# Vulnerabilities published in 2026


- [CVE-2026-95707](https://insights.sbomify.com/CVE-2026-95707/): Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution in AOS-8 (high 7.2)
- [CVE-2026-95706](https://insights.sbomify.com/CVE-2026-95706/): Authenticated Command Injection Vulnerabilities in AOS-8 (high 7.2)
- [CVE-2026-95705](https://insights.sbomify.com/CVE-2026-95705/): Authenticated Command Injection Vulnerabilities in AOS-8 (high 7.2)
- [CVE-2026-95704](https://insights.sbomify.com/CVE-2026-95704/): Authenticated Remote Code Execution allows Unauthorized System Control in Wireless Network Management Interface (high 7.2)
- [CVE-2026-95703](https://insights.sbomify.com/CVE-2026-95703/): MISP OrganisationsController File Existence and Image-Type Oracle via Forged Upload tmp_name (medium 5.1)
- [CVE-2026-95702](https://insights.sbomify.com/CVE-2026-95702/): Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile (high 8.5)
- [CVE-2026-95701](https://insights.sbomify.com/CVE-2026-95701/): MISP Path Traversal via Organization Name in Org-Statistics Logo Check (medium 5.1)
- [CVE-2026-9570](https://insights.sbomify.com/CVE-2026-9570/): Taskbuilder < 5.0.8 - Reflected XSS via Shortcode (high 7.1)
- [CVE-2026-95699](https://insights.sbomify.com/CVE-2026-95699/): MrSteam iSteamX Improper Isolation or Compartmentalization (high 8.4)
- [CVE-2026-95698](https://insights.sbomify.com/CVE-2026-95698/): MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name (medium 5.3)
- [CVE-2026-95697](https://insights.sbomify.com/CVE-2026-95697/): MISP: Insufficient Authorization Allows Sharing Group Editors to Overwrite Organization Metadata (medium 5.3)
- [CVE-2026-95696](https://insights.sbomify.com/CVE-2026-95696/): IBM WebSphere Application Server Liberty Denial of Service (medium 6.5)
- [CVE-2026-95695](https://insights.sbomify.com/CVE-2026-95695/): IBM WebSphere Application Server Liberty Incorrect Authorization (high 7.4)
- [CVE-2026-95693](https://insights.sbomify.com/CVE-2026-95693/): MISP Information Disclosure via Forged Upload Path (medium 5.3)
- [CVE-2026-95687](https://insights.sbomify.com/CVE-2026-95687/): Privilege escalation in WPC Shop as a Customer for WooCommerce (high 8.8)
- [CVE-2026-95686](https://insights.sbomify.com/CVE-2026-95686/): Opti-Behavior <= 1.9.2.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'targetUrl' Parameter (high 7.2)
- [CVE-2026-95685](https://insights.sbomify.com/CVE-2026-95685/): MISP Missing Authorization on replaceSuggestionInReport Event Report Action (medium 5.3)
- [CVE-2026-95684](https://insights.sbomify.com/CVE-2026-95684/): Cross-site scripting in VikBooking Hotel Booking Engine & PMS (high 7.2)
- [CVE-2026-95683](https://insights.sbomify.com/CVE-2026-95683/): MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL (medium 5.3)
- [CVE-2026-95682](https://insights.sbomify.com/CVE-2026-95682/): MISP Stored Cross-Site Scripting via Unescaped Organization Name in Admin Email View (medium 4.8)
- [CVE-2026-95680](https://insights.sbomify.com/CVE-2026-95680/): IBM WebSphere Application Server is affected by an authorization bypass (high 8.0)
- [CVE-2026-9568](https://insights.sbomify.com/CVE-2026-9568/): ThingsBoard YAML provision getGatewayDockerComposeFile code injection (low 2.3)
- [CVE-2026-95679](https://insights.sbomify.com/CVE-2026-95679/): MISP Unauthenticated Blind SSRF via XML Body Processing (medium 6.9)
- [CVE-2026-95676](https://insights.sbomify.com/CVE-2026-95676/): AuthPoint Gateway Improper Authentication in LDAP Sync Allows First-Factor Authentication Bypass (high 7.4)
- [CVE-2026-95675](https://insights.sbomify.com/CVE-2026-95675/): D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface (critical 9.3)
- [CVE-2026-95674](https://insights.sbomify.com/CVE-2026-95674/): MISP EventsController queryEnrichment allows querying unavailable or legacy modules without validation (medium 5.3)
- [CVE-2026-95671](https://insights.sbomify.com/CVE-2026-95671/): MISP Collections: Missing Authorization Check for Sharing Group on PUT Request in collections/add (medium 5.3)
- [CVE-2026-95670](https://insights.sbomify.com/CVE-2026-95670/): No External Links <= 5.2.0 - Unauthenticated Stored Cross-Site Scripting via Log URL via /goto/{base64} Redirect (high 7.2)
- [CVE-2026-9567](https://insights.sbomify.com/CVE-2026-9567/): GPAC MP4Box isom_intern.c MergeFragment null pointer dereference (medium 4.8)
- [CVE-2026-95667](https://insights.sbomify.com/CVE-2026-95667/): MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials (medium 6.9)
- [CVE-2026-95666](https://insights.sbomify.com/CVE-2026-95666/): Unbounded post ID array in the bulk reactions endpoint allows denial of service (medium 4.3)
- [CVE-2026-95665](https://insights.sbomify.com/CVE-2026-95665/): MISP Reflected Cross-Site Scripting in Event Export Confirmation Form via Unescaped JSON (medium 5.1)
- [CVE-2026-95664](https://insights.sbomify.com/CVE-2026-95664/): Code injection in Apache Camel (medium 5.4)
- [CVE-2026-95663](https://insights.sbomify.com/CVE-2026-95663/): Auth bypass in Apache Camel (medium 4.8)
- [CVE-2026-95662](https://insights.sbomify.com/CVE-2026-95662/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-95661](https://insights.sbomify.com/CVE-2026-95661/): MISP Reflected Cross-Site Scripting in Attribute Histogram via Unescaped URL-Supplied Type List (medium 5.1)
- [CVE-2026-95660](https://insights.sbomify.com/CVE-2026-95660/): Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection (medium 5.3)
- [CVE-2026-9566](https://insights.sbomify.com/CVE-2026-9566/): teableio teable Sign-up LoginPage.tsx cross site scripting (medium 5.3)
- [CVE-2026-95659](https://insights.sbomify.com/CVE-2026-95659/): MISP Reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread (medium 4.8)
- [CVE-2026-95658](https://insights.sbomify.com/CVE-2026-95658/): MISP CSRF vulnerability in workflow moduleStatelessExecution allows cross-site execution of workflow modules (medium 6.9)
- [CVE-2026-95657](https://insights.sbomify.com/CVE-2026-95657/): dgtlmoon Changedetection.io Visual Selector visual-selector.js setCurrentSelectedText cross site scripting (medium 5.1)
- [CVE-2026-95656](https://insights.sbomify.com/CVE-2026-95656/): dgtlmoon changedetection.io Preview Endpoint __init__.py add_watch_ui_snapshot server-side request forgery (medium 6.9)
- [CVE-2026-95655](https://insights.sbomify.com/CVE-2026-95655/): Aureus ERP before 1.5.0 Unscoped Message Access via ChatterPanel (high 8.6)
- [CVE-2026-95654](https://insights.sbomify.com/CVE-2026-95654/): Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token (critical 9.1)
- [CVE-2026-95653](https://insights.sbomify.com/CVE-2026-95653/): Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token (high 8.7)
- [CVE-2026-9565](https://insights.sbomify.com/CVE-2026-9565/): haojing8312 WorkClaw Blacklist bash.rs is_dangerous os command injection (medium 5.3)
- [CVE-2026-95641](https://insights.sbomify.com/CVE-2026-95641/): Photoshop Desktop | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-95640](https://insights.sbomify.com/CVE-2026-95640/): Photoshop Desktop | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2026-9564](https://insights.sbomify.com/CVE-2026-9564/): SourceCodester/oretnom23 Hospitals Patient Records Management System view_patient cross site scripting (medium 4.8)
- [CVE-2026-95639](https://insights.sbomify.com/CVE-2026-95639/): Photoshop Desktop | Incorrect Authorization (CWE-863) (high 8.6)
- [CVE-2026-95638](https://insights.sbomify.com/CVE-2026-95638/): Photoshop Desktop | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-95637](https://insights.sbomify.com/CVE-2026-95637/): Photoshop Desktop | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-95636](https://insights.sbomify.com/CVE-2026-95636/): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (high 7.8)
- [CVE-2026-95635](https://insights.sbomify.com/CVE-2026-95635/): Photoshop Desktop | Double Free (CWE-415) (high 7.8)
- [CVE-2026-95634](https://insights.sbomify.com/CVE-2026-95634/): CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918) (high 8.6)
- [CVE-2026-95633](https://insights.sbomify.com/CVE-2026-95633/): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (high 7.5)
- [CVE-2026-95632](https://insights.sbomify.com/CVE-2026-95632/): CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347) (high 7.5)
- [CVE-2026-95631](https://insights.sbomify.com/CVE-2026-95631/): Adobe Commerce | Improper Input Validation (CWE-20) (high 8.7)
- [CVE-2026-95630](https://insights.sbomify.com/CVE-2026-95630/): Adobe Commerce | Improper Input Validation (CWE-20) (medium 4.3)
- [CVE-2026-9563](https://insights.sbomify.com/CVE-2026-9563/): Denial of service in Eclipse Parsson (high 7.5)
- [CVE-2026-95629](https://insights.sbomify.com/CVE-2026-95629/): Apache Camel: Camel-Docling Unvalidated Output Path Header Enables Writing Conversion Output to an Arbitrary Directory (medium 5.4)
- [CVE-2026-95628](https://insights.sbomify.com/CVE-2026-95628/): Path traversal in Apache Camel (medium 5.4)
- [CVE-2026-95627](https://insights.sbomify.com/CVE-2026-95627/): Tauri framework v2 Dialog plugin auto-expands the filesystem scope with attacker-controlled recursion (high 7.7)
- [CVE-2026-95626](https://insights.sbomify.com/CVE-2026-95626/): Tauri framework v2 CSP nonce protection bypass via data and blob URI schemes allows an XSS to RCE chains (high 8.3)
- [CVE-2026-95625](https://insights.sbomify.com/CVE-2026-95625/): Tauri framework v2 missing updater signature version number validation can be exploited into forced downgrade (medium 5.9)
- [CVE-2026-95624](https://insights.sbomify.com/CVE-2026-95624/): Tauri framework v2 malicious downgrade via allow_downgrades from frontend code (medium 6.8)
- [CVE-2026-95623](https://insights.sbomify.com/CVE-2026-95623/): Tauri framework v2 SSRF Protection Bypass via HTTP Redirects (medium 5.6)
- [CVE-2026-95620](https://insights.sbomify.com/CVE-2026-95620/): Use-after-free vulnerability in QNetworkAccessManager HTTP/2 support impacts Qt (low 2.1)
- [CVE-2026-9562](https://insights.sbomify.com/CVE-2026-9562/): sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control (medium 6.9)
- [CVE-2026-95619](https://insights.sbomify.com/CVE-2026-95619/): Gcc: libstdc++ integer overflow in `new` operator (high 7.7)
- [CVE-2026-95616](https://insights.sbomify.com/CVE-2026-95616/): Apache WSS4J: Unauthenticated denial of service via integer overflow in DER parsing of X.509 certificate extensions (high 7.5)
- [CVE-2026-95610](https://insights.sbomify.com/CVE-2026-95610/): WordPress UpSolution Core plugin <= 9.3 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-9561](https://insights.sbomify.com/CVE-2026-9561/): Security feature bypass in Eclipse Kura (high 8.8)
- [CVE-2026-95609](https://insights.sbomify.com/CVE-2026-95609/): WordPress Media LIbrary Assistant plugin <= 3.41 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-95608](https://insights.sbomify.com/CVE-2026-95608/): WordPress HUSKY plugin <= 1.4.3.2 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-95607](https://insights.sbomify.com/CVE-2026-95607/): WordPress WPLMS theme <= 4.973 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-95606](https://insights.sbomify.com/CVE-2026-95606/): WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability (critical 9.8)
- [CVE-2026-95605](https://insights.sbomify.com/CVE-2026-95605/): WordPress WP Data Access plugin <= 5.5.82 - SQL Injection vulnerability (critical 9.3)
- [CVE-2026-95604](https://insights.sbomify.com/CVE-2026-95604/): WordPress Loops & Logic plugin <= 4.2.4 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-95603](https://insights.sbomify.com/CVE-2026-95603/): WordPress Reycob Product Import Export plugin <= 2.3.0 - PHP Object Injection vulnerability (high 7.2)
- [CVE-2026-95602](https://insights.sbomify.com/CVE-2026-95602/): WordPress YITH WooCommerce Request A Quote plugin < 4.46.1 - Insecure Direct Object References (IDOR) vulnerability (medium 6.5)
- [CVE-2026-95601](https://insights.sbomify.com/CVE-2026-95601/): WordPress Product Filter by WBW plugin <= 3.1.7 - SQL Injection vulnerability (critical 9.3)
- [CVE-2026-95600](https://insights.sbomify.com/CVE-2026-95600/): WordPress TrustedLogin Connector plugin <= 2.0.3 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-9560](https://insights.sbomify.com/CVE-2026-9560/): Privilege escalation in OpenVPN Connect (critical 9.4)
- [CVE-2026-95599](https://insights.sbomify.com/CVE-2026-95599/): WordPress Taskbuilder plugin <= 6.0.5 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-95598](https://insights.sbomify.com/CVE-2026-95598/): WordPress Search in Place plugin <= 1.5.5 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-95597](https://insights.sbomify.com/CVE-2026-95597/): WordPress 워드프레스 결제 심플페이 plugin <= 5.5.17 - Settings Change vulnerability (medium 6.5)
- [CVE-2026-95596](https://insights.sbomify.com/CVE-2026-95596/): WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-95595](https://insights.sbomify.com/CVE-2026-95595/): Cross-site scripting in Disable and Remove Google Fonts | GDPR & DSGVO friendly (high 7.1)
- [CVE-2026-95594](https://insights.sbomify.com/CVE-2026-95594/): WordPress SMS Alert Order Notifications plugin <= 4.0.0 - Privilege Escalation vulnerability (high 8.1)
- [CVE-2026-95593](https://insights.sbomify.com/CVE-2026-95593/): WordPress Ultimeter plugin <= 3.0.8 - SQL Injection vulnerability (high 7.6)
- [CVE-2026-95592](https://insights.sbomify.com/CVE-2026-95592/): WordPress Team plugin <= 6.0.0 - Insecure Direct Object References (IDOR) vulnerability (medium 5.3)
- [CVE-2026-95591](https://insights.sbomify.com/CVE-2026-95591/): WordPress VikBooking Hotel Booking Engine & PMS plugin <= 1.8.14 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-95590](https://insights.sbomify.com/CVE-2026-95590/): WordPress Tainacan plugin <= 1.2.0 - SQL Injection vulnerability (high 7.1)
- [CVE-2026-9559](https://insights.sbomify.com/CVE-2026-9559/): Mautic vulnerable to Path Traversal via Campaign Import (critical 9.9)
- [CVE-2026-95589](https://insights.sbomify.com/CVE-2026-95589/): WordPress Deposits and Partial Payments for WooCommerce plugin <= 4.0.1 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-95588](https://insights.sbomify.com/CVE-2026-95588/): WordPress AcyMailing SMTP Newsletter plugin <= 11.0.5 - Arbitrary File Deletion vulnerability (high 8.6)
- [CVE-2026-95587](https://insights.sbomify.com/CVE-2026-95587/): WordPress Hostinger Migrator plugin <= 1.0 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-95586](https://insights.sbomify.com/CVE-2026-95586/): WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.50 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-9558](https://insights.sbomify.com/CVE-2026-9558/): Mautic has Server-Side Template Injection (SSTI) in Theme Templates (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/228/