# Vulnerabilities published in 2026


- [CVE-2026-0972](https://insights.sbomify.com/CVE-2026-0972/): HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT (medium 5.4)
- [CVE-2026-0971](https://insights.sbomify.com/CVE-2026-0971/): GoAnywhere MFT SAML Sessions do not redirect to logout URL on session timeout (medium 4.3)
- [CVE-2026-0969](https://insights.sbomify.com/CVE-2026-0969/): Arbitrary code execution in React server-side rendering of untrusted MDX content (high 8.8)
- [CVE-2026-0968](https://insights.sbomify.com/CVE-2026-0968/): Libssh: libssh: denial of service due to malformed sftp message (low 3.1)
- [CVE-2026-0967](https://insights.sbomify.com/CVE-2026-0967/): Libssh: libssh: denial of service via inefficient regular expression processing (low 2.2)
- [CVE-2026-0966](https://insights.sbomify.com/CVE-2026-0966/): Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() (medium 6.5)
- [CVE-2026-0965](https://insights.sbomify.com/CVE-2026-0965/): Libssh: libssh: denial of service via improper configuration file handling (low 3.3)
- [CVE-2026-0964](https://insights.sbomify.com/CVE-2026-0964/): Libssh: improper sanitation of paths received from scp servers (medium 5.0)
- [CVE-2026-0963](https://insights.sbomify.com/CVE-2026-0963/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller (critical 9.9)
- [CVE-2026-0962](https://insights.sbomify.com/CVE-2026-0962/): Out-of-bounds Write in Wireshark (medium 5.3)
- [CVE-2026-0961](https://insights.sbomify.com/CVE-2026-0961/): Out-of-bounds Write in Wireshark (medium 5.5)
- [CVE-2026-0960](https://insights.sbomify.com/CVE-2026-0960/): Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark (medium 4.7)
- [CVE-2026-0959](https://insights.sbomify.com/CVE-2026-0959/): Out-of-bounds Write in Wireshark (medium 5.3)
- [CVE-2026-0958](https://insights.sbomify.com/CVE-2026-0958/): Interpretation Conflict in GitLab (high 7.5)
- [CVE-2026-0957](https://insights.sbomify.com/CVE-2026-0957/): Out-Of-Bounds Write in Digilent DASYLab (high 8.5)
- [CVE-2026-0956](https://insights.sbomify.com/CVE-2026-0956/): Out-Of-Bounds Read in Digilent DASYLab (high 8.5)
- [CVE-2026-0955](https://insights.sbomify.com/CVE-2026-0955/): Out-Of-Bounds Read When Opening a Corrupt File in Digilent DASYLab (high 8.5)
- [CVE-2026-0954](https://insights.sbomify.com/CVE-2026-0954/): Out-Of-Bounds Write When Opening a Corrupt DSB File in Digilent DASYLab (high 8.5)
- [CVE-2026-0953](https://insights.sbomify.com/CVE-2026-0953/): Tutor LMS Pro <= 3.9.5 - Authentication Bypass via Social Login (critical 9.8)
- [CVE-2026-0950](https://insights.sbomify.com/CVE-2026-0950/): Spectra Gutenberg Blocks <= 2.19.17 - Unauthenticated Information Disclosure in Sensitive Data (medium 5.3)
- [CVE-2026-0949](https://insights.sbomify.com/CVE-2026-0949/): Cross-site scripting in Postgres Enterprise Manager (PEM) (medium 6.5)
- [CVE-2026-0948](https://insights.sbomify.com/CVE-2026-0948/): Microsoft Entra ID SSO Login - Critical - Access bypass - SA-CONTRIB-2026-005 (medium 6.5)
- [CVE-2026-0947](https://insights.sbomify.com/CVE-2026-0947/): AT Internet Piano Analytics - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-004 (medium 4.8)
- [CVE-2026-0946](https://insights.sbomify.com/CVE-2026-0946/): AT Internet SmartTag - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-003 (medium 6.1)
- [CVE-2026-0945](https://insights.sbomify.com/CVE-2026-0945/): Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002 (medium 5.4)
- [CVE-2026-0944](https://insights.sbomify.com/CVE-2026-0944/): Group invite - Moderately critical - Access bypass - SA-CONTRIB-2026-001 (medium 5.3)
- [CVE-2026-0943](https://insights.sbomify.com/CVE-2026-0943/): Null dereference in HarfBuzz::Shaper (high 7.5)
- [CVE-2026-0942](https://insights.sbomify.com/CVE-2026-0942/): Missing authorization in Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit (medium 5.3)
- [CVE-2026-0940](https://insights.sbomify.com/CVE-2026-0940/): Other in ThinkPad P14s Gen 5 BIOS (high 8.4)
- [CVE-2026-0939](https://insights.sbomify.com/CVE-2026-0939/): Rede Itaú for WooCommerce — Payment PIX, Credit Card and Debit <= 5.1.2 - Unauthenticated Order Status Manipulation (medium 5.3)
- [CVE-2026-0936](https://insights.sbomify.com/CVE-2026-0936/): Insertion of Sensitive Information into Logfile (medium 5.1)
- [CVE-2026-0934](https://insights.sbomify.com/CVE-2026-0934/): Incorrect Authorization in GitLab (low 3.8)
- [CVE-2026-0933](https://insights.sbomify.com/CVE-2026-0933/): OS Command Injection in `wrangler pages deploy` (high 7.7)
- [CVE-2026-0932](https://insights.sbomify.com/CVE-2026-0932/): Server-side request forgery in M-Files Server (medium 6.9)
- [CVE-2026-0931](https://insights.sbomify.com/CVE-2026-0931/): Denial-of-service vulnerability in M-Files Server (medium 6.9)
- [CVE-2026-0930](https://insights.sbomify.com/CVE-2026-0930/): Potential wolfSSHd Buffer out-of-bounds Read on Windows Handling Terminal Resize (low 2.3)
- [CVE-2026-0929](https://insights.sbomify.com/CVE-2026-0929/): RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation (medium 4.3)
- [CVE-2026-0927](https://insights.sbomify.com/CVE-2026-0927/): File upload in KiviCare – Clinic & Patient Management System (EHR) (medium 5.3)
- [CVE-2026-0926](https://insights.sbomify.com/CVE-2026-0926/): Prodigy Commerce <= 3.3.0 - Unauthenticated Local File Inclusion via parameters[template_name] (critical 9.8)
- [CVE-2026-0925](https://insights.sbomify.com/CVE-2026-0925/): Tanium addressed an improper input validation vulnerability in Discover. (low 2.7)
- [CVE-2026-0924](https://insights.sbomify.com/CVE-2026-0924/): BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack (high 7.3)
- [CVE-2026-0920](https://insights.sbomify.com/CVE-2026-0920/): Privilege escalation in LA-Studio Element Kit for Elementor (critical 9.8)
- [CVE-2026-0919](https://insights.sbomify.com/CVE-2026-0919/): Unauthenticated Denial of Service via Oversized URL in HTTP Parser on TP-Link Tapo C210, C220 & C520WS (high 7.1)
- [CVE-2026-0918](https://insights.sbomify.com/CVE-2026-0918/): Null Pointer Dereference in Tapo SmartCam HTTP Service on TP-Link Tapo C220 & C520WS (high 7.1)
- [CVE-2026-0916](https://insights.sbomify.com/CVE-2026-0916/): Cross-site scripting in Related Posts by Taxonomy (medium 6.4)
- [CVE-2026-0915](https://insights.sbomify.com/CVE-2026-0915/): getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler (high 7.5)
- [CVE-2026-0914](https://insights.sbomify.com/CVE-2026-0914/): Cross-site scripting in WP DSGVO Tools (GDPR) (medium 6.4)
- [CVE-2026-0913](https://insights.sbomify.com/CVE-2026-0913/): User Submitted Posts <= 20260110 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'usp_access' Shortcode (medium 6.4)
- [CVE-2026-0912](https://insights.sbomify.com/CVE-2026-0912/): Toret Manager <= 1.2.7 - Authenticated (Subscriber+) Arbitrary Options Update via AJAX actions (high 8.8)
- [CVE-2026-0911](https://insights.sbomify.com/CVE-2026-0911/): Hustle <= 7.8.9.2 - Authenticated (Subscriber+) Arbitrary File Upoload via Module Import (high 7.5)
- [CVE-2026-0910](https://insights.sbomify.com/CVE-2026-0910/): wpForo Forum <= 2.4.13 - Authenticated (Subscriber+) PHP Object Injection (high 8.8)
- [CVE-2026-0909](https://insights.sbomify.com/CVE-2026-0909/): Missing authorization in WP ULike – Like & Dislike Buttons for Engagement and Feedback (medium 5.3)
- [CVE-2026-0908](https://insights.sbomify.com/CVE-2026-0908/): Use after free in Chrome (high 8.8)
- [CVE-2026-0907](https://insights.sbomify.com/CVE-2026-0907/): Other in Chrome (critical 9.8)
- [CVE-2026-0906](https://insights.sbomify.com/CVE-2026-0906/): Other in Chrome (critical 9.8)
- [CVE-2026-0905](https://insights.sbomify.com/CVE-2026-0905/): Information disclosure in Chrome (critical 9.8)
- [CVE-2026-0904](https://insights.sbomify.com/CVE-2026-0904/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-0903](https://insights.sbomify.com/CVE-2026-0903/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-0902](https://insights.sbomify.com/CVE-2026-0902/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-0901](https://insights.sbomify.com/CVE-2026-0901/): Other in Chrome (medium 5.4)
- [CVE-2026-0900](https://insights.sbomify.com/CVE-2026-0900/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-0899](https://insights.sbomify.com/CVE-2026-0899/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-0898](https://insights.sbomify.com/CVE-2026-0898/): Other in Pega Robot Studio (critical 9.0)
- [CVE-2026-0897](https://insights.sbomify.com/CVE-2026-0897/): Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata (high 7.1)
- [CVE-2026-0895](https://insights.sbomify.com/CVE-2026-0895/): Insecure Deserialization in extension "Mailqueue" (mailqueue) (medium 5.2)
- [CVE-2026-0894](https://insights.sbomify.com/CVE-2026-0894/): Cross-site scripting in Content Blocks (Custom Post Widget) (medium 6.4)
- [CVE-2026-0893](https://insights.sbomify.com/CVE-2026-0893/): Uncleared Password Keystrokes Vulnerability (medium 5.8)
- [CVE-2026-0892](https://insights.sbomify.com/CVE-2026-0892/): Memory safety bugs fixed in Firefox 147 and Thunderbird 147 (critical 9.8)
- [CVE-2026-0891](https://insights.sbomify.com/CVE-2026-0891/): Memory safety bugs fixed in Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147 and Thunderbird 147 (high 8.1)
- [CVE-2026-0890](https://insights.sbomify.com/CVE-2026-0890/): Spoofing issue in the DOM: Copy & Paste and Drag & Drop component (medium 5.4)
- [CVE-2026-0889](https://insights.sbomify.com/CVE-2026-0889/): Denial-of-service in the DOM: Service Workers component (high 7.5)
- [CVE-2026-0888](https://insights.sbomify.com/CVE-2026-0888/): Information disclosure in the XML component (medium 5.3)
- [CVE-2026-0887](https://insights.sbomify.com/CVE-2026-0887/): Clickjacking issue, information disclosure in the PDF Viewer component (medium 4.3)
- [CVE-2026-0886](https://insights.sbomify.com/CVE-2026-0886/): Incorrect boundary conditions in the Graphics component (medium 5.3)
- [CVE-2026-0885](https://insights.sbomify.com/CVE-2026-0885/): Use-after-free in the JavaScript: GC component (medium 6.5)
- [CVE-2026-0884](https://insights.sbomify.com/CVE-2026-0884/): Use-after-free in the JavaScript Engine component (critical 9.8)
- [CVE-2026-0883](https://insights.sbomify.com/CVE-2026-0883/): Information disclosure in the Networking component (medium 5.3)
- [CVE-2026-0882](https://insights.sbomify.com/CVE-2026-0882/): Use-after-free in the IPC component (high 8.8)
- [CVE-2026-0881](https://insights.sbomify.com/CVE-2026-0881/): Sandbox escape in the Messaging System component (critical 10.0)
- [CVE-2026-0880](https://insights.sbomify.com/CVE-2026-0880/): Sandbox escape due to integer overflow in the Graphics component (high 8.8)
- [CVE-2026-0879](https://insights.sbomify.com/CVE-2026-0879/): Sandbox escape due to incorrect boundary conditions in the Graphics component (critical 9.8)
- [CVE-2026-0878](https://insights.sbomify.com/CVE-2026-0878/): Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.0)
- [CVE-2026-0877](https://insights.sbomify.com/CVE-2026-0877/): Mitigation bypass in the DOM: Security component (high 8.1)
- [CVE-2026-0875](https://insights.sbomify.com/CVE-2026-0875/): MODEL File Parsing Out-of-Bounds Write (high 7.8)
- [CVE-2026-0874](https://insights.sbomify.com/CVE-2026-0874/): CATPART File Parsing Out-of-Bounds Write (high 7.8)
- [CVE-2026-0873](https://insights.sbomify.com/CVE-2026-0873/): Privilege Elevation in Ercom Cryptobox administration console (medium 4.8)
- [CVE-2026-0872](https://insights.sbomify.com/CVE-2026-0872/): Improper Certificate Validation vulnerability in Thales SafeNet Agent for Windows Logon (low 2.5)
- [CVE-2026-0871](https://insights.sbomify.com/CVE-2026-0871/): Org.keycloak/keycloak-services: keycloak: unauthorized modification of unmanaged user attributes by administrators (medium 4.9)
- [CVE-2026-0870](https://insights.sbomify.com/CVE-2026-0870/): GIGABYTE｜MacroHub - Local Privilege Escalation (high 8.5)
- [CVE-2026-0869](https://insights.sbomify.com/CVE-2026-0869/): Application User custom defined accounts are not properly password protected in Brocade ASCG 3.4.0 (high 8.3)
- [CVE-2026-0868](https://insights.sbomify.com/CVE-2026-0868/): EMC Scheduling Manager <= 4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via calendly Shortcode (medium 6.4)
- [CVE-2026-0867](https://insights.sbomify.com/CVE-2026-0867/): Essential Widgets <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes (medium 6.4)
- [CVE-2026-0865](https://insights.sbomify.com/CVE-2026-0865/): wsgiref.headers.Headers allows header newline injection (medium 5.9)
- [CVE-2026-0864](https://insights.sbomify.com/CVE-2026-0864/): Configuration Injection via Carriage Return (\r) in write() method (medium 4.1)
- [CVE-2026-0863](https://insights.sbomify.com/CVE-2026-0863/): Sandbox escape in n8n Python task runner allows for arbitrary code execution on the underlying host. (high 8.5)
- [CVE-2026-0862](https://insights.sbomify.com/CVE-2026-0862/): Save as PDF Plugin by PDFCrowd <= 4.5.5 - Reflected Cross-Site Scripting via options (medium 6.1)
- [CVE-2026-0861](https://insights.sbomify.com/CVE-2026-0861/): Integer overflow in memalign leads to heap corruption (high 8.4)
- [CVE-2026-0860](https://insights.sbomify.com/CVE-2026-0860/): Mali GPU Kernel Driver allows access to sensitive kernel information (high 7.5)
- [CVE-2026-0859](https://insights.sbomify.com/CVE-2026-0859/): TYPO3 CMS Allows Insecure Deserialization via Mailer File Spool (medium 5.2)
- [CVE-2026-0858](https://insights.sbomify.com/CVE-2026-0858/): PlantUML is vulnerable to Stored XSS due to insufficient sanitization of interactive attributes in GraphViz diagrams (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/1006/