Menu

Star on GitHub · 3.4k

2026

90,429 vulnerabilities published in 2026.

Results

33,533 of 90,429· Page 123/671
4.3
CVE-2026-104675

Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly

6.5
CVE-2026-104673

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sonaar MP3 Audio P

6.5
CVE-2026-104409

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Image Pho

6.5
CVE-2026-104404

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / Stell

4.3
CVE-2026-104401

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Memberful Memberful - Member

6.5
CVE-2026-104400

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks

5.3
CVE-2026-104397

Missing Authorization vulnerability in Jeroen Peters Name Directory name-directory allows Exploiting Incorrectly Configu

6.5
CVE-2026-104396

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Peters Name

5.3
CVE-2026-104388

Missing Authorization vulnerability in Blubrry Podcasting PowerPress Podcasting powerpress allows Retrieve Embedded Sens

6.5
CVE-2026-104386

Missing Authorization vulnerability in WPFunnels Team WP VR wpvr allows Exploiting Incorrectly Configured Access Control

5.3
CVE-2026-103351

Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc. Taxi Booking Manager for WooCommerce

6.5
CVE-2026-103084

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LeapWorx Premium A

5.4
CVE-2026-103079

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting

4.3
CVE-2026-103078

Authorization Bypass Through User-Controlled Key vulnerability in Ahmad JS Help Desk js-support-ticket allows Exploiting

6.5
CVE-2026-102914

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force P

6.5
CVE-2026-102393

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force S

4.3
CVE-2026-105250

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode_ms_ima of the file

4.8
CVE-2026-105249

A weakness has been identified in vgmstream up to r2117. This impacts the function make_group_random of the file src/met

6.3
CVE-2026-105248

A security flaw has been discovered in vgmstream up to r2117. This affects the function parse_params/txtp_parse of the f

5.4
CVE-2026-19954

Net::Whois::Raw versions before 2.99044 for Perl ship a pwhois command-line tool that queries WHOIS for the wrong domain

5.3
CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files containe

5.3
CVE-2026-84169

The UPI QR Code Payment Gateway WordPress plugin through 1.4.3 does not verify that a payment-confirmation request actua

5.9
CVE-2026-78371

The File Uploads Addon for WooCommerce WordPress plugin before 1.7.6 does not verify that the person requesting a custom

5.9
CVE-2026-13607

The File Uploads Addon for WooCommerce WordPress plugin through 1.7.6 stores customer-uploaded files in a publicly web-a

6.5
CVE-2026-105306

A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issu

5.7
CVE-2026-105302

A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occu

6.3
CVE-2026-105233

A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b

4.7
CVE-2026-105226

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function inc

4.3
CVE-2026-105225

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file in

6.3
CVE-2026-105187

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file

6.3
CVE-2026-105186

A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php

6.3
CVE-2026-105181

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing o

6.7
CVE-2026-20589

In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege

6.7
CVE-2026-20588

In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation

6.7
CVE-2026-20587

In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privi

6.7
CVE-2026-20579

In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege

6.8
CVE-2026-20544

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

5.5
CVE-2026-20543

In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclosu

6.7
CVE-2026-20542

In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege

5.3
CVE-2026-20541

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of

5.3
CVE-2026-20540

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of serv

5.3
CVE-2026-20539

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of serv

5.3
CVE-2026-20538

In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of

6.7
CVE-2026-20537

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i

6.7
CVE-2026-20536

In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege i

6.7
CVE-2026-20535

In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalat

5.3
CVE-2026-20534

In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of s

6.7
CVE-2026-20533

In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation

6.2
CVE-2026-20532

In apu, there is a possible application crash due to double free. This could lead to local denial of service with no add

6.7
CVE-2026-20530

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →