Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 904 of 1013.
- CVE-2026-11588 EONSR AEO Agent <= 3.7.9 - Unauthenticated Stored XSS via Scheduled Post Creation
- CVE-2026-115877 Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
- CVE-2026-11587 Authenticated SQL Injection via PHP Array Key in ACL Management (Resources & Actions) — Centreon 26.03.0
- CVE-2026-115863 Memory corruption in ConnMan
- CVE-2026-11586 WS Auto-PONG memory exhaustion
- CVE-2026-11585 CodeAstro Student Attendance Management System createClassArms.php sql injection
- CVE-2026-115845 Incomplete validation in the run_script Python sandbox in AWS MCP Server
- CVE-2026-11584 CodeAstro Student Attendance Management System createClass.php edit sql injection
- CVE-2026-11583 CodeAstro Student Attendance Management System createClass.php sql injection
- CVE-2026-115825 HTTP::Server::PSGI versions before 1.0056 for Perl allow a single request to crash the server by declaring a large Content-Length.
- CVE-2026-115824 Starman versions before 0.4019 for Perl allow memory exhaustion via unbounded buffering of chunked request bodies
- CVE-2026-115823 Starman versions before 0.4019 for Perl send response bodies for HEAD requests, desynchronizing responses on keep-alive connections.
- CVE-2026-115822 Starman versions before 0.4019 for Perl allow CPU exhaustion via quadratic regex backtracking when parsing chunked request bodies.
- CVE-2026-115821 Cross-site scripting in NewsmanApp
- CVE-2026-11582 CodeAstro Student Attendance Management System index.php sql injection
- CVE-2026-115817 Starman versions before 0.4019 for Perl allow a stalled request body to hold a worker indefinitely, as read_timeout covers only the headers.
- CVE-2026-115813 Server-side request forgery in the model download path in Amazon Web Services Multi Model Server
- CVE-2026-115812 Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server
- CVE-2026-115810 Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL
- CVE-2026-11581 Kali Forms < 2.4.13 - Contributor+ Stored XSS via Form Field Caption
- CVE-2026-115807 Privilege escalation in User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
- CVE-2026-115806 Deserialization in Prime Mover – Backup and Migration
- CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path
- CVE-2026-115804 Consul vulnerable to an authorization bypass in health check registration
- CVE-2026-115803 Scada-LTS AmCharts Data API AmChartValuesAPI.java HttpServletRequest.getParameter authorization
- CVE-2026-115802 InternScience InternAgent LoRA Loading experiment.py train inclusion of functionality from untrusted control sphere
- CVE-2026-115801 Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
- CVE-2026-115800 UbiquitousLearning mllm Convertor __init__.py load_model path traversal
- CVE-2026-11580 Kali Forms < 2.4.17 - Contributor+ Arbitrary Post Metadata Disclosure via IDOR
- CVE-2026-1158 Totolink LR350 POST Request cstecgi.cgi setWizardCfg buffer overflow
- CVE-2026-115797 Tenda F6 Web Management cleartext transmission
- CVE-2026-115796 Tenda F6 Web Management cross-site request forgery
- CVE-2026-115795 Out-of-bounds read of DCP block header in DCP Set and Identify request parsing
- CVE-2026-115794 Alarm data length not validated against received frame length
- CVE-2026-115793 Resource exhaustion from RPC sessions kept for requests to unknown interface
- CVE-2026-11579 Kali Forms < 2.4.17 - Unauthenticated Media Upload
- CVE-2026-115786 Zimbra Collaboration Suite Shared-File Mailbox Quota Accounting Error Enables Quota Exhaustion
- CVE-2026-115785 Zimbra Collaboration Suite Data Source Test SMTP Command Injection via Unsanitized Email Address
- CVE-2026-11578 Fluent Forms < 6.2.5 - Form Manager+ Cross-Form Submission Entry Deletion via IDOR
- CVE-2026-115778 Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
- CVE-2026-115776 Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
- CVE-2026-115775 Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
- CVE-2026-115774 Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
- CVE-2026-11576 Memory corruption in Eclipse ThreadX - NetX Duo
- CVE-2026-115754 serialize-javascript 7.0.1 before 7.1.3 XSS via unescaped </script in function body
- CVE-2026-115752 Signal K Server 2.28.0-beta.2 before 2.34.0 SSRF via App Store appIcon
- CVE-2026-115751 mcp-from-openapi 2.2.0 before 2.9.0 SSRF blockedHosts Bypass via Trailing-Dot Hostname
- CVE-2026-115750 mcp-from-openapi from 2.5.0 before 2.9.0 Credential Leak via Cross-Origin Redirects
- CVE-2026-11575 PhonePe Payment Solutions < 3.1.0 - Unauthenticated Payment Bypass via Forged Callback
- CVE-2026-115749 hydra-ray-launcher 1.1.0.dev1 before 1.2.2 and 1.4.0.dev4 before 1.4.0rc2 Arbitrary Module Import
- CVE-2026-115748 Apache Vysper: Authorization bypass
- CVE-2026-115730 i18next-http-backend 4.0.2 Protocol-Relative URL Injection via Namespace in interpolateUrl
- CVE-2026-11573 Uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)
- CVE-2026-115729 @pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass
- CVE-2026-115728 @hapi/content 6.0.1 before 6.0.3 ReDoS via Content.disposition() Parameter Parsing
- CVE-2026-115727 AgenticSeek before commit 409840c RCE via Exposed Werkzeug Debugger in llm_server
- CVE-2026-115726 Aider through 0.86.2 Command Execution via Repository .aider.conf.yml Settings
- CVE-2026-115725 Chatwoot before 4.17.0 Cross-Account Authorization Bypass via source_id
- CVE-2026-115724 VLC for Android before 3.7.2 File Overwrite via Spoofed Mail Attachment Provider
- CVE-2026-115723 Snap7 through 1.4.3 Out-of-Bounds Write via BRecv and CheckAsBRecvCompletion
- CVE-2026-115722 RPly through 1.1.4 Out-of-Bounds Function Pointer Index via PLY Header
- CVE-2026-115721 Apache Vysper: Unbounded allocation
- CVE-2026-115720 Frappe Builder before 1.36.1 SSRF Guard Bypass via HTTP Redirect
- CVE-2026-11572 degit has a Command Injection issue
- CVE-2026-115718 Frappe Builder 1.33.0 before 1.36.0 Missing Authorization via improve_prompt
- CVE-2026-115717 Frappe Builder before 1.36.1 SSRF via convert_to_webp
- CVE-2026-115713 Path traversal in Elastic Cloud Enterprise
- CVE-2026-115712 Incorrect Authorization in Elastic Cloud Enterprise (ECE) Leading to Unauthorized Modification of Platform Settings
- CVE-2026-115711 Information disclosure in Elastic Cloud Enterprise
- CVE-2026-11571 Everest Forms < 3.5.0 - Unauthenticated Sensitive Information Exposure via Residual CSV Artifacts
- CVE-2026-115709 Path traversal in Elastic Cloud Enterprise
- CVE-2026-115708 Auth bypass in Elastic Cloud Enterprise
- CVE-2026-115707 Information disclosure in Elastic Cloud Enterprise
- CVE-2026-115706 Authorization Bypass Through User-Controlled Key in Elastic Cloud Enterprise (ECE) Leading to Privilege Escalation
- CVE-2026-115700 SSRF allowlist bypass via percent-encoded bracketed IPv6 or trailing-dot IP literal in hackney
- CVE-2026-11570 User Submitted Posts < 20260608 - Unauthenticated Stored XSS via Author Name
- CVE-2026-1157 Totolink LR350 cstecgi.cgi setWiFiEasyCfg buffer overflow
- CVE-2026-115693 Custom cacerts or cacertfile do not restrict trust to the pinned CA in hackney
- CVE-2026-11569 Quay: quay: stored xss via filedrop svg upload
- CVE-2026-115680 Memory corruption in MDK-Middleware
- CVE-2026-11568 Product Configurator for WooCommerce < 1.7.3 - Unauthenticated Private/Draft Product Data Disclosure via pc_get_data
- CVE-2026-115679 Memory corruption in MDK-Middleware
- CVE-2026-115678 Memory corruption in MDK-Middleware
- CVE-2026-11567 SureForms < 2.11.1 - Unauthenticated Payment Amount Bypass
- CVE-2026-115657 KNIME Analytics Platform logs credentials of configured proxy when used as an executor
- CVE-2026-11565 Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
- CVE-2026-115644 Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions
- CVE-2026-11564 Native CA trust persist
- CVE-2026-115638 Denial of service in Ironic
- CVE-2026-115635 AshPostgres returns another tenant's record for a skipped upsert when return_skipped_upsert? is set
- CVE-2026-11563 Word Count and Social Shares <= 1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal
- CVE-2026-115627 Missing authorization in ash postgres
- CVE-2026-115624 Missing authorization in GROWI
- CVE-2026-11562 WS Form LITE < 1.11.8 - Subscriber+ Arbitrary Settings Update
- CVE-2026-115614 WordPress Booking and Rental Manager plugin <= 2.8.2 - Broken Access Control vulnerability
- CVE-2026-115613 Cross-site scripting in Image Gallery block – Create and display photo gallery/photo album.
- CVE-2026-115612 WordPress SliceWP plugin <= 1.2.13 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115611 WordPress TableOn plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115610 WordPress PublishPress Authors plugin <= 4.17.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-11561 SSTI in Soagen Informatics' Apinizer