Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 899 of 1013.
- CVE-2026-11670 Use after free in Chrome
- CVE-2026-116696 russh's SSH agent server is susceptible to unbound allocations via repeated SSH_AGENT_CONSTRAIN_CONFIRM messages
- CVE-2026-116695 Crass: Incorrect tokenization of bad URLs enables CSS sanitizer bypass
- CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
- CVE-2026-116693 dd-trace: ReDOS in URL query string obfuscation
- CVE-2026-116692 MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules
- CVE-2026-116691 MLflow CrewAI autologging records LLM provider API keys in logged trace spans
- CVE-2026-116690 MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version source
- CVE-2026-11669 Memory corruption in Chrome
- CVE-2026-116689 follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
- CVE-2026-116688 CKEditor: Cross-site scripting (XSS) in the engine package
- CVE-2026-116687 CKEditor: Cross-site scripting (XSS) in the engine package
- CVE-2026-116686 Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas
- CVE-2026-116685 Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
- CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
- CVE-2026-116683 CTFer.io's CTFd Terraform Provider allows a local or remote attacker to read team passwords in state as non sensitive values
- CVE-2026-116682 FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
- CVE-2026-116680 Homebox generic notifier SSRF via HTTP redirect after URL validation
- CVE-2026-11668 Information disclosure in Chrome
- CVE-2026-116679 Neko: Authorization bypass in legacy WebRTC input handling
- CVE-2026-116678 Vaultwarden: Icon endpoint SSRF fix bypass via second-stage favicon IP literal URLs
- CVE-2026-116677 OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
- CVE-2026-116676 Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
- CVE-2026-116675 TinyMCE Cross-Site Scripting (XSS) vulnerability using media plugin `data-mce-object` serialization
- CVE-2026-116674 systeminformation: Prototype pollution in `networkStats()` via the interface name
- CVE-2026-116673 systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
- CVE-2026-116672 Authlib RFC 7592 examples omit registration-access-token client binding
- CVE-2026-116671 Infinite loop in Xpdf due to missing validation in JPEG 2000 decoder
- CVE-2026-11667 Memory corruption in Chrome
- CVE-2026-116662 Tanium addressed a compression bomb vulnerability in Enforce.
- CVE-2026-116660 Tanium addressed an improper access controls vulnerability in Enforce.
- CVE-2026-11666 Other in Chrome
- CVE-2026-116659 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-116658 Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116657 Tanium addressed a denial of service vulnerability in Enforce.
- CVE-2026-116656 Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
- CVE-2026-11665 Memory corruption in Chrome
- CVE-2026-116649 Tanium addressed an improper output sanitization vulnerability in Enforce.
- CVE-2026-116647 Tanium addressed an improper output sanitization vulnerability in Comply.
- CVE-2026-116641 The DB Tools trust certificates issued by recoverable eMudhra intermediate CAs
- CVE-2026-116640 Saruf-Ratul HR-Payroll-Management-System chat.php cross site scripting
- CVE-2026-11664 Use after free in Chrome
- CVE-2026-116639 MD-MAFUJUL-HASAN Online-Payroll-Management-System chat.php cross site scripting
- CVE-2026-116638 The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security controls, including administ
- CVE-2026-116634 OmniRoute 3.8.50 before 3.8.52 Missing Authentication via /api/sync/tokens
- CVE-2026-116632 Facetime protocol handler enabled spoofing
- CVE-2026-116631 External protocol handler (tel:) address bar spoof
- CVE-2026-11663 Use after free in Chrome
- CVE-2026-116627 Cross-site scripting in PowerShell Universal
- CVE-2026-116623 code-projects Simple Content Management System Admin welcome.php authorization
- CVE-2026-116620 Tencent RapidJSON Regex stream.h Take out-of-bounds
- CVE-2026-11662 Memory corruption in Chrome
- CVE-2026-116613 Missing authorization in Animated Text Block – Add Typing and Looping Text Effects
- CVE-2026-116612 Code injection in gst-editing-services
- CVE-2026-116610 Missing authorization in Clean Login
- CVE-2026-11661 Use after free in Chrome
- CVE-2026-116609 SQL injection in WP Visitor Statistics (Real Time Traffic)
- CVE-2026-116608 DAMO Academy VideoLLaMA2 Model Loading __init__.py load_pretrained_model integrity check
- CVE-2026-116605 SourceCodester Online Food Ordering System order.php client-side enforcement of server-side security
- CVE-2026-116604 SourceCodester Online Food Ordering System delete_admin.php missing authentication
- CVE-2026-116603 SourceCodester Online Food Ordering System add_food.php unrestricted upload
- CVE-2026-116602 SourceCodester Online Food Ordering System delete.php unlink path traversal
- CVE-2026-11660 Security feature bypass in Chrome
- CVE-2026-1166 Open Redirect Vulnerability in Hitachi Ops Center Administrator
- CVE-2026-116596 CVE-2026-116596
- CVE-2026-116593 Apache Kafka: Kafka Connect configuration provider values exposed via validation REST API endpoint
- CVE-2026-116591 compress zstd: Panic on two-block frames
- CVE-2026-116590 snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWrite
- CVE-2026-11659 Integer overflow in Chrome
- CVE-2026-116589 Datadog dd-trace-py: IAST instrumentation can lead to application DOS
- CVE-2026-116588 Datadog dd-trace-py: ReDOS in URL query string obfuscation
- CVE-2026-116587 Go JOSE: DoS when parsing JWKs that contain RSA keys
- CVE-2026-116586 Go JOSE: Panics in JSON parsing
- CVE-2026-116585 Go JOSE: Panic during CBC-HMAC processing
- CVE-2026-116584 Seroval `fromJSON`/`fromCrossJSON` denial of service via unvalidated array node length
- CVE-2026-116583 Seroval: Code injection through a typed array's own constructor property
- CVE-2026-116582 Seroval: Script injection through RegExp sources in serialized output
- CVE-2026-116581 Seroval: fromJSON deserializer trusts sequence doneAt (unauthenticated event-loop DoS)
- CVE-2026-116580 Seroval: Deserialization invokes attacker-chosen callables: AsyncIteratorFactoryInstance calls source.on(listener) without type check
- CVE-2026-11658 Security feature bypass in Chrome
- CVE-2026-116579 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
- CVE-2026-116578 Tornado: Open redirect in RedirectHandler via protocol-relative URLs
- CVE-2026-116577 Tornado: Quadratic CPU usage when parsing HTTP headers with line folding
- CVE-2026-116576 systeminformation: Windows command injection in services() through Unicode quotation marks
- CVE-2026-116575 Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
- CVE-2026-11657 Use after free in Chrome
- CVE-2026-116566 socket.getaddrinfo() accepts embedded null bytes in host and port
- CVE-2026-11656 Use after free in Chrome
- CVE-2026-116556 Argilla TextField.vue cross site scripting
- CVE-2026-116555 Argilla Sandbox.vue cross site scripting
- CVE-2026-116554 Argilla Settings SettingsInfo.vue Dataset.from_disk cross site scripting
- CVE-2026-11655 Integer overflow in Chrome
- CVE-2026-116544 Open5GS 2.6.1 through 2.8.0 Out-of-Bounds Read via parse_scheme_output
- CVE-2026-116543 Open5GS 1.3.0 through 2.8.0 Heap Out-of-Bounds Write via SBI Multipart Parser
- CVE-2026-116542 Netty netty-tcnative before 2.0.84.Final SNI Hostname Spoofing via Modified UTF-8 Decoding
- CVE-2026-116541 netty-tcnative before 2.0.84.Final Denial of Service via BIO Write Overcount
- CVE-2026-116540 netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback
- CVE-2026-11654 Use after free in Chrome
- CVE-2026-116539 Netty netty-tcnative before 2.0.84.Final Heap Buffer Overflow via OpenSSL BIO
- CVE-2026-116538 HtmlSanitizer before 9.2.1039 XSS via SanitizeDom Body and HTML Attributes