Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 976 of 1013.
- CVE-2026-104309 Langflow OSS is affected by multiple vulnerabilities
- CVE-2026-104308 Langflow OSS is affected by multiple vulnerabilities
- CVE-2026-1043 PostmarkApp Email Integrator <= 2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Settings
- CVE-2026-104286 Fortinet FortiMail Path Traversal
- CVE-2026-104266 tinytag: Infinite loop when parsing certain M4A files containing invalid atoms
- CVE-2026-104252 Vitess vttablet /twopcz reflected XSS
- CVE-2026-104250 unstructured: Stored XSS via unescaped HTML generation
- CVE-2026-104246 Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments
- CVE-2026-10420 Memory corruption in mTower
- CVE-2026-1042 Cross-site scripting in WP Hello Bar
- CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication
- CVE-2026-104192 DragonflyDB stream RDB deserialization double-free
- CVE-2026-104189 3Dviewer-Nextcloud: Share password not enforced when streaming 3D models from a public link share
- CVE-2026-104183 stream-json: Prototype pollution: Assembler writes this.current[this.key] on plain objects
- CVE-2026-104182 stream-json: JSONC parser and verifier re-scan the whole accumulated comment on every input chunk
- CVE-2026-104181 Filament: Multi-factor authentication (app) management actions do not require password reauthentication
- CVE-2026-104150 AdonisJS HTTP Server: Uncontrolled Resource Consumption and Inefficient Regular Expression Complexity
- CVE-2026-104143 DataEase: Stored SQL Injection via dateFormat field templates
- CVE-2026-104142 DataEase: Stored SQL Injection in group-field binning bounds
- CVE-2026-104141 DataEase: SQL Injection in datasource metadata identifiers
- CVE-2026-104140 QGIS: Stored XSS in WFS3 getFeatures HTML page via unescaped feature attribute values
- CVE-2026-104126 JumpServer: Ansible Automation Template Rendering Allows Unsafe Lookup Plugin Invocation
- CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection
- CVE-2026-104122 Ukr-To-Lat <= 1.3.5 - Contributor+ SQLi via Term Name
- CVE-2026-104120 modelcontextprotocol mcp-server-fetch/mcp-server-everything Fetch Tool server.py fetch_url server-side request forgery
- CVE-2026-104119 Simple Shopping Cart < 5.2.6 - Admin+ Stored XSS via PayPal API Credentials
- CVE-2026-104118 Razorpay for WooCommerce < 4.8.8 - Unauthenticated Order Shipping Modification via IDOR
- CVE-2026-104117 Missing authorization in illumos ipmgmtd allows local users to change persistent IPMP group membership
- CVE-2026-104116 Missing authorization in illumos zonestatd allows local users to disrupt zonestat and enumerate running zones
- CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon
- CVE-2026-104114 NULL pointer dereference in illumos nwamd door handler allows local users to crash the daemon
- CVE-2026-104113 Double free in OmniOS and SmartOS ipmgmtd allows local users to crash the daemon
- CVE-2026-104112 Missing release of passed file descriptors in illumos nscd allows local users to exhaust kernel memory
- CVE-2026-104110 Missing authorization in FileRise
- CVE-2026-104109 FileRise: Authenticated ZIP extraction follows a pre-existing symlink and deletes files outside the storage root
- CVE-2026-104108 FileRise OIDC login can bind an attacker identity to an existing local account
- CVE-2026-104107 FileRise: Authenticated path traversal escapes configured storage root through inherited ACLs
- CVE-2026-104106 FileRise: 2FA disable and TOTP enrollment lack step-up re-authentication; enrollment activates before verification
- CVE-2026-104105 FileRise: TOTP codes are not single-use — valid 6-digit code can be replayed within its window (capture-replay)
- CVE-2026-104103 Ludwig: Path traversal in dataset archive extraction allows arbitrary file write via symlink members
- CVE-2026-104102 copyparty FTP: upload outside defined volumes (limited path traversal)
- CVE-2026-104086 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table
- CVE-2026-104085 odt2spip < 4.4.0 OS Command Injection via Document Filename
- CVE-2026-104084 SmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh Token
- CVE-2026-104083 SmarterMail < Build 9777 Stored Mutation XSS via MathML Foreign Content
- CVE-2026-104082 SmarterMail < Build 9777 SysAdmin Remote Code Execution via Volume Mount
- CVE-2026-104081 KodExplorer < 4.55 Path Traversal via unzip_pre_name() ZIP Extraction
- CVE-2026-104079 Envira Gallery Lite < 1.16.2 Missing Authorization via Gallery Conversion REST Endpoint
- CVE-2026-104078 Obsidian Desktop < 1.14.0 RCE via MathJax Safe Filter Bypass
- CVE-2026-104077 Obsidian Desktop < 1.14.0 RCE via Slides Plugin Markdown
- CVE-2026-104076 TVU Networks Receiver/Transceiver Missing Authentication via REST API
- CVE-2026-104075 TVU Networks Receiver/Transceiver Authentication Bypass via /tvu/Login
- CVE-2026-104074 Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE
- CVE-2026-104073 NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links
- CVE-2026-104070 SPIP Crayons Plugin < 3.5.0 Authorization Bypass RCE
- CVE-2026-104069 HortusFox < 6.2 Remote Code Execution via Theme Import
- CVE-2026-104068 JetBackup WordPress Plugin < 3.1.24.10 Symlink Arbitrary File Write via Backup Restore
- CVE-2026-104059 Lektor 3.3.14 CSRF via Admin API Endpoints
- CVE-2026-104058 Podgrab Missing Authentication on WebSocket /ws Endpoint
- CVE-2026-104057 Podgrab Unauthenticated DoS via Concurrent Map Access in WebSocket Handler
- CVE-2026-104056 CVE-2026-104056
- CVE-2026-104055 Monitoring-user password logged in cleartext by postgres_exporter in postgresql VM charm
- CVE-2026-104054 calcom cal.diy PBAC Permission BookingAccessService.ts doesUserIdHaveAccessToBooking authorization
- CVE-2026-104053 itsourcecode Pet Shop Management System admin_reservefilter.php sql injection
- CVE-2026-104052 itsourcecode Pet Shop Management System admin_reject_completed.php sql injection
- CVE-2026-104051 PictShare < 3.7.1 Sensitive Information Disclosure via info API
- CVE-2026-104050 Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers
- CVE-2026-104049 Academy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST Endpoint
- CVE-2026-104048 Sssd: sssd: authorization bypass via cross-domain username collision in hbac evaluation
- CVE-2026-104047 Sssd: sssd: information disclosure via query injection in entra id lookups
- CVE-2026-104046 Sssd: sssd: denial of service via incomplete identity provider authentication requests
- CVE-2026-104045 Sssd: sssd: denial of service via race condition in autofs responder
- CVE-2026-104044 Sssd: sssd: denial of service via crafted passkey kerberos authentication request
- CVE-2026-104043 Sssd: sssd: denial of service via undersized packet parsing in nss responder
- CVE-2026-104042 Sssd: sssd: denial of service via out-of-bounds read in pam responder
- CVE-2026-104041 Sssd: sssd: denial of service via unbounded negative cache growth
- CVE-2026-104040 Sssd: sssd: information disclosure via odata injection in entra id lookups
- CVE-2026-104039 Sssd: sssd: denial of service via stale connection state reuse in pam gssapi responder
- CVE-2026-104038 Sssd: sssd: denial of service via missing sid extension in certificate mapping
- CVE-2026-104037 Sssd: sssd: denial of service via packet length underflow in autofs responder
- CVE-2026-104036 Sssd: sssd: denial of service via out-of-bounds write in nfs idmap plugin
- CVE-2026-104035 Sssd: sssd: denial of service via memory exhaustion in kcm responder
- CVE-2026-104034 Sssd: sssd: denial of service via use-after-free in kcm ticket renewal
- CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check
- CVE-2026-104032 Sssd: sssd: denial of service via unprivileged autofs cache invalidation
- CVE-2026-104031 Sssd: sssd: denial of service via memory exhaustion in autofs responder
- CVE-2026-104030 Sssd: sssd: denial of service via out-of-bounds read during passkey parsing
- CVE-2026-104029 Sssd: sssd: denial of service via out-of-bounds read in autofs responder
- CVE-2026-104028 Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE
- CVE-2026-104026 Command injection in Sapling SCM
- CVE-2026-104025 Path traversal in PeaZip object preview allows execution of arbitrary programs via a crafted archive entry name
- CVE-2026-104024 Security feature bypass in PeaZip
- CVE-2026-104023 Smart Popup by Supsystic <= 1.13.2 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter
- CVE-2026-104022 Academy LMS <= 4.0.3 - Authenticated (Custom+) Privilege Escalation to add_child REST endpoint
- CVE-2026-104021 Code injection in Fastcache by Host.it
- CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python
- CVE-2026-104019 Command injection in sagemaker-distribution
- CVE-2026-104018 VxWorks 7 improper privilege management
- CVE-2026-104016 Integer overflow in jackson-dataformat-protobuf
- CVE-2026-104006 Information disclosure in SpeedyCache – Cache, Optimization, Performance