# Vulnerabilities published in 2026 - [CVE-2026-97810](https://insights.sbomify.com/CVE-2026-97810/): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-9781](https://insights.sbomify.com/CVE-2026-9781/): Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97809](https://insights.sbomify.com/CVE-2026-97809/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97808](https://insights.sbomify.com/CVE-2026-97808/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-97807](https://insights.sbomify.com/CVE-2026-97807/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97806](https://insights.sbomify.com/CVE-2026-97806/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97805](https://insights.sbomify.com/CVE-2026-97805/): Windows Partition Management Driver Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-97804](https://insights.sbomify.com/CVE-2026-97804/): HID Class Driver Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97803](https://insights.sbomify.com/CVE-2026-97803/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97801](https://insights.sbomify.com/CVE-2026-97801/): .NET Framework Tampering Vulnerability (high 7.5) - [CVE-2026-97800](https://insights.sbomify.com/CVE-2026-97800/): Windows Mobile Broadband Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-9780](https://insights.sbomify.com/CVE-2026-9780/): Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability (high 8.8) - [CVE-2026-97799](https://insights.sbomify.com/CVE-2026-97799/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97798](https://insights.sbomify.com/CVE-2026-97798/): Windows Error Reporting Service Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97794](https://insights.sbomify.com/CVE-2026-97794/): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97793](https://insights.sbomify.com/CVE-2026-97793/): Windows Setup and Deployment Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-97792](https://insights.sbomify.com/CVE-2026-97792/): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (high 7.8) - [CVE-2026-97791](https://insights.sbomify.com/CVE-2026-97791/): Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests (high 7.5) - [CVE-2026-97790](https://insights.sbomify.com/CVE-2026-97790/): Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability (medium 5.5) - [CVE-2026-9779](https://insights.sbomify.com/CVE-2026-9779/): ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability (high 7.2) - [CVE-2026-97789](https://insights.sbomify.com/CVE-2026-97789/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5) - [CVE-2026-97788](https://insights.sbomify.com/CVE-2026-97788/): Active Directory Federation Services (AD FS) Information Disclosure Vulnerability (high 7.5) - [CVE-2026-97787](https://insights.sbomify.com/CVE-2026-97787/): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-97785](https://insights.sbomify.com/CVE-2026-97785/): AAD App Proxy Elevation of Privilege Vulnerability (critical 10.0) - [CVE-2026-97783](https://insights.sbomify.com/CVE-2026-97783/): Microsoft Office SharePoint Spoofing Vulnerability (high 8.1) - [CVE-2026-97782](https://insights.sbomify.com/CVE-2026-97782/): Microsoft Office SharePoint Tampering Vulnerability (medium 6.8) - [CVE-2026-97781](https://insights.sbomify.com/CVE-2026-97781/): Microsoft Office OneNote Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97780](https://insights.sbomify.com/CVE-2026-97780/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-9778](https://insights.sbomify.com/CVE-2026-9778/): ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability (high 7.2) - [CVE-2026-97779](https://insights.sbomify.com/CVE-2026-97779/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-97778](https://insights.sbomify.com/CVE-2026-97778/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97777](https://insights.sbomify.com/CVE-2026-97777/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97776](https://insights.sbomify.com/CVE-2026-97776/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97775](https://insights.sbomify.com/CVE-2026-97775/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97774](https://insights.sbomify.com/CVE-2026-97774/): Microsoft Office Click-To-Run Elevation of Privilege Vulnerability (high 7.0) - [CVE-2026-97773](https://insights.sbomify.com/CVE-2026-97773/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97772](https://insights.sbomify.com/CVE-2026-97772/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97771](https://insights.sbomify.com/CVE-2026-97771/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97770](https://insights.sbomify.com/CVE-2026-97770/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-9777](https://insights.sbomify.com/CVE-2026-9777/): ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability (high 7.2) - [CVE-2026-97769](https://insights.sbomify.com/CVE-2026-97769/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97768](https://insights.sbomify.com/CVE-2026-97768/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97767](https://insights.sbomify.com/CVE-2026-97767/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97766](https://insights.sbomify.com/CVE-2026-97766/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97765](https://insights.sbomify.com/CVE-2026-97765/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97764](https://insights.sbomify.com/CVE-2026-97764/): Security feature bypass in django-allauth (low 3.7) - [CVE-2026-97763](https://insights.sbomify.com/CVE-2026-97763/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97762](https://insights.sbomify.com/CVE-2026-97762/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97761](https://insights.sbomify.com/CVE-2026-97761/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97760](https://insights.sbomify.com/CVE-2026-97760/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-9776](https://insights.sbomify.com/CVE-2026-9776/): ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability (high 7.5) - [CVE-2026-97759](https://insights.sbomify.com/CVE-2026-97759/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97758](https://insights.sbomify.com/CVE-2026-97758/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97757](https://insights.sbomify.com/CVE-2026-97757/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97756](https://insights.sbomify.com/CVE-2026-97756/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97755](https://insights.sbomify.com/CVE-2026-97755/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97754](https://insights.sbomify.com/CVE-2026-97754/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97753](https://insights.sbomify.com/CVE-2026-97753/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97752](https://insights.sbomify.com/CVE-2026-97752/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97751](https://insights.sbomify.com/CVE-2026-97751/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97750](https://insights.sbomify.com/CVE-2026-97750/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-9775](https://insights.sbomify.com/CVE-2026-9775/): ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability (medium 5.5) - [CVE-2026-97749](https://insights.sbomify.com/CVE-2026-97749/): Microsoft Office Outlook Remote Code Execution Vulnerability (critical 9.8) - [CVE-2026-97748](https://insights.sbomify.com/CVE-2026-97748/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97747](https://insights.sbomify.com/CVE-2026-97747/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97746](https://insights.sbomify.com/CVE-2026-97746/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97745](https://insights.sbomify.com/CVE-2026-97745/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97744](https://insights.sbomify.com/CVE-2026-97744/): Microsoft Office PowerPoint Information Disclosure Vulnerability (medium 5.5) - [CVE-2026-97743](https://insights.sbomify.com/CVE-2026-97743/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-97742](https://insights.sbomify.com/CVE-2026-97742/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97741](https://insights.sbomify.com/CVE-2026-97741/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97740](https://insights.sbomify.com/CVE-2026-97740/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-9774](https://insights.sbomify.com/CVE-2026-9774/): ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability (medium 5.5) - [CVE-2026-97739](https://insights.sbomify.com/CVE-2026-97739/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97738](https://insights.sbomify.com/CVE-2026-97738/): Microsoft Office Excel Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97737](https://insights.sbomify.com/CVE-2026-97737/): Business logic in Wakapi (high 7.4) - [CVE-2026-97736](https://insights.sbomify.com/CVE-2026-97736/): Auth bypass in tinyauth (medium 5.4) - [CVE-2026-97735](https://insights.sbomify.com/CVE-2026-97735/): Cross-site scripting in ITFlow (high 8.0) - [CVE-2026-97732](https://insights.sbomify.com/CVE-2026-97732/): Security feature bypass in Ironshield (medium 5.1) - [CVE-2026-97731](https://insights.sbomify.com/CVE-2026-97731/): Security feature bypass in MinIO (high 7.1) - [CVE-2026-97730](https://insights.sbomify.com/CVE-2026-97730/): Path traversal in pfSense CE (high 8.5) - [CVE-2026-9773](https://insights.sbomify.com/CVE-2026-9773/): Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97724](https://insights.sbomify.com/CVE-2026-97724/): Denial of service in React Native Reanimated (medium 5.3) - [CVE-2026-97723](https://insights.sbomify.com/CVE-2026-97723/): Cross-site scripting in ka9q ubersdr (medium 5.4) - [CVE-2026-97721](https://insights.sbomify.com/CVE-2026-97721/): Sanluan PublicCMS exportExcel/exportData SysUserAdminController.java CmsContentAdminController authorization (medium 5.1) - [CVE-2026-97720](https://insights.sbomify.com/CVE-2026-97720/): Apache Impala: Impala Executor Webserver Auth Bypass (critical 9.1) - [CVE-2026-9772](https://insights.sbomify.com/CVE-2026-9772/): Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-97717](https://insights.sbomify.com/CVE-2026-97717/): Denial of Service in Absolute Secure Access (medium 6.0) - [CVE-2026-97716](https://insights.sbomify.com/CVE-2026-97716/): Denial of Service in Absolute Secure Access (high 8.7) - [CVE-2026-97715](https://insights.sbomify.com/CVE-2026-97715/): Denial of Service in Absolute Secure Access (high 7.1) - [CVE-2026-97714](https://insights.sbomify.com/CVE-2026-97714/): Denial of service vulnerability in Secure Access (high 8.2) - [CVE-2026-97712](https://insights.sbomify.com/CVE-2026-97712/): Nexus Repository 3 - Privilege Escalation via Role Management (high 8.7) - [CVE-2026-97711](https://insights.sbomify.com/CVE-2026-97711/): Serialize JavaScript: Cross-site scripting (XSS) via unescaped in serialized function bodies (low 2.3) - [CVE-2026-9771](https://insights.sbomify.com/CVE-2026-9771/): Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation (high 8.8) - [CVE-2026-9770](https://insights.sbomify.com/CVE-2026-9770/): Hardcoded Cryptographic Key Information Disclosure Vulnerability on TP-Link Kasa EC70 and EC71 (high 8.6) - [CVE-2026-97691](https://insights.sbomify.com/CVE-2026-97691/): Convex: Unauthorized data access (medium 4.3) - [CVE-2026-9769](https://insights.sbomify.com/CVE-2026-9769/): justhtml before 1.10.0 Denial of Service via deeply nested HTML (high 8.7) - [CVE-2026-97689](https://insights.sbomify.com/CVE-2026-97689/): urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory (high 8.9) - [CVE-2026-97688](https://insights.sbomify.com/CVE-2026-97688/): urllib3: Chunked Deflate streaming can enter an infinite loop (medium 6.9) - [CVE-2026-97687](https://insights.sbomify.com/CVE-2026-97687/): urllib3: HTTPS proxy TLS configuration may be ignored or overridden (high 7.6) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/215/