Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 910 of 1013.
- CVE-2026-11429 Path Traversal in Altium Vault ScriptsController Allows Unauthenticated Remote Code Execution
- CVE-2026-114278 Unauthenticated Command Injection via kubeconfig Username in che-machine-exec
- CVE-2026-114270 GeoDirectory < 2.8.197 - Unauthenticated Password-Protected Listing Content Disclosure
- CVE-2026-114268 Tenda BE3L Pro WifiBasicSet formWifiBasicSet buffer overflow
- CVE-2026-114267 SourceCodester Food Order Management System Admin Endpoint authorization
- CVE-2026-114266 ProjectWorlds Advanced Library Management System profile.php mysqli_query sql injection
- CVE-2026-114265 ProjectWorlds Advanced Library Management System Search Form returned_book_search.php mysqli_query sql injection
- CVE-2026-114264 ProjectWorlds Advanced Library Management System edit_member.php sql injection
- CVE-2026-114263 ProjectWorlds Advanced Library Management System individual_report_search.php mysqli_query sql injection
- CVE-2026-114262 file-management-system FileController.php store unrestricted upload
- CVE-2026-114261 MomoTommy file-management-system Files API FileController.php destroy missing authentication
- CVE-2026-114260 oretnom23 file-management-system-php AJAX ajax.php delete_folder missing authentication
- CVE-2026-11426 UnderConstructionPage PRO <= 5.76 - Authenticated (Subscriber+) Arbitrary File Read via template_thumbnail Parameter
- CVE-2026-114259 oretnom23 file-management-system-php admin_class.php save_files unrestricted upload
- CVE-2026-114258 oretnom23 file-management-system-php File Management files.php sql injection
- CVE-2026-114257 oretnom23 file-management-system-php File Download download.php readfile sql injection
- CVE-2026-114256 oretnom23 file-management-system-php Folder Management admin_class.php save_files sql injection
- CVE-2026-114255 oretnom23 file-management-system-php User Account Management admin_class.php save_user sql injection
- CVE-2026-114254 oretnom23 file-management-system-php admin_class.php login sql injection
- CVE-2026-114253 oretnom23 file-management-system-php index.php include file inclusion
- CVE-2026-114252 itsourcecode Sales-and-Inventory-System cust_searchfrm.php sql injection
- CVE-2026-114251 itsourcecode Sales-and-Inventory-System cust_del.php sql injection
- CVE-2026-114250 itsourcecode Sales-and-Inventory-System cust_edit.php sql injection
- CVE-2026-11425 Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering
- CVE-2026-114249 dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization
- CVE-2026-114248 dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication
- CVE-2026-114245 dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization
- CVE-2026-114243 dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
- CVE-2026-114242 dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
- CVE-2026-11424 Server-Side Request Forgery in Altium Platform Design GraphQL Service Allows Information Disclosure
- CVE-2026-114236 Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers
- CVE-2026-114230 Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames
- CVE-2026-11423 Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation
- CVE-2026-114223 NewType Infortech｜NT OneAPP - Exposure of Sensitive Information
- CVE-2026-114222 NewType Infortech｜NT OneAPP - Authentication Bypass
- CVE-2026-114221 NewType Infortech｜NT OneAPP - Credential Disclosure
- CVE-2026-114220 NewType Infortech｜NT OneAPP - Improper Certificate Validation
- CVE-2026-11422 Markdown Preview Enhanced 0.8.x Code Injection via WaveDrom Rendering
- CVE-2026-114219 NewType Infortech｜NT OneAPP - Hard-coded Credentials
- CVE-2026-114216 Chunk extensions accept bare LF and CR, enabling request smuggling in Bandit
- CVE-2026-114214 Missing authorization in ash
- CVE-2026-114213 WebSocket 1-byte continuation frames bypass `max_fragmented_message_size` in Bandit
- CVE-2026-11421 SQL injection in ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce
- CVE-2026-11420 Path Traversal in Altium Enterprise Server NIS Allows Unauthenticated Arbitrary File Write and File Read
- CVE-2026-1142 PHPGurukul News Portal cross-site request forgery
- CVE-2026-114198 Deserialization of untrusted data in floss
- CVE-2026-114197 Deserialization of untrusted data in capa
- CVE-2026-114196 WordPress Paytium plugin <= 5.0.5 - PHP Object Injection vulnerability
- CVE-2026-114195 WordPress ShopMagic plugin <= 4.9.1 - Sensitive Data Exposure vulnerability
- CVE-2026-114194 WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114193 WordPress GEO my WordPress plugin <= 4.5.5.5 - Broken Access Control vulnerability
- CVE-2026-114192 WordPress WpEvently plugin <= 5.7.8 - Broken Access Control vulnerability
- CVE-2026-114191 WordPress UPI QR Code Payment Gateway for WooCommerce plugin <= 1.6.3 - Broken Access Control vulnerability
- CVE-2026-114190 WordPress LiteSpeed Cache plugin <= 7.9 - Sensitive Data Exposure vulnerability
- CVE-2026-11419 Path Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File Write
- CVE-2026-114184 WordPress Elementor Addon Elements plugin <= 1.14.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114182 WordPress PowerPack Addons for Elementor plugin <= 3.1.0 - Broken Access Control vulnerability
- CVE-2026-114181 WordPress Taxi Booking Manager for WooCommerce plugin <= 2.1.6 - Broken Access Control vulnerability
- CVE-2026-114180 WordPress Metform plugin <= 4.3.2 - Broken Access Control vulnerability
- CVE-2026-114179 WordPress BP Better Messages plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114178 WordPress W3 Total Cache plugin <= 2.10.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-114177 WordPress Xpro Elementor Addons plugin <= 1.7.10 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-114176 WordPress eRoom plugin <= 1.7.1 - Broken Access Control vulnerability
- CVE-2026-114175 WordPress eRoom plugin <= 1.7.1 - Settings Change vulnerability
- CVE-2026-114173 Information disclosure in ortto
- CVE-2026-11417 OS Command Injection in NodejsFunction Bundling in aws-cdk-lib
- CVE-2026-11416 MoviePilot Path Traversal via Cloud Storage Download Handlers
- CVE-2026-114148 ASP.NET Core Elevation of Privilege Vulnerability
- CVE-2026-114145 GitPython validates a submodule's ".git" path only after cloning into it (RCE)
- CVE-2026-114144 toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()
- CVE-2026-114143 toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()
- CVE-2026-114142 toml-node: Prototype pollution: parsing a TOML document can write to Object.prototype
- CVE-2026-114141 toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()
- CVE-2026-114140 nbconvert: File write via path traversal in cell output filenames
- CVE-2026-11414 Hardcoded credentials in Altium Enterprise Server
- CVE-2026-114139 Sentry-Javascript: Middleware Bypass when using Tunnel route
- CVE-2026-114138 Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiation
- CVE-2026-114137 Django REST framework: TokenProxy.delete() reports success and revokes nothing
- CVE-2026-114136 Django REST framework: JSONParser applies an attacker-named codec to the request stream
- CVE-2026-114135 Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorization
- CVE-2026-114133 Nuxt server islands render `useHeadSafe` input without sanitisation
- CVE-2026-114132 Nuxt: Server-side route rules (`redirect`, `headers`, `proxy`, `ssr`) are skipped for case-variant paths when routing is case-insensitive
- CVE-2026-114131 Nuxt: Route rules are matched against the raw request path, so a percent-encoded segment can bypass `appMiddleware` on dynamic and catch-all routes
- CVE-2026-114130 Nuxt: Incomplete fix for GHSA-934w-87qh-qr26: a `javascript:` URL prefixed with an ASCII control character executes from `<NuxtLink>` when `pages` is disabled
- CVE-2026-11413 JingDong JD Cloud Box AX6600 jdcweb_rpc set_macfilter stack-based overflow
- CVE-2026-114129 stream-json: FlexAssembler string/RegExp path filters join the full key stack per container start, giving O(depth^2) CPU denial of service
- CVE-2026-114128 Astro: Reflected/Stored XSS via unescaped <script>/<style> tag content in JSX/MDX rendering
- CVE-2026-114127 Astro: Arbitrary CSS injection in Astro View Transitions
- CVE-2026-114126 Storybook dev server: devices on the same network can obtain the WebSocket token and write code into story files
- CVE-2026-114125 Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites
- CVE-2026-114124 Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry
- CVE-2026-114123 Missing authorization in d365fo-mcp-server
- CVE-2026-114122 Electron: Frame subscription trusts GPU-supplied frame geometry
- CVE-2026-114121 Electron: openExternal permission requests can be attributed to the wrong origin
- CVE-2026-114120 SchedulePress before 5.3.5 Missing Authorization via wpsp_el_editor_form AJAX Action
- CVE-2026-11412 Jinher OA GetFormSn.aspx sql injection
- CVE-2026-114119 Best Practice Software Bp Premier before 1.14.1.1128 Hardcoded SQL Server Administrative Credential
- CVE-2026-114118 Vyper 0.3.4 through 0.5.0b1 create_from_blueprint Offset Validation Bypass via Unsigned Wraparound
- CVE-2026-114117 Vyper 0.3.8 through 0.5.0b1 Optimizer Miscompilation of msg.value | K in Ternary Branches
- CVE-2026-114116 Vyper through 0.5.0b1 Literal Value Manipulation via Line Separators