Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 960 of 1013.
- CVE-2026-10673 Out-of-bounds write in ADIN2111/ADIN1110 OA SPI Ethernet RX frame reassembly
- CVE-2026-10672 Unterminated URI buffer causes out-of-bounds read in LwM2M firmware pull (Package URI)
- CVE-2026-10671 User thread can re-initialize an in-use `k_pipe`, corrupting kernel wait queues (`CONFIG_USERSPACE`)
- CVE-2026-106708 XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController).
- CVE-2026-106707 XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog).
- CVE-2026-106706 XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor.
- CVE-2026-106705 ELADMIN (eladmin-mp) up to 2.7 contains an improper access control vulnerability in the role management module.
- CVE-2026-106701 ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.
- CVE-2026-106700 ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhe
- CVE-2026-10670 User-triggerable kernel NULL-pointer dereference (DoS) in `k_thread_name_copy()` syscall verifier
- CVE-2026-10669 Xtensa MPU `arch_buffer_validate()` integer-overflow lets a user thread bypass syscall pointer validation
- CVE-2026-10668 Host-triggerable control-endpoint wedge (DoS) in Nuvoton NuMaker HSUSBD UDC driver
- CVE-2026-106677 Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImpl.
- CVE-2026-106676 qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to wrap a cart quantity to a negative value.
- CVE-2026-10667 Use after free in zephyr
- CVE-2026-10666 Stack buffer overflow in `net_ipaddr_parse()` IPv4 address-with-port parsing in `subsys/net/ip/utils.c`
- CVE-2026-10665 Heap buffer overflow on WireGuard receive path via unbounded incoming packet length
- CVE-2026-106648 Royal Elementor Addons < 1.7.1070 - Unauthenticated Arbitrary Email Recipient Injection via Form Field ID Shortcodes
- CVE-2026-106647 Royal Elementor Addons 1.3.68 - 1.7.1069 - Author+ Form Submission Interception via Widget ID Collision
- CVE-2026-106646 Classified Listing < 6.1.1 - Subscriber+ Unattached Media Deletion and Modification via Gallery AJAX Handlers
- CVE-2026-10664 Out-of-bounds write in nRF70 Wi-Fi driver power-save event handler (unbounded TWT flow count)
- CVE-2026-106634 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
- CVE-2026-106633 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106632 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-106631 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106630 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-10663 Use-after-free / double-free of the root USB device in the experimental USB host stack
- CVE-2026-106629 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
- CVE-2026-106628 Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)
- CVE-2026-106627 CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
- CVE-2026-106626 Adobe Experience Manager | Improper Input Validation (CWE-20)
- CVE-2026-106625 Adobe Framemaker | Out-of-bounds Write (CWE-787)
- CVE-2026-106624 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-106623 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106622 ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- CVE-2026-106621 ColdFusion | Improper Control of Generation of Code ('Code Injection') (CWE-94)
- CVE-2026-106620 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-10662 ahujasid blender-mcp ZIP File server.py requests.get server-side request forgery
- CVE-2026-106619 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-106618 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106617 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106616 ColdFusion | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)
- CVE-2026-106615 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106614 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106613 ColdFusion | Improper Input Validation (CWE-20)
- CVE-2026-106612 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106611 WordPress Forminator plugin <= 1.57.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-106610 WordPress miniorange otp verification plugin <= 5.5.7 - Privilege Escalation vulnerability
- CVE-2026-10661 ahujasid blender-mcp server.py open injection
- CVE-2026-106609 WordPress Bayarcash WooCommerce plugin <= 4.4.2 - Broken Access Control vulnerability
- CVE-2026-106608 WordPress WooCommerce plugin 9.8.0-11.1.2 - Shop Manager+ Privilege Escalation vulnerability
- CVE-2026-106606 WordPress YITH WooCommerce Affiliates plugin <= 3.31.0 - PHP Object Injection vulnerability
- CVE-2026-106605 Business logic in Flexible Quantity – Measurement Price Calculator for WooCommerce
- CVE-2026-106604 WordPress YITH WooCommerce Compare plugin <= 3.15.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-106603 WordPress HollerBox plugin <= 2.3.14 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-106602 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
- CVE-2026-106601 WordPress Jetpack plugin <= 16.2 - Broken Authentication vulnerability
- CVE-2026-106600 WordPress GiveWP plugin <= 4.18.0 - Broken Access Control vulnerability
- CVE-2026-10660 Shared reassembly buffer in Bluetooth BAP Broadcast Assistant enables cross-connection memory corruption
- CVE-2026-1066 kalcaddle kodbox Compression zip command injection
- CVE-2026-106599 WordPress SureCart plugin <= 4.9.3 - PHP Object Injection vulnerability
- CVE-2026-106598 WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
- CVE-2026-106597 WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
- CVE-2026-106596 WordPress Visual Composer Website Builder plugin <= 45.16.3 - Broken Access Control vulnerability
- CVE-2026-10659 NULL pointer dereference in Zephyr Dhara FTL disk driver on flash read error during journal resume
- CVE-2026-106589 Privilege escalation in OpenSSH
- CVE-2026-106588 Security feature bypass in OpenSSH
- CVE-2026-106587 Security feature bypass in OpenSSH
- CVE-2026-106586 Security feature bypass in OpenSSH
- CVE-2026-106585 Denial of service in OpenSSH
- CVE-2026-106584 Other in OpenSSH
- CVE-2026-106583 Command injection in OpenSSH
- CVE-2026-106582 Weak cryptography in OpenSSH
- CVE-2026-106581 Docker Desktop for Windows installer failed to verify external packages
- CVE-2026-106580 ImageMagick: Policy Bypass in CUT encoder
- CVE-2026-10658 Out-of-bounds access in Bluetooth ISO receive (`bt_iso_recv`) due to missing SDU-header length validation
- CVE-2026-106579 ImageMagick: Policy Bypass when using coder as the domain.
- CVE-2026-106578 ImageMagick: Invalid Memory Free in MVG decoder
- CVE-2026-106577 ImageMagick: Code Injection in the postscript coders
- CVE-2026-106576 ImageMagick: Denial of service possible when parsing an XMP profile.
- CVE-2026-106575 ImageMagick: Unclosed file pointer in magick script
- CVE-2026-106574 ImageMagick: Heap Buffer Over-Write in distributed pixel cache server will result in a crash
- CVE-2026-106573 ImageMagick: Denial of service in MVG decoder
- CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check.
- CVE-2026-106571 ImageMagick: Heap Buffer Over-Write in GetVirtualPixels api will result in a crash
- CVE-2026-106570 ImageMagick: Denial of service in distributed pixel cache server
- CVE-2026-10657 Out-of-bounds read in Zephyr DNS resolver mDNS suffix check (memcmp past string NUL)
- CVE-2026-106569 ImageMagick: Denial of service in ASE decoder because of missing security checks
- CVE-2026-106568 ImageMagick: Infinite Loop when reading a crafted XMP profile
- CVE-2026-106567 ImageMagick: Infinite Loop in PSD decoder on 32-bit builds
- CVE-2026-106566 ImageMagick: Policy Bypass in delegate symlink cleanup due to missing check
- CVE-2026-106565 ImageMagick: Infinite Loop in bzip2 compressed images.
- CVE-2026-106564 ImageMagick: Heap Buffer Over-Write in EXR decoder
- CVE-2026-106563 Backstage: Improper entity validation in deprecated Kubernetes services endpoint
- CVE-2026-106562 Backstage: Incorrect authorization in search engine permission filtering
- CVE-2026-106561 Backstage: Sensitive information disclosure in Kubernetes resource queries
- CVE-2026-106560 Backstage: Improper repository path validation in a Scaffolder backend module
- CVE-2026-10656 NULL-pointer dereference DoS in MAX32 USB device controller transfer-completion handlers
- CVE-2026-106559 Backstage: Improper input validation in Confluence to Markdown scaffolder module
- CVE-2026-106558 Backstage: Improper validation of TechDocs MkDocs configuration