Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 843 of 1013.
- CVE-2026-17191 VeloCloud Orchestrator Flow Metrics API SQL Injection
- CVE-2026-1719 Gravity Bookings <= 2.5.9 - Unauthenticated SQL Injection via 'category_id' Parameter
- CVE-2026-17189 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
- CVE-2026-17186 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17184 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17183 CVE-2026-17183 CVE Record
- CVE-2026-17182 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17181 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-1718 IBM® Db2® is vulnerable to a denial of service with a specially crafted query when running an AUTONOMOUS procedure
- CVE-2026-17179 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17177 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17176 OS Command Injection Vulnerability in Deco Devices
- CVE-2026-17175 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17173 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17171 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17170 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1717 Privilege escalation in Baiying
- CVE-2026-17168 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17166 Missing authorization in Event Booking Manager for WooCommerce – Sell Tickets, Event Registration, RSVP & Event Calendar
- CVE-2026-17165 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17163 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17162 WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'currentPostId' Block Attribute
- CVE-2026-17161 WowStore <= 4.4.24 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'filterMobileText' Block Attribute
- CVE-2026-17160 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1716 Privilege escalation in Baiying
- CVE-2026-17159 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17157 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17156 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- CVE-2026-17153 Missing authorization in AI Agent by SiteGround
- CVE-2026-17152 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1715 Privilege escalation in Baiying
- CVE-2026-17149 Cross-site scripting in Points Management System For Gamification, Ranks, Badges, and Loyalty Rewards Program – myCred
- CVE-2026-17145 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17142 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17141 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1714 ShopLentor <= 3.3.2 - Unauthenticated Email Relay Abuse via 'woolentor_suggest_price_action' AJAX Action
- CVE-2026-17138 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17136 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17133 IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs
- CVE-2026-1713 IBM MQ is affected by an authority vulnerablility
- CVE-2026-17124 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17123 Server-side request forgery in Royal Addons for Elementor – Addons and Templates Kit for Elementor
- CVE-2026-17122 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17121 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17120 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1712 Privilege escalation in Server
- CVE-2026-17118 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash
- CVE-2026-17111 IBM i is Affected By Multiple Vulnerabilities in SQL
- CVE-2026-17110 IBM i is Affected By Multiple Vulnerabilities in SQL
- CVE-2026-1711 Cross-site scripting in Pega Infinity
- CVE-2026-17109 IBM i is Affected By Multiple Vulnerabilities in SQL
- CVE-2026-17107 Cluster-proxy: impersonation-header injection grants cluster-admin on every managed cluster
- CVE-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
- CVE-2026-17102 DataStage on Cloud Pak for Data has several vulnerabilities
- CVE-2026-17101 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-17100 Power System Out-of-bounds Write
- CVE-2026-1710 WooPayments <= 10.5.1 - Missing Authorization to Unauthenticated Plugin Settings Update via save_upe_appearance_ajax
- CVE-2026-17099 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-17097 Power System Improper Validation
- CVE-2026-17095 IBM i is Affected By Multiple Vulnerabilities in Navigator for i
- CVE-2026-17094 IBM i is Affected By Path Traversal Vulnerability in Navigator for i
- CVE-2026-17093 Power System Buffer Overflow
- CVE-2026-17092 Missing authorization in Directorist: AI-Powered Business Directory, Listings & Classified Ads
- CVE-2026-17091 Power System Integer Overflow
- CVE-2026-17090 Cross-site scripting in Beaver Builder Page Builder – Drag and Drop Website Builder
- CVE-2026-1709 Keylime Missing Authentication for Critical Function and Improper Authentication
- CVE-2026-17089 Events Manager <= 7.4.0.1 - Reflected Cross-Site Scripting via 'header_format' Parameter
- CVE-2026-17088 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
- CVE-2026-17087 Missing authorization in WP Travel Engine – Tour Booking Plugin – Tour Operator Software
- CVE-2026-17086 ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content
- CVE-2026-17084 stringprep.map_table_b2() deviates from RFC 3454 Table B.2
- CVE-2026-17083 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
- CVE-2026-17082 IBM i is Affected By Multiple Vulnerabilities in the Debug Server
- CVE-2026-17081 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-1708 Appointment Booking Calendar <= 1.6.9.27 - Unauthenticated SQL Injection via 'append_where_sql' Parameter
- CVE-2026-17079 IBM Db2 Mirror for i is affected by multiple vulnerabilities
- CVE-2026-17078 IBM i is Affected By A Denial of Service Vulnerability in DRDA / DDM []
- CVE-2026-17077 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-17076 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-17075 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
- CVE-2026-17074 IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-17073 IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
- CVE-2026-17072 Memory corruption in Red Hat Enterprise Linux 10
- CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
- CVE-2026-17070 Vault Credential Confusion via Authorization Bypass in HAVELSAN's Liman MYS
- CVE-2026-1707 Restore restriction bypass via key disclosure vulnerability (pgAdmin 4)
- CVE-2026-17069 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
- CVE-2026-17068 IBM i is Affected By Improper Authorization and Access Control Vulnerabilities in Network File System
- CVE-2026-17063 Power System Incorrect Authorization
- CVE-2026-17061 Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026
- CVE-2026-17060 Vulnerabilities in IBM AIX and PowerVM VIOS
- CVE-2026-1706 All-in-One Video Gallery <= 4.7.1 - Reflected Cross-Site Scripting via 'vi' Parameter
- CVE-2026-17059 Keycloak-services: keycloak-services: information disclosure via role-users endpoint bypasses per-user view filter
- CVE-2026-17057 IBM i is Affected By Denial of Service Vulnerabilities in NFS [, ]
- CVE-2026-17054 Out-of-bounds read and permanent loss of Wi-Fi reception in the ESP-hosted SPI driver's frame reassembly
- CVE-2026-17053 Missing authorization in zephyr
- CVE-2026-17052 Memory corruption in zephyr
- CVE-2026-17051 Out-of-bounds write in the Intel SEDI IPM driver from an unvalidated inbound doorbell length
- CVE-2026-17050 Double free of the USB host configuration descriptor when device enumeration fails