# Vulnerabilities published in 2026


- [CVE-2026-93565](https://insights.sbomify.com/CVE-2026-93565/): Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte (high 7.5)
- [CVE-2026-93564](https://insights.sbomify.com/CVE-2026-93564/): Denial of service in Red Hat AMQ Broker 7 (high 7.5)
- [CVE-2026-93563](https://insights.sbomify.com/CVE-2026-93563/): Denial of service in Red Hat Fuse 7 (high 7.5)
- [CVE-2026-93562](https://insights.sbomify.com/CVE-2026-93562/): Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling (medium 6.5)
- [CVE-2026-93561](https://insights.sbomify.com/CVE-2026-93561/): Other in Red Hat Fuse 7 (medium 6.5)
- [CVE-2026-93560](https://insights.sbomify.com/CVE-2026-93560/): Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos (high 7.5)
- [CVE-2026-9356](https://insights.sbomify.com/CVE-2026-9356/): SourceCodester Hospitals Patient Records Management System manage_history.php sql injection (medium 6.9)
- [CVE-2026-93559](https://insights.sbomify.com/CVE-2026-93559/): Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication (medium 6.9)
- [CVE-2026-93558](https://insights.sbomify.com/CVE-2026-93558/): Denial of service in Red Hat AMQ Broker 7 (high 7.5)
- [CVE-2026-93556](https://insights.sbomify.com/CVE-2026-93556/): Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini (critical 9.3)
- [CVE-2026-93550](https://insights.sbomify.com/CVE-2026-93550/): Veeqo for WooCommerce <= 2.2.8 - Subscriber+ Arbitrary File Upload via start_veeqo_connection_process (medium 4.3)
- [CVE-2026-9355](https://insights.sbomify.com/CVE-2026-9355/): SourceCodester Hospitals Patient Records Management System Master.php save_patient_history sql injection (medium 6.9)
- [CVE-2026-93549](https://insights.sbomify.com/CVE-2026-93549/): CoCart 4.9.0 - 4.9.6 - Administrator Account Creation via REST API Authentication Bypass (high 8.8)
- [CVE-2026-93548](https://insights.sbomify.com/CVE-2026-93548/): FooSales < 1.43.3 - Subscriber+ Privilege Escalation via User Impersonation (high 8.8)
- [CVE-2026-93547](https://insights.sbomify.com/CVE-2026-93547/): Missing authorization in vaadin (medium 5.3)
- [CVE-2026-93546](https://insights.sbomify.com/CVE-2026-93546/): Apache HTTP Server: mod_dav_fs namespace overflow (high 8.8)
- [CVE-2026-93545](https://insights.sbomify.com/CVE-2026-93545/): Out-of-bounds read in libXi's XListInputDevices() (medium 6.5)
- [CVE-2026-93544](https://insights.sbomify.com/CVE-2026-93544/): Out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing (medium 6.5)
- [CVE-2026-93543](https://insights.sbomify.com/CVE-2026-93543/): Out-of-bounds read in libXi's XI2 class parser (high 7.4)
- [CVE-2026-93542](https://insights.sbomify.com/CVE-2026-93542/): Out-of-bounds read in libXi's XI2 class parsing via size_classes() and copy_classes() (medium 6.5)
- [CVE-2026-93541](https://insights.sbomify.com/CVE-2026-93541/): Out-of-bounds read in libXi's XQueryDeviceState() (medium 6.5)
- [CVE-2026-93540](https://insights.sbomify.com/CVE-2026-93540/): Fleet applies namespace labels and annotations without the bundle's service account privileges (medium 6.5)
- [CVE-2026-9354](https://insights.sbomify.com/CVE-2026-9354/): NousResearch hermes-agent Slack Agent/Mattermost Agent escape output (medium 6.9)
- [CVE-2026-93539](https://insights.sbomify.com/CVE-2026-93539/): Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver (medium 5.4)
- [CVE-2026-93538](https://insights.sbomify.com/CVE-2026-93538/): Missing authorization in Rancher (high 7.1)
- [CVE-2026-93537](https://insights.sbomify.com/CVE-2026-93537/): Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory (medium 6.5)
- [CVE-2026-93536](https://insights.sbomify.com/CVE-2026-93536/): X.Org Server GestureBuildSprite Use-After-Free (medium 5.3)
- [CVE-2026-93535](https://insights.sbomify.com/CVE-2026-93535/): Cross-site scripting in Dark Mode – Improve Accessibility with AI Powered Dark Theme (medium 6.4)
- [CVE-2026-93534](https://insights.sbomify.com/CVE-2026-93534/): spatie Scotty Self Update SelfUpdater.php update code download (medium 5.3)
- [CVE-2026-93533](https://insights.sbomify.com/CVE-2026-93533/): spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection (medium 5.3)
- [CVE-2026-93532](https://insights.sbomify.com/CVE-2026-93532/): gedelumbung HospitalManagement Password Change password.php simpan improper authentication (medium 5.3)
- [CVE-2026-93531](https://insights.sbomify.com/CVE-2026-93531/): gedelumbung HospitalManagement cross-site request forgery (medium 5.3)
- [CVE-2026-9353](https://insights.sbomify.com/CVE-2026-9353/): NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection (medium 6.9)
- [CVE-2026-93529](https://insights.sbomify.com/CVE-2026-93529/): WordPress WSP MCP - AI Agents Connector plugin <= 2.7.0 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-93528](https://insights.sbomify.com/CVE-2026-93528/): NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page (low 3.7)
- [CVE-2026-93527](https://insights.sbomify.com/CVE-2026-93527/): WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-93526](https://insights.sbomify.com/CVE-2026-93526/): WordPress Event Tickets plugin <= 5.29.4 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-93524](https://insights.sbomify.com/CVE-2026-93524/): X.Org Server XKB SetMap Key Width/Action Count Desync Out-Of-Bounds Read (medium 6.9)
- [CVE-2026-93523](https://insights.sbomify.com/CVE-2026-93523/): X.Org Server XInput2 PassiveUngrabDevice Out-of-Bounds Write (high 7.8)
- [CVE-2026-93522](https://insights.sbomify.com/CVE-2026-93522/): X.Org Server Glamor CopyArea Heap Buffer Overflow (high 7.8)
- [CVE-2026-93521](https://insights.sbomify.com/CVE-2026-93521/): X.Org Server RandR ChangeProviderProperty Heap Buffer Overflow (high 7.8)
- [CVE-2026-93520](https://insights.sbomify.com/CVE-2026-93520/): X.Org Server XKB ChangeKeycodeRange Heap Out-of-Bounds Write (high 7.8)
- [CVE-2026-9352](https://insights.sbomify.com/CVE-2026-9352/): NousResearch hermes-agent Messaging Gateway local.py _make_run_env information disclosure (medium 6.9)
- [CVE-2026-93519](https://insights.sbomify.com/CVE-2026-93519/): X.Org Server XFixes Pointer Barrier Event List Buffer Overflow (high 7.8)
- [CVE-2026-93518](https://insights.sbomify.com/CVE-2026-93518/): X.Org Server XKB ResizeKeyType Numeric Truncation (high 7.8)
- [CVE-2026-93517](https://insights.sbomify.com/CVE-2026-93517/): X.Org Server GLX RenderLarge Heap Buffer Overflow (high 8.5)
- [CVE-2026-93516](https://insights.sbomify.com/CVE-2026-93516/): .Org Server XInput Passive Grab Use-After-Free (medium 5.5)
- [CVE-2026-93515](https://insights.sbomify.com/CVE-2026-93515/): .Org Server Present Extension Use-After-Free (medium 6.8)
- [CVE-2026-93514](https://insights.sbomify.com/CVE-2026-93514/): WordPress Notification for Telegram plugin <= 3.5.2 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-93513](https://insights.sbomify.com/CVE-2026-93513/): WordPress SiteSkite plugin <= 2.1.7 - Insecure Direct Object References (IDOR) vulnerability (medium 4.3)
- [CVE-2026-93512](https://insights.sbomify.com/CVE-2026-93512/): WordPress JW Player for WordPress plugin <= 2.3.11 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-93511](https://insights.sbomify.com/CVE-2026-93511/): Premium Packages < 7.2.1 - Unauthenticated PayPal Webhook Signature Verification Bypass (medium 5.3)
- [CVE-2026-93510](https://insights.sbomify.com/CVE-2026-93510/): Missing authorization in Points and Rewards for WooCommerce (medium 4.3)
- [CVE-2026-9351](https://insights.sbomify.com/CVE-2026-9351/): NousResearch hermes-agent read_file Tool file_tools.py _is_blocked_device path traversal (medium 6.9)
- [CVE-2026-93509](https://insights.sbomify.com/CVE-2026-93509/): Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount (medium 6.5)
- [CVE-2026-93508](https://insights.sbomify.com/CVE-2026-93508/): WC Fields Factory < 4.1.11 - Subscriber+ Arbitrary Post Meta Manipulation via AJAX (high 8.1)
- [CVE-2026-93507](https://insights.sbomify.com/CVE-2026-93507/): WC Fields Factory < 4.1.11 - Contributor+ Arbitrary Post Cloning and Private Content Disclosure (low 3.3)
- [CVE-2026-93506](https://insights.sbomify.com/CVE-2026-93506/): SveltyCMS File Upload Endpoint upload-media server-side request forgery (medium 5.3)
- [CVE-2026-93505](https://insights.sbomify.com/CVE-2026-93505/): SveltyCMS SVG Media Upload media-service.server.ts cross site scripting (medium 5.1)
- [CVE-2026-93504](https://insights.sbomify.com/CVE-2026-93504/): SveltyCMS User Attribute Update Endpoint +server.ts access control (medium 5.3)
- [CVE-2026-9350](https://insights.sbomify.com/CVE-2026-9350/): NousResearch hermes-agent Batch Runner approval.py check_all_command_guards authorization (medium 6.9)
- [CVE-2026-93495](https://insights.sbomify.com/CVE-2026-93495/): Memory corruption in Motherboard(PRIME Z390-A ) (high 7.0)
- [CVE-2026-93494](https://insights.sbomify.com/CVE-2026-93494/): Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated (high 7.5)
- [CVE-2026-93493](https://insights.sbomify.com/CVE-2026-93493/): Security feature bypass in Red Hat build of Apache Camel for Spring Boot 4 (medium 5.9)
- [CVE-2026-93492](https://insights.sbomify.com/CVE-2026-93492/): Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size (medium 5.3)
- [CVE-2026-93491](https://insights.sbomify.com/CVE-2026-93491/): Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue (high 7.5)
- [CVE-2026-9349](https://insights.sbomify.com/CVE-2026-9349/): calcom cal.diy Generic React API bookings-single-view.getServerSideProps.tsx getServerSideProps information disclosure (medium 6.9)
- [CVE-2026-93489](https://insights.sbomify.com/CVE-2026-93489/): Auth bypass in Router (high 8.7)
- [CVE-2026-93488](https://insights.sbomify.com/CVE-2026-93488/): Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams (high 7.5)
- [CVE-2026-93485](https://insights.sbomify.com/CVE-2026-93485/): WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-93484](https://insights.sbomify.com/CVE-2026-93484/): SQL injection in Znuny (high 8.6)
- [CVE-2026-93483](https://insights.sbomify.com/CVE-2026-93483/): Auth bypass in Znuny (critical 9.5)
- [CVE-2026-9348](https://insights.sbomify.com/CVE-2026-9348/): Edimax EW-7438RPn webs mp stack-based overflow (high 8.7)
- [CVE-2026-93479](https://insights.sbomify.com/CVE-2026-93479/): NGINX map directive and regex matching vulnerability (critical 9.2)
- [CVE-2026-93477](https://insights.sbomify.com/CVE-2026-93477/): Private action arguments can be set by user input on the bulk destroy and bulk update paths in Ash (medium 5.9)
- [CVE-2026-93475](https://insights.sbomify.com/CVE-2026-93475/): Out-of-bounds Write via an Unbounded RSA Modulus in NetX Secure X.509 (critical 9.3)
- [CVE-2026-93474](https://insights.sbomify.com/CVE-2026-93474/): Monta monta.app Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-93471](https://insights.sbomify.com/CVE-2026-93471/): Unbounded SAML message decompression in esaml allows memory exhaustion (high 8.7)
- [CVE-2026-9347](https://insights.sbomify.com/CVE-2026-9347/): Edimax EW-7438RPn webs formWizSurvey os command injection (medium 5.3)
- [CVE-2026-93468](https://insights.sbomify.com/CVE-2026-93468/): HGiga｜OAKlouds - Arbitrary File Read (high 8.7)
- [CVE-2026-93467](https://insights.sbomify.com/CVE-2026-93467/): HGiga｜OAKlouds - Insecure Deserialization (critical 9.3)
- [CVE-2026-93464](https://insights.sbomify.com/CVE-2026-93464/): Cross-site scripting in baserCMS (medium 5.1)
- [CVE-2026-93463](https://insights.sbomify.com/CVE-2026-93463/): Cross-site scripting in baserCMS (medium 5.1)
- [CVE-2026-93462](https://insights.sbomify.com/CVE-2026-93462/): Missing authorization in baserCMS (medium 6.9)
- [CVE-2026-93460](https://insights.sbomify.com/CVE-2026-93460/): Cross-site scripting in baserCMS (medium 5.1)
- [CVE-2026-9346](https://insights.sbomify.com/CVE-2026-9346/): Edimax EW-7438RPn webs formWirelessTbl buffer overflow (high 8.7)
- [CVE-2026-93456](https://insights.sbomify.com/CVE-2026-93456/): django-page-cms through 2.0.13 CSRF via admin mutation views (high 8.4)
- [CVE-2026-93455](https://insights.sbomify.com/CVE-2026-93455/): django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account (high 7.1)
- [CVE-2026-93454](https://insights.sbomify.com/CVE-2026-93454/): Aureus ERP through 1.6.0 Stored XSS via Payment Term Note (medium 5.1)
- [CVE-2026-93453](https://insights.sbomify.com/CVE-2026-93453/): SOGo before 5.12.11 Password Reset Token Interception via Origin Header (high 8.7)
- [CVE-2026-93452](https://insights.sbomify.com/CVE-2026-93452/): snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress (high 8.7)
- [CVE-2026-93451](https://insights.sbomify.com/CVE-2026-93451/): snappy-java through 1.1.10.8 Buffer Overflow via typed uncompress methods (medium 6.9)
- [CVE-2026-93450](https://insights.sbomify.com/CVE-2026-93450/): go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal (high 8.7)
- [CVE-2026-9345](https://insights.sbomify.com/CVE-2026-9345/): Edimax EW-7438RPn webs formWizSurvey buffer overflow (high 8.7)
- [CVE-2026-93449](https://insights.sbomify.com/CVE-2026-93449/): Langflow OSS is affected by multiple vulnerabilities (high 8.5)
- [CVE-2026-93448](https://insights.sbomify.com/CVE-2026-93448/): Langflow OSS is affected by multiple vulnerabilities (medium 6.5)
- [CVE-2026-93447](https://insights.sbomify.com/CVE-2026-93447/): Langflow OSS is affected by multiple vulnerabilities (high 7.5)
- [CVE-2026-93446](https://insights.sbomify.com/CVE-2026-93446/): Apache Tomcat: Possible TLS 1.3 connection failures (high 7.5)
- [CVE-2026-93445](https://insights.sbomify.com/CVE-2026-93445/): Langflow OSS is affected by multiple vulnerabilities (high 8.1)
- [CVE-2026-93443](https://insights.sbomify.com/CVE-2026-93443/): Langflow OSS is affected by multiple vulnerabilities (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/240/