Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 988 of 1013.
- CVE-2026-102189 Windows Storage Elevation of Privilege Vulnerability
- CVE-2026-102188 Windows Storage Port Driver Elevation of Privilege Vulnerability
- CVE-2026-102187 Windows Kernel Information Disclosure Vulnerability
- CVE-2026-102186 Windows Network File System Information Disclosure Vulnerability
- CVE-2026-102185 Denial of service in Junos OS
- CVE-2026-102184 Junos OS and Junos OS Evolved: A malformed EVPN SRv6 route causes an rpd crash
- CVE-2026-102183 Junos OS and Junos OS Evolved: If in a BGP EVPN scenario a malformed NLRI is received rpd crashes
- CVE-2026-102182 Junos OS: MX Series: Certificate-based IKE packets cause root-level code execution
- CVE-2026-102180 Junos OS and Junos OS Evolved: An attacker causes an rpd crash when BGP RIB streaming telemetry is in use
- CVE-2026-10218 nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization
- CVE-2026-102179 Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP EVPN RIB telemetry is used
- CVE-2026-102178 Memory corruption in Junos OS
- CVE-2026-102177 Junos OS and Junos OS Evolved: An out-of-bounds write causes an rpd crash when IS-IS backup selection is used
- CVE-2026-102176 Memory corruption in Junos OS
- CVE-2026-102175 Memory corruption in Junos OS
- CVE-2026-102174 Memory corruption in Junos OS
- CVE-2026-102173 Cross-site scripting in Kirki – Freeform Page Builder, Website Builder & Customizer
- CVE-2026-10217 nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management
- CVE-2026-102169 Security Advisory 0194
- CVE-2026-102168 Security Advisory 0194
- CVE-2026-102167 Security Advisory 0197
- CVE-2026-102165 Security Advisory 0198
- CVE-2026-102164 Security Advisory 0196
- CVE-2026-102163 Security Advisory 0195
- CVE-2026-102162 Security Advisory 0193
- CVE-2026-102161 Security Advisory 0190
- CVE-2026-102160 Security Advisory 0190
- CVE-2026-10216 unitedbyai droidclaw claim Endpoint pairing.ts excessive authentication
- CVE-2026-102159 Security Advisory 0190
- CVE-2026-102158 Security Advisory 0190
- CVE-2026-102157 Security Advisory 0190
- CVE-2026-102156 Security Advisory 0191
- CVE-2026-102155 Security Advisory 0190
- CVE-2026-102150 Kiteworks Secure Data Forms Missing Authentication for Critical Function
- CVE-2026-10215 Dolibarr ERP CRM Leave Request REST API api_holidays.class.php checkUserAccessToObject improper authorization
- CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control
- CVE-2026-102147 Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)
- CVE-2026-102146 Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
- CVE-2026-102145 Kiteworks Core Server-Side Request Forgery through CRLF Injection
- CVE-2026-102144 Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
- CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
- CVE-2026-102142 Kiteworks Core Remote Code Execution through Server-Side Template Injection
- CVE-2026-102141 Kiteworks Core Privilege Escalation through External Control of File Name or Path
- CVE-2026-102140 Kiteworks Core Insufficient Verification of Data Authenticity
- CVE-2026-10214 zhayujie chatgpt-on-wechat Bash Tool bash.py _get_safety_warning os command injection
- CVE-2026-102139 Kiteworks Email Protection Gateway Incorrect Authorization
- CVE-2026-102138 Kiteworks Core Server-Side Request Forgery (SSRF)
- CVE-2026-102137 Kiteworks Core Unrestricted Upload of File with Dangerous Type
- CVE-2026-102136 Kiteworks Core Command Execution through Configuration Injection
- CVE-2026-102135 Kiteworks Email Protection Gateway Deserialization of Untrusted Data
- CVE-2026-102134 Kiteworks Core Unprotected Alternate Channel
- CVE-2026-102133 Kiteworks Core Arbitrary File Write through Command Injection
- CVE-2026-102132 Kiteworks Core Privilege Escalation through Improper Access Control
- CVE-2026-102131 Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity
- CVE-2026-102130 Kiteworks Email Protection Gateway Remote Code Execution
- CVE-2026-10213 AstrBotDevs AstrBot API Endpoint delete path traversal
- CVE-2026-102129 Kiteworks Core Incorrect Privilege Assignment
- CVE-2026-102128 Kiteworks Email Protection Gateway Improper Authentication
- CVE-2026-102127 Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference
- CVE-2026-102126 Kiteworks Core Stored Cross-site Scripting (XSS)
- CVE-2026-102125 Kiteworks Core Sandbox Escape
- CVE-2026-102124 Kiteworks Core Missing Authentication for Critical Function
- CVE-2026-102123 Kiteworks Core Path Traversal
- CVE-2026-102122 Kiteworks Core Incorrect Authorization
- CVE-2026-102121 Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2026-102120 Kiteworks Core OS Command Injection
- CVE-2026-10212 AstrBotDevs AstrBot astr_main_agent.py astr_main_agent authorization
- CVE-2026-102119 Kiteworks Email Protection Gateway Path Traversal
- CVE-2026-102118 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
- CVE-2026-102117 Kiteworks Core Remote Code Execution
- CVE-2026-102116 Kiteworks Email Protection Gateway Path Traversal
- CVE-2026-102115 Kiteworks Core Authentication Bypass in the Password Reset Workflow
- CVE-2026-102114 Kiteworks Core OS Command Injection
- CVE-2026-102113 Kiteworks Core Local Privilege Escalation
- CVE-2026-102112 Kiteworks Core Local Privilege Escalation
- CVE-2026-102111 Kiteworks Core Improper Validation of Specified Quantity in Input
- CVE-2026-102110 Missing authentication on a Kiteworks appliance setup function
- CVE-2026-10211 AstrBotDevs AstrBot fs.py _normalize_rw_path authorization
- CVE-2026-102109 Kiteworks Secure Data Forms SQL injection
- CVE-2026-102108 Kiteworks Email Protection Gateway deserialization of untrusted data
- CVE-2026-102107 Kiteworks Core user impersonation in a file-request feature
- CVE-2026-102106 Kiteworks Email Protection Gateway improper authentication
- CVE-2026-102105 Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102104 Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102103 Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102102 Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102101 Kiteworks Core deserialization of untrusted data
- CVE-2026-102100 Kiteworks Core stored XSS
- CVE-2026-10210 AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection
- CVE-2026-102099 Kiteworks Core arbitrary file write
- CVE-2026-102098 Kiteworks Core SQL Injection
- CVE-2026-102097 Kiteworks Email Protection Gateway remote code execution
- CVE-2026-102096 Kiteworks Core OS command injection
- CVE-2026-102095 Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102094 Kiteworks Email Protection Gateway unsafe reflection
- CVE-2026-102093 Kiteworks Core improper privilege management
- CVE-2026-102092 Kiteworks Core stored XSS
- CVE-2026-102091 Kiteworks Secure Data Forms server-side request forgery
- CVE-2026-102090 Kiteworks Core content injection
- CVE-2026-10209 code-projects Online Hospital Management System Appointment appointmentdetail.php sql injection