Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 934 of 1013.
- CVE-2026-110831 FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE
- CVE-2026-110830 FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE
- CVE-2026-11083 Information disclosure in Chrome
- CVE-2026-110829 FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment
- CVE-2026-110825 Kiloview E3 NDI Encoder Missing Authentication for Critical Function
- CVE-2026-11082 Use after free in Chrome
- CVE-2026-110816 qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string
- CVE-2026-110812 Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune
- CVE-2026-110810 ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds
- CVE-2026-11081 Security feature bypass in Chrome
- CVE-2026-110809 sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service
- CVE-2026-110807 sgl-project SGLang generate Endpoint io_struct.py denial of service
- CVE-2026-110806 Missing authorization in Server
- CVE-2026-110805 Server-side request forgery in Server
- CVE-2026-110804 Privilege escalation in Server
- CVE-2026-110803 Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8
- CVE-2026-11080 Use after free in Chrome
- CVE-2026-1108 cijliu librtsp rtsp_rely_dumps buffer overflow
- CVE-2026-11079 Memory corruption in Chrome
- CVE-2026-11078 Security feature bypass in Chrome
- CVE-2026-110777 Evolution-data-server: local file disclosure via attach file:// uris
- CVE-2026-110775 Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access
- CVE-2026-110774 Blinko through 1.8.8 Private Attachment Read via /api/file Route
- CVE-2026-110773 GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint
- CVE-2026-110772 Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update
- CVE-2026-110771 Shopizer through 3.2.5 Authorization Bypass via Product Review customerId
- CVE-2026-110770 Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force
- CVE-2026-11077 Memory corruption in Chrome
- CVE-2026-110769 holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors
- CVE-2026-110768 holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist
- CVE-2026-110767 Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion
- CVE-2026-110766 Colanode Server through 0.4.7 Path Traversal via Avatar Download Route
- CVE-2026-110765 FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass
- CVE-2026-110764 AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download
- CVE-2026-110763 lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany
- CVE-2026-110762 bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream
- CVE-2026-110761 ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import
- CVE-2026-11076 Memory corruption in Chrome
- CVE-2026-110759 Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse.
- CVE-2026-110758 Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace.
- CVE-2026-110757 Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine.
- CVE-2026-110756 Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print.
- CVE-2026-110755 Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline.
- CVE-2026-110754 Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline
- CVE-2026-110753 Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline.
- CVE-2026-110752 Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment.
- CVE-2026-11075 Memory corruption in Chrome
- CVE-2026-110748 Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files
- CVE-2026-110747 Integer overflow in jackson-dataformat-protobuf
- CVE-2026-110746 CVE-2026-110746
- CVE-2026-110744 Privilege escalation in Multicluster Global Hub
- CVE-2026-11074 Use after free in Chrome
- CVE-2026-110737 Push Endpoint Returns Permissive CORS Headers
- CVE-2026-110736 Memory corruption in Godot Engine
- CVE-2026-110735 Memory corruption in Godot Engine
- CVE-2026-110734 Memory corruption in Godot Engine
- CVE-2026-110733 Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store
- CVE-2026-11073 Use after free in Chrome
- CVE-2026-110726 Security feature bypass in Eclipse Connected Services Platform
- CVE-2026-110725 fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references
- CVE-2026-110724 Security feature bypass in Eclipse Connected Services Platform
- CVE-2026-110723 Security feature bypass in Eclipse Connected Services Platform
- CVE-2026-110721 Missing authorization in NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar
- CVE-2026-110720 Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules
- CVE-2026-11072 Use after free in Chrome
- CVE-2026-110719 Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header
- CVE-2026-110718 TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download
- CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename
- CVE-2026-110716 unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table
- CVE-2026-110715 MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort
- CVE-2026-110714 libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow
- CVE-2026-110713 libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders
- CVE-2026-110712 libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info
- CVE-2026-11071 Use after free in Chrome
- CVE-2026-110707 Cross-site scripting in RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
- CVE-2026-110703 Cross-site scripting in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory
- CVE-2026-110701 CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter
- CVE-2026-11070 Security feature bypass in Chrome
- CVE-2026-1107 EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload
- CVE-2026-110698 Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write
- CVE-2026-110696 itsmeravitejak Online-Examination-System dbtables.sql information disclosure
- CVE-2026-110695 turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow
- CVE-2026-110694 OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds
- CVE-2026-110691 WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update
- CVE-2026-110690 Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack
- CVE-2026-11069 Security feature bypass in Chrome
- CVE-2026-110689 OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism
- CVE-2026-110688 Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse.
- CVE-2026-110687 Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp.
- CVE-2026-110686 Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv.
- CVE-2026-110685 Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag.
- CVE-2026-110684 Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify.
- CVE-2026-110682 Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse.
- CVE-2026-110681 Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread.
- CVE-2026-110680 Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv.
- CVE-2026-11068 Use after free in Chrome
- CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
- CVE-2026-110678 Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse.
- CVE-2026-110677 Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv.
- CVE-2026-110676 Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum.