Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 896 of 1013.
- CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth ldap filter injection in cleanallruv status check
- CVE-2026-1177 Yonyou KSOA HTTP GET Parameter save_folder.jsp sql injection
- CVE-2026-11769 Operator - Namespaced User Path Traversal
- CVE-2026-117688 Keycloak-services: keycloak-services: vault secret disclosure via client registration installation configuration
- CVE-2026-11767 CRT Addons for Elementor < 1.6.7 - Unauthenticated Stored XSS via Contact Form
- CVE-2026-11766 Ultimate Member < 2.12.0 - Subscriber+ Stored XSS via Custom Textarea Profile Fields
- CVE-2026-11765 Argument Injection in TUBITAK BILGEM's Pardus Pen
- CVE-2026-11764 Data exposed without proper permission
- CVE-2026-11763 IDOR in GIS Informatics' GisLab Laboratory Management System
- CVE-2026-117627 Keycloak-services: keycloak-services: jwt authorization grant bypasses identity provider login restrictions
- CVE-2026-117626 Path traversal in Jenkins
- CVE-2026-117625 Missing authorization in Jenkins
- CVE-2026-117624 Deserialization in Jenkins
- CVE-2026-117623 Cross-site scripting in Jenkins
- CVE-2026-117622 Cross-site scripting in Jenkins
- CVE-2026-117621 Cross-site scripting in Jenkins
- CVE-2026-117620 Missing authorization in Jenkins
- CVE-2026-117619 Auth bypass in Jenkins
- CVE-2026-117618 Race condition in Jenkins
- CVE-2026-117617 Path traversal in Jenkins
- CVE-2026-117616 Path traversal in Jenkins
- CVE-2026-117615 Path traversal in Jenkins
- CVE-2026-117614 Code injection in Jenkins
- CVE-2026-117613 Deserialization in Jenkins
- CVE-2026-117612 Deserialization in Jenkins
- CVE-2026-117611 Trust of compromised eMudhra root CA in bundled CA stores
- CVE-2026-117610 libexpat through 2.9.0 NULL Pointer Dereference via External Entity Subparser
- CVE-2026-117609 rtl_433 through 25.12 Stack-Based Buffer Overflow via Proflame 2 Decoder
- CVE-2026-117608 Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow
- CVE-2026-117607 Xerte Online Toolkits through 3.15.5 RCE via Language Pack Import
- CVE-2026-117606 NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions
- CVE-2026-117605 nopCommerce before 5.00.0 Missing Authorization via Admin ProductController Add Popup Handlers
- CVE-2026-117604 Grav from 1.7.53.3 before 1.7.53.6 Clockwork Profiler Authorization Bypass via Loopback Fallback
- CVE-2026-117603 Electrum before 4.7.2 Nostr Wallet Connect Plugin Daily Spending Limit Bypass
- CVE-2026-117602 Electrum before 4.7.2 External Plugin Authorization Bypass Local Code Execution
- CVE-2026-117601 Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions
- CVE-2026-1176 itsourcecode School Management System index.php sql injection
- CVE-2026-117574 Missing authorization in Red Hat OpenShift AI (RHOAI)
- CVE-2026-117573 hagent through commit 761eec6 OS Command Injection via Arduino and ESP32 MCP Tools
- CVE-2026-117570 nmap-mcp through commit 3636afa Permissive NSE Script Allowlist in scan_vulnerabilities
- CVE-2026-11757 Reflected XSS in KA Informatics' Bar Association Website
- CVE-2026-117569 Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters
- CVE-2026-117568 mcp-ffmpeg through 1.0.5 OS Command Injection via videoPath and outputDir
- CVE-2026-117567 esp-mcp through commit 28afddf OS Command Injection via MCP Tool Parameters
- CVE-2026-117566 EasyImages2.0 through 2.8.6 Unauthenticated Path Traversal via down.php, thumb.php and info.php
- CVE-2026-117565 Artalk before 2.10.1 Unauthenticated SSRF via Comment Page Title Fetch
- CVE-2026-117564 nest-admin before 1.0.1 Authentication Bypass via Hardcoded JWT Secret
- CVE-2026-117563 MrDoc through 1.1.1 Broken Access Control via manage_doc_share
- CVE-2026-117562 rssant 1.9.0 through 1.9.1 Information Disclosure via publish.story_get Endpoint
- CVE-2026-117561 sf-mcp through 1.3.2 OS Command Injection via Salesforce CLI Flag Values
- CVE-2026-117560 ATXP Gemini CLI Extension through 1.0.0 OS Command Injection via MCP Tools
- CVE-2026-11756 Deserialization in Station Launcher App in 3DEXPERIENCE platform
- CVE-2026-117559 DroidMind through 0.4.0 Command Injection via Shell Allowlist Bypass
- CVE-2026-117558 ai-sdlc MCP Server through 0.31.2 Command Injection via check_issue and check_pr_status
- CVE-2026-117557 SDL_image through 3.4.8 and 2.8.12 Stack Out-of-Bounds Read in ILBM Loader
- CVE-2026-117556 zchunk before 1.5.5 Heap Out-of-Bounds Read via read_preface()
- CVE-2026-117555 GreycLab CImg through 4.0.6 Heap Out-of-Bounds Read via Integer Overflow in _load_bmp()
- CVE-2026-117554 Admidio before 5.0.17 Event Guest Restriction Bypass via events_function.php
- CVE-2026-117553 Umbraco CMS before 17.7.2 and 18.2.2 Account Takeover via Host Header Poisoning
- CVE-2026-117548 Null dereference in Red Hat Directory Server 11
- CVE-2026-117541 svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()
- CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
- CVE-2026-11754 User Enumeration in Seres Software's syWEB
- CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass
- CVE-2026-117538 REDAXO before 5.21.0 Reflected XSS via Packages API function Parameter
- CVE-2026-117537 REDAXO before 5.21.0 Reflected XSS via Metainfo API type Parameter
- CVE-2026-117536 REDAXO before 5.21.3 CSRF Token Bypass via users/users Privilege Escalation
- CVE-2026-117535 REDAXO before 5.21.3 Reflected XSS via opener_link in Media Pool
- CVE-2026-117534 REDAXO before 5.21.3 CSRF in Article History Plugin
- CVE-2026-117533 REDAXO 5.18.0 before 5.21.4 Stored XSS via Unsanitized Mediapool SVG Uploads
- CVE-2026-117532 REDAXO Core 5.3.0 before 5.21.4 Authentication Bypass via History Plugin
- CVE-2026-117530 Command injection in Junie CLI
- CVE-2026-117526 reduxjs redux-devtools Remotedev Server evalAction code injection
- CVE-2026-11752 Armeria: External Control of File Name or Path in xDS SDS DataSource
- CVE-2026-117516 oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
- CVE-2026-117515 oretnom23 php-travel-agency-system traceapplication.php sql injection
- CVE-2026-117514 oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
- CVE-2026-117513 oretnom23 php-travel-agency-system Admin Search Pages customer_search.php sql injection
- CVE-2026-117512 oretnom23 php-travel-agency-system employee_insert.php unrestricted upload
- CVE-2026-117511 desmondmorris node-tesseract Command Builder tesseract.js process os command injection
- CVE-2026-117510 Dexmal Dexbotic gr00tsonic Checkpoint Loader gr00tsonic_arch.py load_pretrained_gr00t path traversal
- CVE-2026-11751 Security feature bypass in Armeria
- CVE-2026-117509 crownpku Rasa_NLU_Chi Model Persistor persistor.py Persistor._decompress path traversal
- CVE-2026-117507 a2aproject a2a-java TaskManager.saveTaskEvent race condition
- CVE-2026-117506 Denial of service in a2a-java
- CVE-2026-117505 a2aproject a2a-java ChildQueue queue.offer resource consumption
- CVE-2026-117504 a2aproject a2a-go Distributed Manager distributed_manager.go Cancel denial of service
- CVE-2026-117503 a2aproject a2a-go REST SSE handler rest.go resource consumption
- CVE-2026-117501 HTTP::Body versions before 1.24_01 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies
- CVE-2026-117500 HTTP::Body versions before 1.24_01 for Perl allow CPU exhaustion via regex backtracking on the filename of a multipart upload.
- CVE-2026-1175 birkir prime GraphQL Directive graphql information exposure
- CVE-2026-117499 @fastify/session vulnerable to session revocation bypass via a logout race condition
- CVE-2026-117494 Multiple vulnerabilities in Sisense’s Cloud BI Platform
- CVE-2026-117493 Multiple vulnerabilities in Sisense’s Cloud BI Platform
- CVE-2026-11748 Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion
- CVE-2026-117472 URL prefix handling permits API key read-scope bypass in Psono Server
- CVE-2026-117471 User-controlled Duo host permits authenticated SSRF in Psono Server
- CVE-2026-117470 WebAuthn assertion replay permits second-factor bypass in Psono Server
- CVE-2026-11747 Reflected XSS in Seres Software's syWEB
- CVE-2026-117469 File-transfer type confusion permits unauthorized repository writes in Psono Server