# Vulnerabilities published in 2026


- [CVE-2026-92026](https://insights.sbomify.com/CVE-2026-92026/): Use-after-free in the Networking component (high 8.8)
- [CVE-2026-92025](https://insights.sbomify.com/CVE-2026-92025/): Use-after-free in the DOM: Navigation component (high 8.8)
- [CVE-2026-92024](https://insights.sbomify.com/CVE-2026-92024/): Use-after-free in the SVG component (high 8.8)
- [CVE-2026-92023](https://insights.sbomify.com/CVE-2026-92023/): Use-after-free in the XML component (high 8.8)
- [CVE-2026-92022](https://insights.sbomify.com/CVE-2026-92022/): Use-after-free in the DOM: HTML Parser component (high 8.8)
- [CVE-2026-92021](https://insights.sbomify.com/CVE-2026-92021/): Use-after-free in the JavaScript Engine: JIT component (high 8.8)
- [CVE-2026-92020](https://insights.sbomify.com/CVE-2026-92020/): Privilege escalation due to incorrect boundary conditions in the Graphics: WebRender component (high 8.8)
- [CVE-2026-9202](https://insights.sbomify.com/CVE-2026-9202/): Unauthenticated User Registration Could Lead to Remote Code Execution (critical 9.8)
- [CVE-2026-92019](https://insights.sbomify.com/CVE-2026-92019/): Mitigation bypass in the Remote Settings Client component (high 8.1)
- [CVE-2026-92018](https://insights.sbomify.com/CVE-2026-92018/): Sandbox escape in the DOM: Core & HTML component (critical 9.6)
- [CVE-2026-92017](https://insights.sbomify.com/CVE-2026-92017/): Privilege escalation in the DOM: Service Workers component (high 8.8)
- [CVE-2026-92016](https://insights.sbomify.com/CVE-2026-92016/): Use-after-free in the Disability Access APIs component (high 8.8)
- [CVE-2026-92015](https://insights.sbomify.com/CVE-2026-92015/): Privilege escalation in the WebExtensions component (high 8.8)
- [CVE-2026-92014](https://insights.sbomify.com/CVE-2026-92014/): Privilege escalation due to incorrect boundary conditions in the Graphics component (high 8.8)
- [CVE-2026-92013](https://insights.sbomify.com/CVE-2026-92013/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92012](https://insights.sbomify.com/CVE-2026-92012/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92011](https://insights.sbomify.com/CVE-2026-92011/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92010](https://insights.sbomify.com/CVE-2026-92010/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-9201](https://insights.sbomify.com/CVE-2026-9201/): Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling (high 8.8)
- [CVE-2026-92009](https://insights.sbomify.com/CVE-2026-92009/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92008](https://insights.sbomify.com/CVE-2026-92008/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92007](https://insights.sbomify.com/CVE-2026-92007/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92006](https://insights.sbomify.com/CVE-2026-92006/): Privilege escalation due to incorrect boundary conditions in the Graphics: CanvasWebGL component (high 8.8)
- [CVE-2026-92005](https://insights.sbomify.com/CVE-2026-92005/): Use-after-free in the Audio/Video: Web Codecs component (medium 5.3)
- [CVE-2026-92003](https://insights.sbomify.com/CVE-2026-92003/): MISP Unthrottled Authentication Failure Log Writes Enable Resource Exhaustion (medium 6.9)
- [CVE-2026-92002](https://insights.sbomify.com/CVE-2026-92002/): MISP: Authentication failure logging suppressed during Redis unavailability (medium 5.1)
- [CVE-2026-92001](https://insights.sbomify.com/CVE-2026-92001/): Apache Sling XSS: Missing parser resource limits (medium 6.1)
- [CVE-2026-92000](https://insights.sbomify.com/CVE-2026-92000/): adm-zip 0.5.14 through 0.6.0 Denial of Service via Zero Declared Uncompressed Size (high 8.7)
- [CVE-2026-9200](https://insights.sbomify.com/CVE-2026-9200/): Query Shortcode <= 0.2.1 - Authenticated (Contributor+) Local File Inclusion via 'lens' Shortcode Attribute (high 7.5)
- [CVE-2026-91999](https://insights.sbomify.com/CVE-2026-91999/): Apache Sling XSS: Improper escaping in the XSS Webconsole plugin (medium 6.1)
- [CVE-2026-91998](https://insights.sbomify.com/CVE-2026-91998/): Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp (critical 9.4)
- [CVE-2026-91997](https://insights.sbomify.com/CVE-2026-91997/): evolution-api through 2.3.7 Prometheus Metrics IP Allowlist Bypass (medium 6.9)
- [CVE-2026-91996](https://insights.sbomify.com/CVE-2026-91996/): lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint (high 8.7)
- [CVE-2026-91995](https://insights.sbomify.com/CVE-2026-91995/): pig before 4.1.0 Unverified Password Change via /register/password (critical 9.3)
- [CVE-2026-91994](https://insights.sbomify.com/CVE-2026-91994/): Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests (high 7.1)
- [CVE-2026-91993](https://insights.sbomify.com/CVE-2026-91993/): Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list (medium 5.3)
- [CVE-2026-91992](https://insights.sbomify.com/CVE-2026-91992/): Tornado before 6.5.7 Credential Leak via Handle Reuse (high 8.2)
- [CVE-2026-91991](https://insights.sbomify.com/CVE-2026-91991/): Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs (medium 6.3)
- [CVE-2026-91990](https://insights.sbomify.com/CVE-2026-91990/): Tornado before 6.5.8 Memory Amplification DoS via multipart (high 8.7)
- [CVE-2026-9199](https://insights.sbomify.com/CVE-2026-9199/): Missing authorization in Equalize Digital Accessibility Checker – WCAG, ADA, EAA and Section 508 compliance (medium 4.3)
- [CVE-2026-91989](https://insights.sbomify.com/CVE-2026-91989/): atomic-agents-stack before 1.1.0 Path Traversal via dashboard serve.py (high 8.7)
- [CVE-2026-91988](https://insights.sbomify.com/CVE-2026-91988/): atomic-agents-stack before 1.1.0 Remote Code Execution via HTTP MCP (critical 9.2)
- [CVE-2026-91987](https://insights.sbomify.com/CVE-2026-91987/): atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model (high 7.1)
- [CVE-2026-91986](https://insights.sbomify.com/CVE-2026-91986/): gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection (medium 5.3)
- [CVE-2026-91985](https://insights.sbomify.com/CVE-2026-91985/): Vikunja before 2.6.0 Privilege Escalation via Link Share Hash (high 8.7)
- [CVE-2026-91984](https://insights.sbomify.com/CVE-2026-91984/): Vikunja before 2.6.0 Broken Object-Level Authorization via task-position (medium 5.3)
- [CVE-2026-91983](https://insights.sbomify.com/CVE-2026-91983/): Vikunja before 2.6.0 API Token Scope Bypass via expand Parameter (medium 5.3)
- [CVE-2026-91982](https://insights.sbomify.com/CVE-2026-91982/): Vikunja before 2.6.0 TOTP Secret Disclosure via API (medium 5.3)
- [CVE-2026-91981](https://insights.sbomify.com/CVE-2026-91981/): Vikunja before 2.6.0 User Enumeration via v2 API (medium 5.3)
- [CVE-2026-91980](https://insights.sbomify.com/CVE-2026-91980/): vikunja before 2.6.0 Team Enumeration via Project Share (medium 5.3)
- [CVE-2026-9198](https://insights.sbomify.com/CVE-2026-9198/): IBM Langflow Code Injection (critical 9.8, exploited in the wild)
- [CVE-2026-91979](https://insights.sbomify.com/CVE-2026-91979/): Vikunja before 2.6.0 Denial of Service via Decompression Bomb (high 7.1)
- [CVE-2026-91973](https://insights.sbomify.com/CVE-2026-91973/): Vikunja before 2.6.0 Authentication Bypass via CalDAV BasicAuth (high 8.7)
- [CVE-2026-91972](https://insights.sbomify.com/CVE-2026-91972/): Vikunja before 2.6.0 Authentication Bypass via Unthrottled API (high 8.7)
- [CVE-2026-91971](https://insights.sbomify.com/CVE-2026-91971/): Vikunja before 2.6.0 Denial of Service via Avatar Upload (high 7.1)
- [CVE-2026-91970](https://insights.sbomify.com/CVE-2026-91970/): Vikunja before 2.6.0 Resource Exhaustion via Planka Migration (high 7.1)
- [CVE-2026-9197](https://insights.sbomify.com/CVE-2026-9197/): Path traversal in Smart Slider 3 (medium 4.9)
- [CVE-2026-91969](https://insights.sbomify.com/CVE-2026-91969/): vikunja before 2.6.0 Resource Exhaustion via CSV Migration (high 7.1)
- [CVE-2026-91968](https://insights.sbomify.com/CVE-2026-91968/): vikunja before 2.6.0 Denial of Service via unbounded filter recursion (high 7.1)
- [CVE-2026-91967](https://insights.sbomify.com/CVE-2026-91967/): AVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL (medium 5.3)
- [CVE-2026-91966](https://insights.sbomify.com/CVE-2026-91966/): AVideo through 29.0 Unauthenticated SSRF via Host Header (medium 6.9)
- [CVE-2026-91965](https://insights.sbomify.com/CVE-2026-91965/): WWBN AVideo through 29.0 Broken Access Control via Live Endpoints (high 8.7)
- [CVE-2026-91964](https://insights.sbomify.com/CVE-2026-91964/): FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken (high 8.7)
- [CVE-2026-91963](https://insights.sbomify.com/CVE-2026-91963/): FreeRDP 2.0.0 through 3.30.0 Uninitialized Heap Memory Disclosure via urbdrc (high 7.1)
- [CVE-2026-91962](https://insights.sbomify.com/CVE-2026-91962/): FreeRDP before 3.31.0 Integer Overflow via audin Apple backends (medium 5.3)
- [CVE-2026-91961](https://insights.sbomify.com/CVE-2026-91961/): FreeRDP before 3.31.0 Denial of Service via URBDRC (high 7.1)
- [CVE-2026-91960](https://insights.sbomify.com/CVE-2026-91960/): FreeRDP before 3.31.0 Integer Overflow Double Free (high 7.1)
- [CVE-2026-9196](https://insights.sbomify.com/CVE-2026-9196/): Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling (high 8.1)
- [CVE-2026-91959](https://insights.sbomify.com/CVE-2026-91959/): FreeRDP before 3.31.0 Buffer Over-read via RTS Gateway (high 7.1)
- [CVE-2026-91958](https://insights.sbomify.com/CVE-2026-91958/): FreeRDP 3.11.0 through 3.30.0 Heap Buffer Overflow via Monitor Index (medium 6.9)
- [CVE-2026-91957](https://insights.sbomify.com/CVE-2026-91957/): FreeRDP before 3.31.0 Use-After-Free via smartcard worker (low 2.3)
- [CVE-2026-91956](https://insights.sbomify.com/CVE-2026-91956/): FreeRDP before 3.31.0 Out-of-Bounds Read via URBDRC (high 7.1)
- [CVE-2026-91955](https://insights.sbomify.com/CVE-2026-91955/): FreeRDP before 3.31.0 Denial of Service via Desktop Dimensions (high 8.2)
- [CVE-2026-91954](https://insights.sbomify.com/CVE-2026-91954/): FreeRDP before 3.31.0 NULL Pointer Dereference via NSCodec (high 7.1)
- [CVE-2026-91953](https://insights.sbomify.com/CVE-2026-91953/): FreeRDP before 3.31.0 Heap Buffer Overflow via LB_LOAD_BALANCE_INFO (high 7.1)
- [CVE-2026-91952](https://insights.sbomify.com/CVE-2026-91952/): FreeRDP before 3.31.0 Denial of Service via pool_decode_rect (high 7.1)
- [CVE-2026-91951](https://insights.sbomify.com/CVE-2026-91951/): FreeRDP 3.14.0 through 3.30.0 Out-of-bounds Write via urbdrc (high 7.1)
- [CVE-2026-91950](https://insights.sbomify.com/CVE-2026-91950/): FreeRDP before 3.31.0 Out-of-Bounds Read via UINT32 Wraparound (high 7.1)
- [CVE-2026-9195](https://insights.sbomify.com/CVE-2026-9195/): Cross-site scripting in Progress MarkLogic Server Query Console (critical 9.3)
- [CVE-2026-91949](https://insights.sbomify.com/CVE-2026-91949/): FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass (critical 9.2)
- [CVE-2026-91948](https://insights.sbomify.com/CVE-2026-91948/): FreeRDP before 3.31.0 Out-of-bounds Write via SHOW_PROTOCOL (high 7.7)
- [CVE-2026-91947](https://insights.sbomify.com/CVE-2026-91947/): FreeRDP Server before 3.31.0 Use-After-Free via DRDYNVC (high 7.7)
- [CVE-2026-91946](https://insights.sbomify.com/CVE-2026-91946/): FreeRDP before 3.31.0 Information Disclosure via RDPGFX ResetGraphics (high 7.1)
- [CVE-2026-91945](https://insights.sbomify.com/CVE-2026-91945/): FreeRDP before 3.31.0 Out-of-bounds Read via Smartcard ATR (high 7.1)
- [CVE-2026-91944](https://insights.sbomify.com/CVE-2026-91944/): crawl4ai before 0.9.3 DOM-based XSS via Playground UI (medium 5.1)
- [CVE-2026-91943](https://insights.sbomify.com/CVE-2026-91943/): Crawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy (high 8.3)
- [CVE-2026-91942](https://insights.sbomify.com/CVE-2026-91942/): crawl4ai before 0.9.3 Cross-Site Scripting via innerHTML (medium 5.1)
- [CVE-2026-91941](https://insights.sbomify.com/CVE-2026-91941/): Crawl4AI before 0.9.3 Denial of Service via PDFContentScrapingStrategy (high 8.7)
- [CVE-2026-91940](https://insights.sbomify.com/CVE-2026-91940/): crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy (high 8.7)
- [CVE-2026-91939](https://insights.sbomify.com/CVE-2026-91939/): Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameter (critical 9.3)
- [CVE-2026-91938](https://insights.sbomify.com/CVE-2026-91938/): Flowise before 3.1.4 Server-Side Request Forgery via document loaders (high 7.6)
- [CVE-2026-91937](https://insights.sbomify.com/CVE-2026-91937/): Flowise before 3.1.4 NoSQL Injection via sessionId (high 8.7)
- [CVE-2026-91936](https://insights.sbomify.com/CVE-2026-91936/): Flowise before 3.1.4 Script Injection via Docker Workflows (high 8.3)
- [CVE-2026-91935](https://insights.sbomify.com/CVE-2026-91935/): Flowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes (high 8.7)
- [CVE-2026-91934](https://insights.sbomify.com/CVE-2026-91934/): Flowise before 3.1.4 Remote Code Execution via SQL Database Chain (high 8.7)
- [CVE-2026-91933](https://insights.sbomify.com/CVE-2026-91933/): Flowise before 3.1.4 Authorization Bypass via openai-realtime (high 7.6)
- [CVE-2026-91932](https://insights.sbomify.com/CVE-2026-91932/): Flowise before 3.1.4 Remote Code Execution via cwd Parameter (critical 9.0)
- [CVE-2026-91931](https://insights.sbomify.com/CVE-2026-91931/): Flowise before 3.1.4 Remote Code Execution via Custom MCP npx (critical 9.0)
- [CVE-2026-91930](https://insights.sbomify.com/CVE-2026-91930/): Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover (high 7.7)
- [CVE-2026-9193](https://insights.sbomify.com/CVE-2026-9193/): Privilege escalation in Progress MarkLogic Server Hadoop integration (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/252/