown Child Page Names
- CVE-2026-18111 Cross-site scripting in Concrete CMS
- CVE-2026-18110 Missing authorization in Concrete CMS
- CVE-2026-1811 bolo-blog bolo-solo Filename BackupService.java importFromMarkdown path traversal
- CVE-2026-18109 W3 Total Cache <= 2.10.3 - Unauthenticated Stored Cross-Site Scripting via Comment Author Name
- CVE-2026-18108 Auth bypass in Net::SAML2
- CVE-2026-18107 Criu: criu: container escape via rseq critical section hijack during checkpoint/restore
- CVE-2026-18106 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-18105 Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service
- CVE-2026-18104 IBM Db2 Mirror for i is vulnerable to obtain sensitive information []
- CVE-2026-18103 Dhcp-server: dhcp-server: persistent denial of service due to buffer overflow via omapi
- CVE-2026-18102 IBM i Buffer Overflow
- CVE-2026-18101 IBM i is Affected By Multiple Vulnerabilities in WebSphere Application Server Liberty
- CVE-2026-18100 MetForm <= 4.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'mf_form_id' Widget Setting
- CVE-2026-1810 bolo-blog bolo-solo ZIP File BackupService.java unpackFilteredZip path traversal
- CVE-2026-18099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-18098 IBM i is Affected By XML injection flaw in Navigator for i
- CVE-2026-18097 Information disclosure in Db2
- CVE-2026-18096 IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak
- CVE-2026-18095 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18092 Auth bypass in Net::SAML2
- CVE-2026-18090 Gdk-pixbuf: gdk-pixbuf: heap out-of-bounds read in uncompress() via crafted icns rle block
- CVE-2026-1809 HTML Shortcodes <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- CVE-2026-18089 Auth bypass in Net::SAML2
- CVE-2026-18086 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
- CVE-2026-18085 Improper Input Validation Leads to Arbitrary File Download and Potential Denial of Service in BlackBerry UEM
- CVE-2026-18084 Cross-Site Scripting (XSS) in Management Console of BlackBerry UEM
- CVE-2026-18080 File upload in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- CVE-2026-1808 Cross-site scripting in Orange Comfort+ accessibility toolbar for WordPress
- CVE-2026-18078 IBM i is Affected By Denial of Service Vulnerability in Save Restore []
- CVE-2026-18077 IBM i is Affected By Multiple Vulnerabilities in Simple Mail Transfer Protocol
- CVE-2026-18076 IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-18074 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18073 IBM i is Affected By Multiple Vulnerabilities in Debug Server
- CVE-2026-18072 Hardcoded credentials in Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick …
- CVE-2026-18071 IBM i is Affected By An Improper Management Vulnerability in HTTP Server []
- CVE-2026-1807 Cross-site scripting in InteractiveCalculator for WordPress
- CVE-2026-18069 IBM i is Affected By A Race Condition Vulnerability in SQL Query Engine []
- CVE-2026-18068 IBM i is Affected By Multiple Vulnerabilities in Java Secure Sockets Extension
- CVE-2026-18066 IBM Financial Transaction Manager (FTM) is Impacted by Multiple Vulnerabilities
- CVE-2026-18065 IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.