Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 965 of 1013.
- CVE-2026-106117 ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp
- CVE-2026-106116 ImageSharp: BigTIFF IFD count can keep a decoder thread in a non-progressing loop
- CVE-2026-106115 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer
- CVE-2026-106114 ImageSharp: ICC CLUT parsing allocates from unvalidated channel and grid dimensions
- CVE-2026-106113 ImageSharp: HistogramEqualization uses an unvalidated luminance as an unchecked histogram index
- CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4
- CVE-2026-106111 ImageSharp: EXR ZIP decoder can expose stale allocator data after a short inflate
- CVE-2026-106110 ImageSharp: TIFF CCITT T4 encoder can write past its compressed output buffer
- CVE-2026-10611 OTP bypass via plugin-based LDAP authentication in MISP when LDAP mixed authentication is enabled
- CVE-2026-106109 Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories
- CVE-2026-106108 Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory
- CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained
- CVE-2026-106106 Quasar Framework: SSR/SSG dev error page discloses the full shell environment and its </script> escape is bypassable
- CVE-2026-106105 Quasar Framework: Development TLS private keys are cached with overly permissive filesystem permissions
- CVE-2026-106104 Quasar Framework: Super-linear regex backtracking on User-Agent lets one request stall a Quasar SSR server
- CVE-2026-106103 Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile
- CVE-2026-106102 Quasar Framework: Stored/Reflected XSS via unescaped SSR meta tag rendering in getHead()
- CVE-2026-106101 Quasar Framework: DOM Clobbering in Quasar openURL() SafariViewController Integration Causes Client-Side Denial of Service
- CVE-2026-106100 Payload: Field-level write access bypass in Payload on MongoDB
- CVE-2026-10610 Local privilege escalation in ESET security applications for macOS
- CVE-2026-1061 xiweicheng TMS FileController.java upload unrestricted upload
- CVE-2026-106099 WP Data Access < 5.5.84 - Unauthenticated Sensitive Data Disclosure via Table Export
- CVE-2026-106098 WP Data Access < 5.5.77 - Unauthenticated Incorrect Authorization via Inline App Update
- CVE-2026-106097 Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)
- CVE-2026-106095 Code Snippets < 3.10.0 - Admin+ Network-Scoped Snippet Activation and Deactivation via update_code_snippet
- CVE-2026-106090 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-10609 OpenShift Cluster Logging Operator missing authorization flaw
- CVE-2026-106089 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-106087 Missing authorization in TRO600 Series Firmware
- CVE-2026-10608 DedeCMS carbuyaction.php RemoveXSS sql injection
- CVE-2026-106079 Command injection in Session Smart Conductor
- CVE-2026-106078 Auth bypass in Backup for Microsoft 365
- CVE-2026-106077 Missing authorization in Backup for Microsoft 365
- CVE-2026-106076 SQL injection in Backup for Microsoft 365
- CVE-2026-106074 Weak cryptography in node
- CVE-2026-106073 Security feature bypass in node
- CVE-2026-106072 Security feature bypass in node
- CVE-2026-106071 Security feature bypass in node
- CVE-2026-106070 Security feature bypass in node
- CVE-2026-10607 DedeCMS flink.php dede_htmlspecialchars sql injection
- CVE-2026-106069 Security feature bypass in node
- CVE-2026-106067 Gimp: gimp: heap buffer overflow in hot color filter on oversized image
- CVE-2026-106066 Gimp: gimp: heap buffer overflow in raw data export on oversized image dimensions
- CVE-2026-106065 Gimp: gimp: heap buffer overflow in pcx export on oversized image dimensions
- CVE-2026-106064 Gimp: gimp: heap buffer overflow in gif export on oversized image dimensions
- CVE-2026-106063 Gimp: gimp: heap buffer overflow in dicom export on oversized image dimensions
- CVE-2026-106062 Gimp: gimp: heap buffer overflow in dds loader on crafted directdraw surface file
- CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file
- CVE-2026-10606 DedeCMS Feedback feedback.php TrimMsg sql injection
- CVE-2026-106059 GitAhead through 2.7.1 on macOS Command Injection via Show in Finder AppleScript
- CVE-2026-106058 GitAhead through 2.7.1 OS Command Injection via Git Filter Filenames
- CVE-2026-106057 patool before 4.0.6 OS Command Injection on Windows via shell_quote_nt
- CVE-2026-106056 Rundeck before 6.2.0 OS Command Injection via Windows Job Option Quoting
- CVE-2026-106047 Path traversal in Xtraction
- CVE-2026-106043 Missing authorization in Xtraction
- CVE-2026-106042 Server-side request forgery in Xtraction
- CVE-2026-106041 Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC
- CVE-2026-106040 Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC
- CVE-2026-106039 Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC
- CVE-2026-106038 Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs
- CVE-2026-106037 Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service
- CVE-2026-106036 Improper certificate validation in Szafir
- CVE-2026-106035 Information disclosure in Xtraction
- CVE-2026-106034 Path traversal in Xtraction
- CVE-2026-106033 Ansible: ansible-ui: ansible ui dom xss in /redirect next parameter
- CVE-2026-106032 Server-side request forgery in bedrock-agentcore-starter-toolkit
- CVE-2026-106031 Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin Result
- CVE-2026-106030 Missing Authorization in NordVPN for Windows
- CVE-2026-106029 WeddingCity Lite <= 1.0.4 - Unauthenticated Arbitrary Post and Attachment Deletion
- CVE-2026-106028 ActiveTrail for WooCommerce <= 1.2.6 - Unauthenticated Arbitrary Coupon Creation
- CVE-2026-106026 tftp-hpa 5.4 before 6.0 Out-of-Bounds Read via tftpd Remap Jump Rule
- CVE-2026-106017 Security feature bypass in OpenVPN 3 Core Library
- CVE-2026-106016 Mitigation bypass in the File Handling component
- CVE-2026-106014 Gateway for Vantiv on WC <= 1.0.1 - Unauthenticated Order Payment Completion via Payment Callback Forgery
- CVE-2026-106013 Jupiter X Core <= 4.61.0 - Unauthenticated Authentication Bypass via Twitter/X Social Login oauth_verifier Parameter
- CVE-2026-106010 BDM Digital Payment Gateway 1.2.7 - 1.3.12 - Unauthenticated Payment Confirmation Forgery
- CVE-2026-10601 Path traversal in the Tempo and Loki data source plugins
- CVE-2026-106003 Court Reservation < 1.12.4 - Unauthenticated Reservation Type Addition and Deletion
- CVE-2026-106002 Court Reservation < 1.12.4 - Unauthenticated Arbitrary Challenge Deletion
- CVE-2026-10600 Denial of service via unbounded document content extraction in Mattermost Server
- CVE-2026-1060 WP Adminify <= 4.0.7.7 - Unauthenticated Sensitive Information Exposure via 'get-addons-list' REST API
- CVE-2026-105999 Booking Package < 1.7.31 - Unauthenticated Calendar Account Information Disclosure
- CVE-2026-105998 Booking Package < 1.7.31 - Unauthenticated Subscription Deactivation via Missing Authorization
- CVE-2026-105997 Booking Package < 1.7.33 - Unauthenticated Verification Email Sending to Arbitrary Recipient
- CVE-2026-105996 Booking Package < 1.7.31 - Unauthenticated Booking PII Disclosure and Cancellation via Predictable Token
- CVE-2026-105995 Booking Package < 1.7.30 - Unauthenticated Booking Customer PII Disclosure
- CVE-2026-105994 ColdFusion | Incorrect Authorization (CWE-863)
- CVE-2026-105992 Ettrick Escape Room Booking < 1.3.1 - Unauthenticated Payment Confirmation Bypass
- CVE-2026-105990 Accept PayPal Payments Using Contact Form 7 < 4.0.7 - Unauthenticated PII Disclosure via CSV Export
- CVE-2026-10599 Integrate PhonePe with WooCommerce <= 1.2.1 - Unauthenticated Payment Bypass via Transaction ID Reuse
- CVE-2026-105989 Accept PayPal Payments using Contact Form 7 < 4.0.7 - Unauthenticated Transaction Status Forgery
- CVE-2026-105987 Stored XSS in KGS Software tia Viewer
- CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides
- CVE-2026-105977 Missing authorization in Portfolio Filter Gallery
- CVE-2026-105976 Portfolio Filter Gallery < 2.2.1 - Contributor+ Missing Authorization via Multiple AJAX Actions
- CVE-2026-105975 CamPay Shortcode Payment Gateway < 1.7 - Unauthenticated Payment Status Forgery via external_reference
- CVE-2026-105974 Visual Form Builder <= 3.1 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
- CVE-2026-105973 Visual Form Builder <= 3.1 - Subscriber+ Arbitrary Form Field Reordering via Missing Authorization
- CVE-2026-105972 WooCommerce Menu Cart < 3.2.1 - Unauthenticated Stored XSS via Cart Item Variation Attribute
- CVE-2026-10597 ITPison｜OMICARD EDM - Insecure Direct Object Reference