Menu

Star on GitHub · 3.5k

2026

90,429 vulnerabilities published in 2026.

Results

90,429· Page 528/1809
5.3
CVE-2026-43696

An authorization issue was addressed with improved entitlement checks. This issue is fixed in macOS Golden Gate 27. An a

5.5
CVE-2026-43695

An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS

8.8
CVE-2026-43692

A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Golden Gate 27, macOS Se

7.8
CVE-2026-43691

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia

4.7
CVE-2026-43690

A race condition was addressed with improved locking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, m

7.8
CVE-2026-43689

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27

7.8
CVE-2026-43688

A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27, mac

6.5
CVE-2026-43687

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadO

8.8
CVE-2026-43686

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, i

7.8
CVE-2026-43684

A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 26.7 and iPadOS 26.7, m

7.1
CVE-2026-43683

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Se

6.5
CVE-2026-43677

An out-of-bounds write issue was addressed by removing the vulnerable code. This issue is fixed in macOS Golden Gate 27,

4.6
CVE-2026-43674

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27. An at

5.5
CVE-2026-43664

This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad

5.5
CVE-2026-28968

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

4.3
CVE-2026-28966

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.

7.5
CVE-2026-28960

A denial-of-service issue was addressed with improved validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10.

7.5
CVE-2026-28938

A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 26.6 and iPadOS 26.6. An app may be a

5.5
CVE-2026-28937

This issue was addressed through improved state management. This issue is fixed in macOS Golden Gate 27. An app may be a

7.5
CVE-2026-28935

The issue was addressed with improved memory handling. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoi

6.5
CVE-2026-28934

A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoi

5.5
CVE-2026-28933

A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.7.8, macOS

5.5
CVE-2026-28899

A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS

6.1
CVE-2026-28836

A correctness issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.8. An attacker with phy

7.1
CVE-2026-20683

An authentication issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS

7.5
CVE-2026-19290

IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_1, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 could allow a remote attacker

5.2
CVE-2026-19280

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An auth

5.4
CVE-2026-19273

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gatewa

3.3
CVE-2026-19086

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a denial of service as a result of a buffer overflow in a PASE process. An auth

6.0
CVE-2026-18069

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain ownership of arbitrary file system objects due to a

6.3
CVE-2026-14277

IBM i Access Family 1.1.2.0 through 1.1.9.15 could allow an authenticated user to execute arbitrary commands with normal

6.3
CVE-2026-14276

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute

6.3
CVE-2026-14275

IBM i Access Family 1.1.2.0 through 1.1.9.15 IBM i Access Client Solutions could allow an authenticated user to execute

8.8
CVE-2026-13293

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

7.1
CVE-2026-13287

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

7.1
CVE-2026-13285

IBM MQ is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could

4.7
CVE-2026-13277

IBM Verify Identity Access could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By 

6.1
CVE-2026-13276

IBM Verify Identity Access 11.0.0 through 11.0.3 Interim Fix 001 and IBM Security Verify Access 10.0.0 through 10.0.9.2

7.1
CVE-2026-13275

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1

5.4
CVE-2026-13272

IBM Verify Identity Access is missing origin validation which could allow a remote attacker to perform operations as the

7.5
CVE-2026-13260

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of

7.1
CVE-2026-13107

IBM Business Automation Workflow containers and traditional may use programming model artifacts that are vulnerable to X

6.5
CVE-2026-12767

IBM Langflow OSS 1.0.0 through 1.11.5 is vulnerable to server-side request forgery (SSRF). This may allow an unauthentic

5.4
CVE-2026-12766

IBM Langflow OSS 1.0.0 through 1.11.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticat

6.5
CVE-2026-12765

IBM Langflow OSS 1.0.0 through 1.10.2 is vulnerable to server-side request forgery (SSRF). This may allow an unauthentic

4.2
CVE-2026-12763

IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to access another user's MCP server context

4.3
CVE-2026-90816

A vulnerability was found in FFmpeg 8.0.x. This affects the function parse_playlist of the file libavformat/hlsproto.c o

6.3
CVE-2026-90815

A vulnerability has been found in FFmpeg up to 4.4.6/5.1.8/6.1.4/7.1.3/8.0.1. Affected by this issue is the function set

6.3
CVE-2026-90814

A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function git

4.3
CVE-2026-90813

A vulnerability was detected in cosmicstack-labs mercury-agent up to 1.1.13. Affected is the function checkShellCommand

Test your stack for 2026issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

CyberStrike v2 is here — more intelligence, greater reach