Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 945 of 1013.
- CVE-2026-10926 Use after free in Chrome
- CVE-2026-109259 ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Information Disclosure in TGA Decoder
- CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 Invalid Memory Free in FX Operation
- CVE-2026-109257 FreeRDP before 3.32.0 Double Free via NSCodec plane growth failure
- CVE-2026-109256 FreeRDP 3.10.0 through 3.32.2 Heap Buffer Overflow in WinPR PNG Conversion
- CVE-2026-109255 FreeRDP 3.0.0 before 3.32.0 heap buffer overflow via license_check_stream_length
- CVE-2026-109254 FreeRDP 2.1.0 before 3.32.0 Use-After-Free via rdpsnd Disconnect Path
- CVE-2026-109253 FreeRDP 3.9.0 before 3.32.0 RDPEAR NDR Scalar Out-of-Bounds Read
- CVE-2026-109252 FreeRDP from 3.9.0 before 3.32.0 RDPEAR NULL Pointer Dereference via KERB_RPC_INTERNAL_NAME
- CVE-2026-109251 FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Video Geometry
- CVE-2026-109250 FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 collect_keys()
- CVE-2026-10925 Memory corruption in Chrome
- CVE-2026-109249 FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via Remote Assistance File Parsing
- CVE-2026-109248 FreeRDP 3.0.0 before 3.32.0 Heap Out-of-Bounds Read via WinPR Clipboard cFileName
- CVE-2026-109247 FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName
- CVE-2026-109246 FreeRDP before 3.32.0 Shadow Server Divide-by-Zero via Frame Acknowledge PDU
- CVE-2026-109245 FreeRDP 3.0.0 before 3.32.0 Improper Certificate Validation in freerdp_http_request
- CVE-2026-109244 FreeRDP 2.0.0 before 3.32.0 Insecure Private Key Permissions in winpr-makecert
- CVE-2026-109243 FreeRDP 3.0.0 before 3.32.0 Insecure Permissions on Soft-Smartcard Private Key File
- CVE-2026-109242 FreeRDP before 3.0.0 and 3.6.0 before 3.32.0 Uninitialized Heap Disclosure via Progressive Codec Tile Upgrade
- CVE-2026-109241 FreeRDP before 3.32.0 NULL Dereference in Video Redirection Channel
- CVE-2026-109240 FreeRDP 3.11.0 before 3.32.1 Reachable Assertion DoS via urb_isoch_transfer
- CVE-2026-10924 Integer overflow in Chrome
- CVE-2026-109239 Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch
- CVE-2026-109238 Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder
- CVE-2026-109237 Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables
- CVE-2026-109236 Auth bypass in Customer Email Verification for WooCommerce
- CVE-2026-109232 Cross-site scripting in Salon Booking System – Appointment Booking for Salons, Barbershops & Spas
- CVE-2026-10923 Use after free in Chrome
- CVE-2026-109229 SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor
- CVE-2026-109228 SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
- CVE-2026-109227 SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing
- CVE-2026-109226 SGLang through 0.5.21 Audio Decompression Amplification via load_audio
- CVE-2026-109225 SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload
- CVE-2026-109224 SureCart <= 4.9.4 - Unauthenticated Stored Cross-Site Scripting via sc-cart-loader 'template' Attribute in Comment
- CVE-2026-109221 Path traversal in Groundhogg — CRM, Newsletters, and Marketing Automation
- CVE-2026-10922 Security feature bypass in Chrome
- CVE-2026-109219 Mang Board - 2.4.4 - Unauthenticated Arbitrary File Upload via 'image_path' Parameter
- CVE-2026-109218 Contact Manager <= 9.1.2 - Unauthenticated Arbitrary File Upload via Trailing-Dot Filename Blacklist Bypass
- CVE-2026-109216 Meta Box <= 5.15.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Background Field Array Keys
- CVE-2026-109215 Cross-site scripting in LiteSpeed Cache
- CVE-2026-10921 Integer overflow in Chrome
- CVE-2026-109209 Cross-site scripting in All-in-One Video Gallery – Video Player & Galleries for YouTube, Vimeo & Self-Hosted Videos
- CVE-2026-109208 LearnPress <= 4.4.10 - Unauthenticated Stored Cross-Site Scripting via 'quantity' and 'order_comments' Parameters
- CVE-2026-109207 RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL
- CVE-2026-109206 LogicalDOC Community Edition through 9.3 Username Enumeration via AvatarServlet
- CVE-2026-109205 LogicalDOC Community Edition through 9.3 Unauthenticated Upload Disk Exhaustion via UploadServlet
- CVE-2026-109204 LogicalDOC Community Edition through 9.3 Forced Password Reset via Unbound PswRecovery Ticket
- CVE-2026-109203 LogicalDOC Community Edition through 9.3 Missing Authorization via ConvertPdf Servlet
- CVE-2026-109202 LogicalDOC Community Edition through 9.3 Missing Authorization via zip-export Servlet
- CVE-2026-109201 LogicalDOC Community Edition through 9.3 Missing Authorization in DocumentService
- CVE-2026-109200 LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href
- CVE-2026-10920 Security feature bypass in Chrome
- CVE-2026-1092 Improper Validation of Specified Quantity in Input in GitLab
- CVE-2026-109199 LogicalDOC Community Edition through 9.3 Code Injection via Velocity sendAsEmail Template
- CVE-2026-109198 Anti-Spam by CleanTalk <= 6.89.1 - Unauthenticated Stored Cross-Site Scripting via 'user_email' Registration Parameter
- CVE-2026-109195 Quay: repository auto-prune policy uuid idor in quay api
- CVE-2026-109194 Quay: build trigger uuid idor in quay api
- CVE-2026-109193 HivePress <= 1.7.32 - Unauthenticated Stored Cross-Site Scripting via Custom User Attribute Value
- CVE-2026-109191 Image Hub <= 1.2.0 - Authenticated (Subscriber+) Sensitive Information Exposure in Admin Page HTML
- CVE-2026-109190 conductor-oss conductor API Tool Configuration ListApiToolsTask.java ListApiToolsTask.start server-side request forgery
- CVE-2026-10919 Use after free in Chrome
- CVE-2026-109189 Server-side request forgery in MeterSphere
- CVE-2026-109188 jshERP through 3.6 Missing Authorization in Master Data Add and Import Endpoints
- CVE-2026-109187 jshERP through 3.6 Information Disclosure via /platformConfig/getInfoByKey
- CVE-2026-109186 jshERP through 3.6 Mass Assignment via PUT /user/update
- CVE-2026-109185 jshERP through 3.6 Privilege Escalation via PUT /user/updateUser
- CVE-2026-109184 jshERP through 3.6 Data Scope Bypass via /account/findAccountInOutList
- CVE-2026-109183 jshERP through 3.6 Approval Bypass via addDepotHeadAndDetail Status Parameter
- CVE-2026-109182 jshERP through 3.6 Incorrect Authorization via /supplier/exportExcel
- CVE-2026-109181 jshERP through 3.6 Authorization Bypass via purchaseStatus in /depotHead/list
- CVE-2026-109180 jshERP through 3.6 Authorization Bypass via User-Controlled Warehouse IDs
- CVE-2026-10918 Use after free in Chrome
- CVE-2026-109179 jshERP through 3.6 Missing Authorization via /log/list and /log/info
- CVE-2026-109178 jshERP through 3.6 Missing Authorization via /log Audit Endpoints
- CVE-2026-109177 MoguBlog through 6.2 Broken Access Control via networkDisk moveFile and edit
- CVE-2026-109176 MoguBlog through 6.2 IDOR Allows Deleting Other Administrators' Network-Disk Files
- CVE-2026-109175 MoguBlog through 6.2 Broken Access Control via /networkDisk/getFileList
- CVE-2026-109174 MoguBlog through 6.2 Credential Disclosure via /oauth/getSystemConfig
- CVE-2026-109173 yshop-crm through 2.1.3 Missing Authorization via invoice check endpoint
- CVE-2026-109172 yshop-crm through 2.1.3 Missing Authorization via contract-receivables check endpoint
- CVE-2026-109171 yshop-crm through 2.1.3 Missing Authorization via /admin-api/crm/contract/check
- CVE-2026-109170 LogicalDOC Community Edition through 9.3 HQL Injection via documents.xml indexed Parameter
- CVE-2026-10917 Security feature bypass in Chrome
- CVE-2026-109169 LogicalDOC Community Edition through 9.3 SQL Injection via tags.xml firstLetter
- CVE-2026-109168 lamp-cloud through 5.10.1 IDOR via /anyone/appendix/listFileByBizId
- CVE-2026-109167 TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save
- CVE-2026-109166 lamp-cloud through 5.10.1 IDOR via /anyone/file/findUrlById
- CVE-2026-109165 TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create
- CVE-2026-109164 Missing authorization in tduck-survey-form
- CVE-2026-109162 TYPO3 CMS - Security Misconfiguration in Form Framework
- CVE-2026-109160 PublicCMS pay Endpoint SafeConfigComponent.java SafeConfigComponent.getSafeUrl redirect
- CVE-2026-10916 Cross-site scripting in Chrome
- CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow
- CVE-2026-109156 SeldonIO MLServer environment_tarball env.py _extract_env path traversal
- CVE-2026-109155 DeepPavlov Model Download untar path traversal
- CVE-2026-109153 MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal
- CVE-2026-109152 jbardin scp.py SCP Receive _recv_pushd path traversal
- CVE-2026-10915 Use after free in Chrome
- CVE-2026-109149 beautifier js-beautify memory allocation