Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 523/1809
3.3
CVE-2026-90827

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/b

2.8
CVE-2026-90826

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegrap

3.3
CVE-2026-90825

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file

5.5
CVE-2026-76081

ZITADEL is an open source identity management platform. Prior to version 4.16.0, a bug in how ZITADEL updates permission

5.9
CVE-2026-73449

On affected platforms running Arista EOS with both 802.1X port authentication and the RADIUS proxy feature configured wi

5.4
CVE-2026-18117

Concrete CMS 9.0.0 through 9.5.3 is vulnerable to stored XSS via the custom page alias name (customAliasName) because th

6.8
CVE-2026-13265

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

9.6
CVE-2026-12944

IBM Langflow OSS 1.0.0 through 1.10.0 can allow attackers to execute arbitrary Python code with root privileges (UID=0)

6.5
CVE-2026-12759

IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled

5.4
CVE-2026-12758

IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoi

7.1
CVE-2026-12756

IBM Business Automation Workflow containers and traditional is vulnerable to an XML external entity injection (XXE) atta

N/A
CVE-2026-90896

Missing Authentication for Critical Function (CWE-306) in the checkout session lookup handler (src/app/api/stripe/checko

3.3
CVE-2026-90824

A vulnerability has been found in GPAC 26.07.0. Affected is the function gf_sg_dom_event_bubble of the file src/scenegra

4.3
CVE-2026-90820

A security vulnerability has been detected in a2aproject a2a-java 1.2.0. The impacted element is the function Authorizat

7.3
CVE-2026-90819

A weakness has been identified in a2aproject a2a-java 1.2.0. The affected element is the function BasePushNotificationSe

4.3
CVE-2026-90818

A security flaw has been discovered in netease-youdao LobsterAI 2026.6.15/2026.8.28/2026.9.3/2026.9.4. Impacted is the f

5.5
CVE-2026-86924

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7,

7.8
CVE-2026-86917

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27, macOS Sequo

5.5
CVE-2026-86911

This issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. A malicious app ma

5.5
CVE-2026-86910

A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS Sequ

4.4
CVE-2026-86909

A logic issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a

5.5
CVE-2026-86905

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and iPadOS 27, macOS Golden Gate

7.5
CVE-2026-86904

A privacy issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 an

5.5
CVE-2026-86903

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, macOS G

5.5
CVE-2026-86902

A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in m

7.1
CVE-2026-86901

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27. M

6.5
CVE-2026-86900

An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27. M

5.4
CVE-2026-86898

A logic issue was addressed with improved state management. This issue is fixed in Safari 27, iOS 27 and iPadOS 27, macO

5.5
CVE-2026-86897

This issue was addressed with additional entitlement checks. This issue is fixed in Safari 27, iOS 26.7 and iPadOS 26.7,

7.5
CVE-2026-86895

An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 2

7.5
CVE-2026-86894

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An app may be able to bre

3.3
CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, vi

5.5
CVE-2026-86892

This issue was addressed with additional entitlement checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and

3.5
CVE-2026-86891

An authorization issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS

4.6
CVE-2026-86890

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27.

4.8
CVE-2026-86889

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in macOS Golden G

3.3
CVE-2026-86888

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golde

3.3
CVE-2026-86887

A privacy issue was addressed by removing sensitive data. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iP

5.5
CVE-2026-86886

A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO

6.5
CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An

5.5
CVE-2026-86884

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, macOS Golde

5.5
CVE-2026-86883

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 27 and iPadOS 27, visionOS 27.

6.5
CVE-2026-86882

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

9.1
CVE-2026-86881

A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and i

6.5
CVE-2026-86879

A denial-of-service issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. A r

5.5
CVE-2026-86878

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27. An app may

5.2
CVE-2026-86876

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

6.5
CVE-2026-86870

A heap buffer overflow was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS

6.5
CVE-2026-86869

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

5.5
CVE-2026-84636

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS 2

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach