Vulnerabilities published in 2026
101,255 vulnerabilities were published in 2026: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 989 of 1013.
- CVE-2026-102089 Kiteworks Email Protection Gateway path traversal
- CVE-2026-102087 Denial of service in Junos OS
- CVE-2026-102086 Junos OS: SRX Series: Multiple DNS queries processed by SecIntel and DGA in the same session cause a flowd crash
- CVE-2026-102085 Junos OS Evolved: A port which has been inadvertently exposed can be reached by an attacker
- CVE-2026-102084 Junos OS: SRX Series: In an ADVPN scenario a malformed message from a peer causes Remote Code Execution
- CVE-2026-102083 Junos OS: SRX Series: With WebFiltering enabled prolonged HTTP session load can cause a crash
- CVE-2026-102082 Junos OS: SRX Series: If TLS session resumption is configured and a specific TLS message is received a PFE crash occurs
- CVE-2026-102081 Denial of service in Junos OS
- CVE-2026-102080 Junos OS: MX Series: Malformed SyncE or PTP clock input causes continuous RE switchover
- CVE-2026-10208 code-projects Online Hospital Management System login_1.php login_user sql injection
- CVE-2026-102079 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
- CVE-2026-102078 Junos OS: SRX Series: A high volume of DNS traffic over TCP can lead to a flowd crash
- CVE-2026-102077 Denial of service in Junos OS
- CVE-2026-102076 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2026-102075 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2026-102074 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2026-102073 Memory corruption in APOGEE MBC (PPC) (BACnet)
- CVE-2026-102072 Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabled
- CVE-2026-102071 Junos OS and Junos OS Evolved: Specific RSVP packet causes an rpd crash when associated bidirectional LSP is enabled
- CVE-2026-102070 Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is used
- CVE-2026-10207 PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
- CVE-2026-102069 Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabled
- CVE-2026-102068 Memory corruption in Junos OS Evolved
- CVE-2026-102067 Junos OS and Junos OS Evolved: A specific RSVP packet causes an rpd crash when L2 LSP support is used
- CVE-2026-102066 Junos OS and Junos OS Evolved: Malformed RSVP packet causes a rpd crash when RSVP is enabled
- CVE-2026-102065 Junos OS and Junos OS Evolved: A malformed SRv6 service route causes an rpd crash when dynamic tunnels are enabled
- CVE-2026-102064 Junos OS and Junos OS Evolved: An attacker causes an rpd crash when inter-AS MVPN ingress replication is used
- CVE-2026-102063 Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is used
- CVE-2026-102062 Memory corruption in Junos OS
- CVE-2026-102061 Junos OS and Junos OS Evolved: An attacker causes root code execution when SZTP DHCP provisioning is used
- CVE-2026-102060 Null dereference in Junos OS
- CVE-2026-10206 D-Link DI-8400 dbsrv.asp stack-based overflow
- CVE-2026-102059 Command injection in Junos OS
- CVE-2026-102058 Junos OS and Junos OS Evolved: An attacker causes a bfdd denial of service when BFD is enabled
- CVE-2026-102057 Junos OS: An attacker causes DHCP service disruption during DHCP client operation
- CVE-2026-102056 Memory corruption in Junos OS
- CVE-2026-102055 Memory corruption in Junos OS
- CVE-2026-102054 Information disclosure in Junos OS
- CVE-2026-102053 Denial of service in Junos OS
- CVE-2026-102052 Junos OS and Junos OS Evolved: An attacker causes jdhcpd to crash when the DHCPv4 local-client feature is used
- CVE-2026-102051 Junos OS and Junos OS Evolved: An attacker causes l2cpd memory exhaustion when LLDP fast receive processing is enabled
- CVE-2026-102050 Junos OS and Junos OS Evolved: An adjacent attacker causes Layer 2 control-plane denial of service when LLDP is enabled
- CVE-2026-10205 Metasoft 美特软件 MetaCRM upload.jsp unrestricted upload
- CVE-2026-102049 Memory corruption in Junos OS
- CVE-2026-102048 Junos OS: An attacker causes l2cpd crash when FNP is used with VLAN-VPLS encapsulation enabled
- CVE-2026-102047 Junos OS and Junos OS Evolved: An attacker causes l2cpd denial of service when MVRP is used
- CVE-2026-102046 Junos OS: MX Series: An attacker causes a Routing Engine denial of service when SCTP service is used
- CVE-2026-102045 Junos OS Evolved: An crafted LACP frame causes lacpd to crash when LACP is enabled
- CVE-2026-102044 Denial of service in Junos OS
- CVE-2026-102043 Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when MPLS-TE fast reroute is enabled
- CVE-2026-102042 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when RSVP associated-bidirectional LSP is enabled
- CVE-2026-102041 Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when RSVP is enabled
- CVE-2026-102040 Junos OS and Junos OS Evolved: An attacker crashes the routing daemon when co-routed bidirectional RSVP LSPs are used
- CVE-2026-10204 OFCMS JSON Query SysUserController.java query sql injection
- CVE-2026-102039 Null dereference in Junos OS
- CVE-2026-102037 Junos OS: SRX Series: An attacker causes arbitrary configuration commit when the custom URL-feed feature is used
- CVE-2026-102036 Junos OS and Junos OS Evolved: An EVPN default-gateway route burst causes l2ald denial of service
- CVE-2026-102035 Junos OS and Junos OS Evolved: An attacker causes a denial of service when MC-LAG IRB MAC synchronization is enabled
- CVE-2026-102034 Junos OS and Junos OS Evolved: An attacker causes l2ald to restart when MC-LAG ICCP MAC synchronization is enabled
- CVE-2026-102033 Junos OS and Junos OS Evolved: An attacker causes denial of service when MC-LAG MAC synchronization is enabled
- CVE-2026-102032 Denial of service in Junos OS
- CVE-2026-102031 Junos OS Evolved: A low-privileged TACACS+ user causes root command execution when authorization refresh is enabled
- CVE-2026-102030 Denial of service in Junos OS
- CVE-2026-10203 OFCMS JSON Query SystemParamController.java query sql injection
- CVE-2026-102029 Null dereference in Junos OS
- CVE-2026-102028 Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used
- CVE-2026-102027 Junos OS and Junos OS Evolved: A configured BGP neighbor causes rpd crash when multipath next-hops are processed
- CVE-2026-102026 Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
- CVE-2026-102025 Memory corruption in Junos OS
- CVE-2026-102024 Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
- CVE-2026-102023 Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
- CVE-2026-102022 Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
- CVE-2026-102021 Junos OS and Junos OS Evolved: Malformed RSVP packet causes rpd crash when MPLS-TE error processing is enabled
- CVE-2026-102020 Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
- CVE-2026-10202 OFCMS JSON Query SystemDictController.java query sql injection
- CVE-2026-102019 Junos OS and Junos OS Evolved: Malformed RIPv2 messages cause routing service disruption when RIP is enabled
- CVE-2026-102018 Null dereference in Junos OS
- CVE-2026-102017 Junos OS and Junos OS Evolved: An attacker causes routing-plane denial of service when Auto-RP mapping is enabled
- CVE-2026-102016 Junos OS and Junos OS Evolved: An attacker causes a routing outage when BGP MVPN signaling is enabled
- CVE-2026-102015 Junos OS and Junos OS Evolved: An attacker causes root code execution when 802.1X authentication is used
- CVE-2026-102014 Junos OS: An attacker causes authd to crash when subscriber RADIUS authentication is used
- CVE-2026-102013 Junos OS and Junos OS Evolved: An attacker causes na-grpcd to crash when the InitialSync service is used
- CVE-2026-102012 Junos OS Evolved: An attacker causes na-grpcd to crash when gRPC telemetry is enabled
- CVE-2026-102011 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP link protection is enabled
- CVE-2026-102010 Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
- CVE-2026-10201 Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero
- CVE-2026-102007 Cross-site scripting in Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation
- CVE-2026-102006 VxWorks 7 Memory allocation
- CVE-2026-102005 VxWorks Memory Allocation
- CVE-2026-102004 VxWorks 7
- CVE-2026-102002 Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
- CVE-2026-102000 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- CVE-2026-10200 Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow
- CVE-2026-101999 Junos OS and Junos OS Evolved: An attacker causes rpd to crash when LDP is enabled
- CVE-2026-101998 Fail-open response masking in Docker Sandboxes can expose proxy-managed credentials
- CVE-2026-101997 SQL injection in Junos OS
- CVE-2026-101996 Junos OS and Junos OS Evolved: An inconsistent ICCP peer message causes an l2ald crash when MC-LAG is configured
- CVE-2026-101995 Junos OS and Junos OS Evolved: Malformed ICCP packets cause l2ald memory disclosure and disruption
- CVE-2026-101994 Junos OS and Junos OS Evolved: Malformed MC-LAG ICCP message causes l2ald heap disclosure or crash
- CVE-2026-101993 Denial of service in Junos OS