Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 480/1809
7.2
CVE-2026-87024

Tanium addressed a SQL injection vulnerability in Asset.

7.2
CVE-2026-86865

Tanium addressed a SQL injection vulnerability in Asset.

8.7
CVE-2026-86831

Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS Network Policy Agent before v

7.1
CVE-2026-86089

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API

6.5
CVE-2026-82561

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a cl

N/A
CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider em

4.3
CVE-2026-81866

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not en

7.5
CVE-2026-76646

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentia

10.0
CVE-2026-76423

A vulnerability in the REST API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to gain a

7.5
CVE-2026-70469

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests th

6.5
CVE-2026-62949

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on to

8.8
CVE-2026-20361

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

9.1
CVE-2026-20341

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software could allow an authenti

9.9
CVE-2026-20330

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

9.9
CVE-2026-20329

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appl

9.8
CVE-2026-20326

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering t

9.9
CVE-2026-20325

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineer

9.9
CVE-2026-20324

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Sof

9.9
CVE-2026-20322

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineer

9.8
CVE-2026-20242

A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could

9.1
CVE-2026-20237

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE

9.1
CVE-2026-20211

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlyi

9.1
CVE-2026-20194

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE

10.0
CVE-2026-20192

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE

9.1
CVE-2026-20176

A vulnerability in Cisco ISE could allow an authenticated, remote attacker to execute arbitrary commands on the underlyi

10.0
CVE-2026-20130

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE

8.2
CVE-2026-92729

SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to trace-funnel analytics endpoints in the H

3.3
CVE-2026-92473

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src

3.3
CVE-2026-92472

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file

3.5
CVE-2026-92418

A vulnerability was determined in ChangeWeDer crm up to c07bd4c97141521af6475034bc58523beed51bbd. This vulnerability aff

6.5
CVE-2026-92417

A vulnerability was found in Open5GS up to 2.8.0. This affects the function ogs_pfcp_parse_volume_measurement in the lib

9.8
CVE-2026-91106

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91105

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91104

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91103

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91102

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91101

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91100

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91099

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91098

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

9.8
CVE-2026-91097

HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several

3.7
CVE-2026-86071

Junrar is an open source Java RAR archive library. Prior to version 7.6.1, LocalFolderExtractor in src/main/java/com/git

7.5
CVE-2026-86043

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWi

7.5
CVE-2026-86003

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over

7.5
CVE-2026-82399

CoreDNS is a DNS server written in Go. Prior to 1.14.7, the DNS-over-HTTPS, DNS-over-HTTP/3, DNS-over-QUIC, and DNS-over

7.5
CVE-2026-81876

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

7.5
CVE-2026-81875

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to versio

5.3
CVE-2026-81176

Svelte devalue is a JavaScript library that serializes values into strings when JSON.stringify isn't sufficient for the

8.4
CVE-2026-79298

An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker

N/A
CVE-2026-77360

oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards. Prior to 1.14.8, th

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach