Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 964 of 1013.
- CVE-2026-106235 Use after free in Chrome
- CVE-2026-106234 Use after free in Chrome
- CVE-2026-106233 Use after free in Chrome
- CVE-2026-106232 Other in Chrome
- CVE-2026-106231 Information disclosure in Chrome
- CVE-2026-106230 Information disclosure in Chrome
- CVE-2026-10623 Missing authorization in PressPrimer Quiz – AI Quiz Maker, Exam Builder & LMS Assessment Plugin
- CVE-2026-106229 Security feature bypass in Chrome
- CVE-2026-106228 Other in Chrome
- CVE-2026-106227 Use after free in Chrome
- CVE-2026-106226 Other in Chrome
- CVE-2026-106225 Missing authorization in Chrome
- CVE-2026-106224 Missing authorization in Chrome
- CVE-2026-106223 Information disclosure in Chrome
- CVE-2026-106222 Missing authorization in Chrome
- CVE-2026-106221 Security feature bypass in Chrome
- CVE-2026-106220 Information disclosure in Chrome
- CVE-2026-10622 CVE-2026-10622
- CVE-2026-106219 Path traversal in TeamCity
- CVE-2026-106218 Code injection in TeamCity
- CVE-2026-106217 Missing authorization in Chrome
- CVE-2026-106216 Cross-site request forgery in Chrome
- CVE-2026-106215 Information disclosure in Chrome
- CVE-2026-106214 Information disclosure in Chrome
- CVE-2026-106213 Race condition in Chrome
- CVE-2026-106212 Missing authorization in Chrome
- CVE-2026-106211 Use after free in Chrome
- CVE-2026-106210 Information disclosure in Chrome
- CVE-2026-10621 CVE-2026-10621
- CVE-2026-106209 Other in Chrome
- CVE-2026-106208 Missing authorization in Chrome
- CVE-2026-106207 Race condition in Chrome
- CVE-2026-106206 Information disclosure in Chrome
- CVE-2026-106205 Missing authorization in Chrome
- CVE-2026-106204 Use after free in Chrome
- CVE-2026-106203 Information disclosure in Chrome
- CVE-2026-106202 Information disclosure in Chrome
- CVE-2026-106201 Race condition in Chrome
- CVE-2026-106200 Use after free in Chrome
- CVE-2026-10620 code-projects Student Admission System index.php sql injection
- CVE-2026-1062 xiweicheng TMS HtmlUtil.java summary server-side request forgery
- CVE-2026-106199 Security feature bypass in Chrome
- CVE-2026-106198 Missing authorization in Chrome
- CVE-2026-106197 Use after free in Chrome
- CVE-2026-106196 Missing authorization in Chrome
- CVE-2026-106195 Security feature bypass in Chrome
- CVE-2026-106194 Missing authorization in Chrome
- CVE-2026-106193 Use after free in Chrome
- CVE-2026-106192 Information disclosure in Chrome
- CVE-2026-106191 Missing authorization in Chrome
- CVE-2026-106190 Use after free in Chrome
- CVE-2026-10619 sayan365 student-management-system improper authentication
- CVE-2026-106189 Code injection in Chrome
- CVE-2026-106188 Security feature bypass in Chrome
- CVE-2026-106187 Missing authorization in Chrome
- CVE-2026-106186 Other in Chrome
- CVE-2026-106185 Security feature bypass in Chrome
- CVE-2026-106184 Information disclosure in Chrome
- CVE-2026-106183 Missing authorization in Chrome
- CVE-2026-106182 Other in Chrome
- CVE-2026-106181 Information disclosure in Chrome
- CVE-2026-106180 Information disclosure in Chrome
- CVE-2026-10618 Hugo 0.93.0 through 0.165.0 Stored Cross-Site Scripting via Unescaped Code-Fence Attribute Values
- CVE-2026-106179 Other in Chrome
- CVE-2026-106177 HP Sure Click Kernel Buffer Overflow
- CVE-2026-106176 Missing authorization in FortiSIEM
- CVE-2026-106175 Memory corruption in FortiOS
- CVE-2026-106174 Denial of service in FortiOS
- CVE-2026-106173 Path traversal in FortiSIEM
- CVE-2026-106172 Hardcoded credentials in FortiSandbox
- CVE-2026-106171 Command injection in FortiManager
- CVE-2026-106170 Denial of service in FortiSandbox
- CVE-2026-10617 nextlevelbuilder GoClaw Webhook Verification auth.go resolveAuth missing authentication
- CVE-2026-106166 NEX-Forms 9.2.1 - 9.2.5 - Unauthenticated Arbitrary Form Entry Modification via 'nf_set_entry_update_id' Parameter
- CVE-2026-106164 Infinite Loop in Telerik Document Processing XLS Import
- CVE-2026-106163 Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
- CVE-2026-106162 Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
- CVE-2026-106161 Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
- CVE-2026-106160 Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
- CVE-2026-10616 nextlevelbuilder GoClaw Team Task Completion team_tasks_lifecycle.go TeamTasksTool.executeComplete authorization
- CVE-2026-106159 Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
- CVE-2026-106158 Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
- CVE-2026-106157 Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
- CVE-2026-106155 Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
- CVE-2026-106153 Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
- CVE-2026-106151 Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
- CVE-2026-106150 Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip
- CVE-2026-106149 Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
- CVE-2026-106148 Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
- CVE-2026-106147 Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
- CVE-2026-106145 Privilege Escalation in Telerik Report Server Service-Agent Hub
- CVE-2026-106139 Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
- CVE-2026-106138 Cross-Site Scripting via Chart Tooltip in KendoReact
- CVE-2026-106126 Command Injection
- CVE-2026-106123 RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()
- CVE-2026-106122 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers
- CVE-2026-106121 RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS
- CVE-2026-106120 LiquidJS: ownPropertyOnly bypass for inherited array indices in first/last/join/reverse/slice/compact, `.first`/`.last`, negative index, and for-loop iteration
- CVE-2026-106119 LangChain: MongoDBChatMessageHistory query injection can allow cross-session access
- CVE-2026-106118 ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write