# Vulnerabilities published in 2026


- [CVE-2026-8832](https://insights.sbomify.com/CVE-2026-8832/): WPCode <= 2.3.5 - Authenticated (Author+) Remote Code Execution via CPT Capability Bypass via XML-RPC wp.newPost (high 8.8)
- [CVE-2026-8830](https://insights.sbomify.com/CVE-2026-8830/): Keycloak: Policy bypass during WebAuthn credential registration via client-side JavaScript manipulation (medium 4.3)
- [CVE-2026-88290](https://insights.sbomify.com/CVE-2026-88290/): GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion (high 7.5)
- [CVE-2026-8829](https://insights.sbomify.com/CVE-2026-8829/): HTML::Entities versions before 3.84 for Perl read freed heap memory in _decode_entities (high 7.5)
- [CVE-2026-88289](https://insights.sbomify.com/CVE-2026-88289/): GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers (high 7.5)
- [CVE-2026-88288](https://insights.sbomify.com/CVE-2026-88288/): GV-LPC2011/LPC2211 - Arbitrary File Read Through BKDownloadLink.cgi Symlink Creation (medium 6.5)
- [CVE-2026-88287](https://insights.sbomify.com/CVE-2026-88287/): GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service (high 7.5)
- [CVE-2026-88286](https://insights.sbomify.com/CVE-2026-88286/): GV-LPC2011/LPC2211 - PTZ Connection-State Accept-Loop Denial of Service (high 7.5)
- [CVE-2026-88285](https://insights.sbomify.com/CVE-2026-88285/): GV-LPC2011/LPC2211 - Unauthenticated PTZ Control Service (critical 9.4)
- [CVE-2026-88284](https://insights.sbomify.com/CVE-2026-88284/): GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service (medium 4.9)
- [CVE-2026-88283](https://insights.sbomify.com/CVE-2026-88283/): GV-LPC2011/LPC2211 - ONVIF CreateUsers Repeated-Element Stack-Frame Overflow Denial of Service (medium 4.9)
- [CVE-2026-88282](https://insights.sbomify.com/CVE-2026-88282/): GV-LPCLPC2011/2211 - Stored FTP-Username Command Injection (high 7.2)
- [CVE-2026-88281](https://insights.sbomify.com/CVE-2026-88281/): GV-LPC2011/LPC2211 - ONVIF DeleteUsers Repeated-Element Stack Overflow Denial of Service (medium 4.9)
- [CVE-2026-88280](https://insights.sbomify.com/CVE-2026-88280/): GV-LPC2011/LPC2211 - ONVIF SetUser Stack-Frame Overflow Denial of Service (medium 4.9)
- [CVE-2026-8828](https://insights.sbomify.com/CVE-2026-8828/): Missing authorization in ChromaDB (high 8.8)
- [CVE-2026-88279](https://insights.sbomify.com/CVE-2026-88279/): GV-LPC2011/LPC2211 - ONVIF CreateUsers Username/Password Stack-Frame Overflow Denial of Service (medium 4.9)
- [CVE-2026-88278](https://insights.sbomify.com/CVE-2026-88278/): GV-LPCLPC2011/2211 - ONVIF WS-Security PasswordDigest Replay (critical 9.8)
- [CVE-2026-88277](https://insights.sbomify.com/CVE-2026-88277/): GV-LPCLPC2011/2211 - ONVIF Subscribe Address Command Injection (high 8.8)
- [CVE-2026-88276](https://insights.sbomify.com/CVE-2026-88276/): GV-LPCLPC2011/2211 - Wireless WEP Key1-Key4 Command Injection (high 7.2)
- [CVE-2026-88275](https://insights.sbomify.com/CVE-2026-88275/): GV-LPC2011/LPC2211 - Wireless WPA-PSK Command Injection (high 7.2)
- [CVE-2026-88274](https://insights.sbomify.com/CVE-2026-88274/): GV-LPC2011/LPC2211 - Wireless SSID Command Injection (high 7.2)
- [CVE-2026-88273](https://insights.sbomify.com/CVE-2026-88273/): GV-LPC2011/LPC2211 - PPPoE Username Shell-Configuration Command Injection (high 7.2)
- [CVE-2026-88272](https://insights.sbomify.com/CVE-2026-88272/): GV-LPC2011/LPC2211 - Stored Administrator-Username Command Injection (high 7.2)
- [CVE-2026-88271](https://insights.sbomify.com/CVE-2026-88271/): GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover (high 8.8)
- [CVE-2026-88270](https://insights.sbomify.com/CVE-2026-88270/): GV-LPC2011/LPC2211 - SSVR Guest Firmware-Mode Pre-Validation Service Teardown Denial of Service (medium 6.5)
- [CVE-2026-8827](https://insights.sbomify.com/CVE-2026-8827/): SQL Injection in extension "Address List" (tt_address) (high 8.2)
- [CVE-2026-88269](https://insights.sbomify.com/CVE-2026-88269/): GV-LPC2011/LPC2211 - SSVR Guest Configuration and Credential Disclosure (medium 6.5)
- [CVE-2026-88268](https://insights.sbomify.com/CVE-2026-88268/): GV-LPC2011/LPC2211 - SSVR Fragment-Reassembly Stack Overflow Denial of Service (medium 6.5)
- [CVE-2026-88265](https://insights.sbomify.com/CVE-2026-88265/): Crun: crun: /dev/null symlink follow during stdio reopen allows host bind-mount write and chown (medium 5.6)
- [CVE-2026-88264](https://insights.sbomify.com/CVE-2026-88264/): Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs (medium 5.6)
- [CVE-2026-88263](https://insights.sbomify.com/CVE-2026-88263/): Missing authorization in SKS8300-12E2T2X (high 8.7)
- [CVE-2026-88262](https://insights.sbomify.com/CVE-2026-88262/): Auth bypass in xClick (high 8.7)
- [CVE-2026-88261](https://insights.sbomify.com/CVE-2026-88261/): Cross-site scripting in xClick (medium 5.1)
- [CVE-2026-88260](https://insights.sbomify.com/CVE-2026-88260/): Auth bypass in Zenius EMS 8.0 (high 8.7)
- [CVE-2026-88259](https://insights.sbomify.com/CVE-2026-88259/): CareCam CM2507 Missing Authentication for Critical Function (high 8.7)
- [CVE-2026-88257](https://insights.sbomify.com/CVE-2026-88257/): beam_mcp: nested tool argument constraints advertised but not enforced (medium 5.3)
- [CVE-2026-88255](https://insights.sbomify.com/CVE-2026-88255/): Business logic in mpp (medium 6.3)
- [CVE-2026-88252](https://insights.sbomify.com/CVE-2026-88252/): Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion (medium 4.7)
- [CVE-2026-8825](https://insights.sbomify.com/CVE-2026-8825/): Elementor < 4.1.4 - Contributor+ Sensitive Information Disclosure via REST API (medium 4.9)
- [CVE-2026-8824](https://insights.sbomify.com/CVE-2026-8824/): Memory corruption in vtk (high 7.5)
- [CVE-2026-8823](https://insights.sbomify.com/CVE-2026-8823/): User Manager can demote bot accounts to guest without bot-management permission (low 3.8)
- [CVE-2026-88226](https://insights.sbomify.com/CVE-2026-88226/): Windows Storage Port Driver Information Disclosure Vulnerability (medium 4.6)
- [CVE-2026-8822](https://insights.sbomify.com/CVE-2026-8822/): Memory corruption in vtk (high 7.5)
- [CVE-2026-88219](https://insights.sbomify.com/CVE-2026-88219/): RPC Runtime Library Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88210](https://insights.sbomify.com/CVE-2026-88210/): Microsoft Office Word Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-8821](https://insights.sbomify.com/CVE-2026-8821/): Playbooks run owner channel membership permission bypass (high 7.1)
- [CVE-2026-88209](https://insights.sbomify.com/CVE-2026-88209/): Microsoft Office SharePoint Spoofing Vulnerability (medium 4.6)
- [CVE-2026-88208](https://insights.sbomify.com/CVE-2026-88208/): Microsoft Office SharePoint Spoofing Vulnerability (medium 4.6)
- [CVE-2026-88207](https://insights.sbomify.com/CVE-2026-88207/): Microsoft Office PowerPoint Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-88206](https://insights.sbomify.com/CVE-2026-88206/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-88204](https://insights.sbomify.com/CVE-2026-88204/): Microsoft Office SharePoint Spoofing Vulnerability (high 7.3)
- [CVE-2026-88203](https://insights.sbomify.com/CVE-2026-88203/): Microsoft Office PowerPoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88202](https://insights.sbomify.com/CVE-2026-88202/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88201](https://insights.sbomify.com/CVE-2026-88201/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88200](https://insights.sbomify.com/CVE-2026-88200/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-88198](https://insights.sbomify.com/CVE-2026-88198/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-88197](https://insights.sbomify.com/CVE-2026-88197/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88196](https://insights.sbomify.com/CVE-2026-88196/): Microsoft Office Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88195](https://insights.sbomify.com/CVE-2026-88195/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88194](https://insights.sbomify.com/CVE-2026-88194/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88193](https://insights.sbomify.com/CVE-2026-88193/): Microsoft Scripting Engine Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88192](https://insights.sbomify.com/CVE-2026-88192/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88191](https://insights.sbomify.com/CVE-2026-88191/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88190](https://insights.sbomify.com/CVE-2026-88190/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88189](https://insights.sbomify.com/CVE-2026-88189/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88188](https://insights.sbomify.com/CVE-2026-88188/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88186](https://insights.sbomify.com/CVE-2026-88186/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88185](https://insights.sbomify.com/CVE-2026-88185/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-88184](https://insights.sbomify.com/CVE-2026-88184/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88183](https://insights.sbomify.com/CVE-2026-88183/): Microsoft Office PowerPoint Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88182](https://insights.sbomify.com/CVE-2026-88182/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88181](https://insights.sbomify.com/CVE-2026-88181/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88180](https://insights.sbomify.com/CVE-2026-88180/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88179](https://insights.sbomify.com/CVE-2026-88179/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88178](https://insights.sbomify.com/CVE-2026-88178/): Microsoft Office PowerPoint Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-88177](https://insights.sbomify.com/CVE-2026-88177/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88175](https://insights.sbomify.com/CVE-2026-88175/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88174](https://insights.sbomify.com/CVE-2026-88174/): Windows Deployment Services Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-88173](https://insights.sbomify.com/CVE-2026-88173/): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-88172](https://insights.sbomify.com/CVE-2026-88172/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88171](https://insights.sbomify.com/CVE-2026-88171/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-88169](https://insights.sbomify.com/CVE-2026-88169/): Microsoft Office Word Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88168](https://insights.sbomify.com/CVE-2026-88168/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88167](https://insights.sbomify.com/CVE-2026-88167/): Microsoft Office Word Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88166](https://insights.sbomify.com/CVE-2026-88166/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88165](https://insights.sbomify.com/CVE-2026-88165/): Windows Active Directory Domain Services Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88164](https://insights.sbomify.com/CVE-2026-88164/): Microsoft Office SharePoint Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-88163](https://insights.sbomify.com/CVE-2026-88163/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88162](https://insights.sbomify.com/CVE-2026-88162/): Windows Encrypting File System (EFS) Tampering Vulnerability (medium 5.5)
- [CVE-2026-88161](https://insights.sbomify.com/CVE-2026-88161/): Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-88160](https://insights.sbomify.com/CVE-2026-88160/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-88159](https://insights.sbomify.com/CVE-2026-88159/): Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88158](https://insights.sbomify.com/CVE-2026-88158/): Microsoft Digest Authentication Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-88157](https://insights.sbomify.com/CVE-2026-88157/): Microsoft OpenSSH for Windows Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88156](https://insights.sbomify.com/CVE-2026-88156/): Microsoft Office Outlook Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-88155](https://insights.sbomify.com/CVE-2026-88155/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-88154](https://insights.sbomify.com/CVE-2026-88154/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88153](https://insights.sbomify.com/CVE-2026-88153/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-88152](https://insights.sbomify.com/CVE-2026-88152/): Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-88151](https://insights.sbomify.com/CVE-2026-88151/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/282/