# Vulnerabilities published in 2026


- [CVE-2026-0857](https://insights.sbomify.com/CVE-2026-0857/): Weak cryptography in Meona Client (medium 4.4)
- [CVE-2026-0856](https://insights.sbomify.com/CVE-2026-0856/): Privilege escalation in Meona Client (high 7.8)
- [CVE-2026-0855](https://insights.sbomify.com/CVE-2026-0855/): Merit LILIN｜IP Camera - OS Command Injection (high 8.7)
- [CVE-2026-0854](https://insights.sbomify.com/CVE-2026-0854/): Merit LILIN｜NVR - OS Command Injection (high 8.7)
- [CVE-2026-0853](https://insights.sbomify.com/CVE-2026-0853/): A-Plus Video Technologies｜NVR - Sensitive Data Exposure (medium 6.9)
- [CVE-2026-0852](https://insights.sbomify.com/CVE-2026-0852/): code-projects Online Music Site AdminUpdateUser.php sql injection (medium 6.9)
- [CVE-2026-0851](https://insights.sbomify.com/CVE-2026-0851/): code-projects Online Music Site AdminAddUser.php sql injection (medium 6.9)
- [CVE-2026-0850](https://insights.sbomify.com/CVE-2026-0850/): code-projects Intern Membership Management System delete_activity.php sql injection (medium 5.1)
- [CVE-2026-0849](https://insights.sbomify.com/CVE-2026-0849/): crypto: ATAES132A response length allows stack buffer overflow (low 3.8)
- [CVE-2026-0848](https://insights.sbomify.com/CVE-2026-0848/): Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading (critical 10.0)
- [CVE-2026-0847](https://insights.sbomify.com/CVE-2026-0847/): Path Traversal in nltk/nltk (high 8.6)
- [CVE-2026-0846](https://insights.sbomify.com/CVE-2026-0846/): Arbitrary File Read via Absolute Path Input in nltk.util.filestring() (high 8.6)
- [CVE-2026-0845](https://insights.sbomify.com/CVE-2026-0845/): WCFM - WooCommerce Frontend Manager <= 6.7.24 - Authenticated (Shop Manager+) Arbitrary Options Update (high 7.2)
- [CVE-2026-0844](https://insights.sbomify.com/CVE-2026-0844/): Simple User Registration <= 6.7 - Authenticated (Subscriber+) Privilege Escalation via profile_save_field (high 8.8)
- [CVE-2026-0843](https://insights.sbomify.com/CVE-2026-0843/): jiujiujia/victor123/wxw850227 jjjfood/jjjshop_food index sql injection (medium 5.3)
- [CVE-2026-0842](https://insights.sbomify.com/CVE-2026-0842/): Flycatcher Toys smART Sketcher Bluetooth Low Energy missing authentication (medium 5.3)
- [CVE-2026-0841](https://insights.sbomify.com/CVE-2026-0841/): UTT 进取 520W formPictureUrl strcpy buffer overflow (high 8.7)
- [CVE-2026-0840](https://insights.sbomify.com/CVE-2026-0840/): UTT 进取 520W formConfigNoticeConfig strcpy buffer overflow (high 8.7)
- [CVE-2026-0839](https://insights.sbomify.com/CVE-2026-0839/): UTT 进取 520W APSecurity strcpy buffer overflow (high 8.7)
- [CVE-2026-0838](https://insights.sbomify.com/CVE-2026-0838/): UTT 进取 520W ConfigWirelessBase strcpy buffer overflow (high 8.7)
- [CVE-2026-0837](https://insights.sbomify.com/CVE-2026-0837/): UTT 进取 520W formFireWall strcpy buffer overflow (high 8.7)
- [CVE-2026-0836](https://insights.sbomify.com/CVE-2026-0836/): UTT 进取 520W formConfigFastDirectionW strcpy buffer overflow (high 8.7)
- [CVE-2026-0835](https://insights.sbomify.com/CVE-2026-0835/): Cross-site scripting in Sterling B2B Integrator (medium 5.4)
- [CVE-2026-0834](https://insights.sbomify.com/CVE-2026-0834/): Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13 (high 7.2)
- [CVE-2026-0833](https://insights.sbomify.com/CVE-2026-0833/): Team Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link (medium 6.4)
- [CVE-2026-0832](https://insights.sbomify.com/CVE-2026-0832/): Missing authorization in New User Approve (high 7.3)
- [CVE-2026-0831](https://insights.sbomify.com/CVE-2026-0831/): Templately <= 3.4.8 - Unauthenticated Limited Arbitrary JSON File Write (medium 5.3)
- [CVE-2026-0830](https://insights.sbomify.com/CVE-2026-0830/): Command Injection in Kiro GitLab Merge Request Helper (high 8.4)
- [CVE-2026-0829](https://insights.sbomify.com/CVE-2026-0829/): Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending (medium 5.8)
- [CVE-2026-0828](https://insights.sbomify.com/CVE-2026-0828/): Kernel driver vulnerability in Safetica Endpoint Client (high 7.5)
- [CVE-2026-0827](https://insights.sbomify.com/CVE-2026-0827/): Privilege escalation in Diagnostics (medium 6.9)
- [CVE-2026-0826](https://insights.sbomify.com/CVE-2026-0826/): Poly Voice – Possible Remote Control of Certain Poly Devices (critical 9.2)
- [CVE-2026-0825](https://insights.sbomify.com/CVE-2026-0825/): Missing authorization in Database for Contact Form 7, WPforms, Elementor forms (medium 5.3)
- [CVE-2026-0824](https://insights.sbomify.com/CVE-2026-0824/): questdb ui Web Console cross site scripting (medium 5.1)
- [CVE-2026-0822](https://insights.sbomify.com/CVE-2026-0822/): quickjs-ng quickjs quickjs.c js_typed_array_sort heap-based overflow (medium 5.3)
- [CVE-2026-0821](https://insights.sbomify.com/CVE-2026-0821/): quickjs-ng quickjs quickjs.c js_typed_array_constructor heap-based overflow (medium 6.9)
- [CVE-2026-0820](https://insights.sbomify.com/CVE-2026-0820/): Missing authorization in RepairBuddy – Repair Shop CRM & Booking Plugin for WordPress (medium 4.3)
- [CVE-2026-0819](https://insights.sbomify.com/CVE-2026-0819/): Stack buffer overflow in PKCS7 SignedData encoding with custom signed attributes (low 2.2)
- [CVE-2026-0818](https://insights.sbomify.com/CVE-2026-0818/): CSS-based exfiltration of the content from partially encrypted emails when allowing remote content (medium 4.3)
- [CVE-2026-0817](https://insights.sbomify.com/CVE-2026-0817/): CampaignEvents API missing authorization exposes meeting and chat URLs (medium 5.3)
- [CVE-2026-0816](https://insights.sbomify.com/CVE-2026-0816/): All push notification for WP <= 1.5.3 - Authenticated (Administrator+) SQL Injection via 'delete_id' Parameter (medium 4.9)
- [CVE-2026-0815](https://insights.sbomify.com/CVE-2026-0815/): Category Image <= 2.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'tag-image' Parameter (medium 4.4)
- [CVE-2026-0814](https://insights.sbomify.com/CVE-2026-0814/): Advanced CF7 DB <= 2.0.9 - Missing Authorization to Authenticated (Subscriber+) Form Submissions Excel Export (medium 4.3)
- [CVE-2026-0813](https://insights.sbomify.com/CVE-2026-0813/): Short Link <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Administration Settings Page (medium 4.4)
- [CVE-2026-0812](https://insights.sbomify.com/CVE-2026-0812/): LinkedIn SC <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Page (medium 4.4)
- [CVE-2026-0811](https://insights.sbomify.com/CVE-2026-0811/): Advanced CF7 DB <= 2.0.9 - Cross-Site Request Forgery to Form Entry Deletion (medium 5.4)
- [CVE-2026-0810](https://insights.sbomify.com/CVE-2026-0810/): Gix-date: gix-date: undefined behavior due to invalid string generation (high 7.1)
- [CVE-2026-0809](https://insights.sbomify.com/CVE-2026-0809/): Weak KSeF token encoding in Streamsoft Prestiż (medium 6.3)
- [CVE-2026-0808](https://insights.sbomify.com/CVE-2026-0808/): Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter (medium 5.3)
- [CVE-2026-0807](https://insights.sbomify.com/CVE-2026-0807/): Frontis Blocks <= 1.1.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter (high 7.2)
- [CVE-2026-0806](https://insights.sbomify.com/CVE-2026-0806/): WP-ClanWars <= 2.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter (medium 4.9)
- [CVE-2026-0805](https://insights.sbomify.com/CVE-2026-0805/): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller (high 8.2)
- [CVE-2026-0804](https://insights.sbomify.com/CVE-2026-0804/): Path traversal in AXIS OS (medium 6.7)
- [CVE-2026-0803](https://insights.sbomify.com/CVE-2026-0803/): PHPGurukul Online Course Registration System enroll.php sql injection (medium 5.3)
- [CVE-2026-0802](https://insights.sbomify.com/CVE-2026-0802/): Command injection in AXIS OS (medium 6.0)
- [CVE-2026-0800](https://insights.sbomify.com/CVE-2026-0800/): Cross-site scripting in User Submitted Posts – Enable Users to Submit Posts from the Front End (high 7.2)
- [CVE-2026-0799](https://insights.sbomify.com/CVE-2026-0799/): OOBR and OOBW in libpcap before 1.10.7 (high 8.7)
- [CVE-2026-0798](https://insights.sbomify.com/CVE-2026-0798/): Gitea Release Email Notifications Leak Private Repository Release Details After Access Revocation (low 3.5)
- [CVE-2026-0797](https://insights.sbomify.com/CVE-2026-0797/): GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-0796](https://insights.sbomify.com/CVE-2026-0796/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0795](https://insights.sbomify.com/CVE-2026-0795/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0794](https://insights.sbomify.com/CVE-2026-0794/): ALGO 8180 IP Audio Alerter SIP Use-After-Free Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0793](https://insights.sbomify.com/CVE-2026-0793/): ALGO 8180 IP Audio Alerter InformaCast Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0792](https://insights.sbomify.com/CVE-2026-0792/): ALGO 8180 IP Audio Alerter SIP INVITE Alert-Info Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0791](https://insights.sbomify.com/CVE-2026-0791/): ALGO 8180 IP Audio Alerter SIP INVITE Replaces Stack-based Buffer Overflow Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0790](https://insights.sbomify.com/CVE-2026-0790/): ALGO 8180 IP Audio Alerter Web UI Direct Request Information Disclosure Vulnerability (medium 5.3)
- [CVE-2026-0789](https://insights.sbomify.com/CVE-2026-0789/): Information disclosure in 8180 IP Audio Alerter (medium 5.3)
- [CVE-2026-0788](https://insights.sbomify.com/CVE-2026-0788/): ALGO 8180 IP Audio Alerter Web UI Persistent Cross-Site Scripting Vulnerability (medium 5.3)
- [CVE-2026-0787](https://insights.sbomify.com/CVE-2026-0787/): ALGO 8180 IP Audio Alerter SAC Command Injection Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0786](https://insights.sbomify.com/CVE-2026-0786/): ALGO 8180 IP Audio Alerter SCI Command Injection Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-0785](https://insights.sbomify.com/CVE-2026-0785/): ALGO 8180 IP Audio Alerter API Command Injection Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-0784](https://insights.sbomify.com/CVE-2026-0784/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0783](https://insights.sbomify.com/CVE-2026-0783/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0782](https://insights.sbomify.com/CVE-2026-0782/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0781](https://insights.sbomify.com/CVE-2026-0781/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0780](https://insights.sbomify.com/CVE-2026-0780/): ALGO 8180 IP Audio Alerter Web UI Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0779](https://insights.sbomify.com/CVE-2026-0779/): ALGO 8180 IP Audio Alerter Ping Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-0778](https://insights.sbomify.com/CVE-2026-0778/): Enel X JuiceBox 40 Telnet Service Missing Authentication Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-0777](https://insights.sbomify.com/CVE-2026-0777/): Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-0776](https://insights.sbomify.com/CVE-2026-0776/): Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (high 7.3)
- [CVE-2026-0775](https://insights.sbomify.com/CVE-2026-0775/): npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability (high 7.0)
- [CVE-2026-0774](https://insights.sbomify.com/CVE-2026-0774/): WatchYourLAN Configuration Page Argument Injection Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-0773](https://insights.sbomify.com/CVE-2026-0773/): Upsonic Cloudpickle Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0772](https://insights.sbomify.com/CVE-2026-0772/): Langflow Disk Cache Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-0771](https://insights.sbomify.com/CVE-2026-0771/): Langflow PythonFunction Code Injection Remote Code Execution Vulnerability (high 7.1)
- [CVE-2026-0770](https://insights.sbomify.com/CVE-2026-0770/): Langflow Inclusion of Functionality from Untrusted Control Sphere (critical 9.8, exploited in the wild)
- [CVE-2026-0769](https://insights.sbomify.com/CVE-2026-0769/): Langflow eval_custom_component_code Eval Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0768](https://insights.sbomify.com/CVE-2026-0768/): Langflow code Code Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0764](https://insights.sbomify.com/CVE-2026-0764/): GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0763](https://insights.sbomify.com/CVE-2026-0763/): GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0762](https://insights.sbomify.com/CVE-2026-0762/): GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-0761](https://insights.sbomify.com/CVE-2026-0761/): Foundation Agents MetaGPT actionoutput_str_to_mapping Code Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0760](https://insights.sbomify.com/CVE-2026-0760/): Foundation Agents MetaGPT deserialize_message Deserialization of Untrusted Data Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0759](https://insights.sbomify.com/CVE-2026-0759/): Katana Network Development Starter Kit executeCommand Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0758](https://insights.sbomify.com/CVE-2026-0758/): mcp-server-siri-shortcuts shortcutName Command Injection Privilege Escalation Vulnerability (high 7.8)
- [CVE-2026-0757](https://insights.sbomify.com/CVE-2026-0757/): MCP Manager for Claude Desktop execute-command Command Injection Sandbox Escape Vulnerability (high 8.8)
- [CVE-2026-0756](https://insights.sbomify.com/CVE-2026-0756/): github-kanban-mcp-server execAsync Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0755](https://insights.sbomify.com/CVE-2026-0755/): gemini-mcp-tool execAsync Command Injection Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-0754](https://insights.sbomify.com/CVE-2026-0754/): SIP Service Providers – Possible Impersonation of Poly Voice Device (high 8.2)
- [CVE-2026-0753](https://insights.sbomify.com/CVE-2026-0753/): Super Simple Contact Form <= 1.6.2 - Reflected Cross-Site Scripting via 'sscf_name' Parameter (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/1007/