# Vulnerabilities published in 2026


- [CVE-2026-87604](https://insights.sbomify.com/CVE-2026-87604/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-87603](https://insights.sbomify.com/CVE-2026-87603/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87602](https://insights.sbomify.com/CVE-2026-87602/): Memory corruption in Chrome (medium 4.7)
- [CVE-2026-87601](https://insights.sbomify.com/CVE-2026-87601/): Race condition in Chrome (high 7.5)
- [CVE-2026-87600](https://insights.sbomify.com/CVE-2026-87600/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-8760](https://insights.sbomify.com/CVE-2026-8760/): Login with OTP <= 1.6 - Unauthenticated Authentication Bypass via OTP Brute Force (critical 9.8)
- [CVE-2026-87599](https://insights.sbomify.com/CVE-2026-87599/): Other in Chrome (medium 5.4)
- [CVE-2026-87598](https://insights.sbomify.com/CVE-2026-87598/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87597](https://insights.sbomify.com/CVE-2026-87597/): Other in Chrome (medium 4.8)
- [CVE-2026-87596](https://insights.sbomify.com/CVE-2026-87596/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-87595](https://insights.sbomify.com/CVE-2026-87595/): Server-side request forgery in Chrome (critical 9.8)
- [CVE-2026-87594](https://insights.sbomify.com/CVE-2026-87594/): Missing authorization in Chrome (medium 5.3)
- [CVE-2026-87593](https://insights.sbomify.com/CVE-2026-87593/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87592](https://insights.sbomify.com/CVE-2026-87592/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-87591](https://insights.sbomify.com/CVE-2026-87591/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87590](https://insights.sbomify.com/CVE-2026-87590/): Information disclosure in Chrome (medium 5.9)
- [CVE-2026-8759](https://insights.sbomify.com/CVE-2026-8759/): xiandafu beetl SpELFunction SpELFunction.java expression language injection (medium 6.9)
- [CVE-2026-87589](https://insights.sbomify.com/CVE-2026-87589/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87588](https://insights.sbomify.com/CVE-2026-87588/): Use after free in Chrome (high 8.8)
- [CVE-2026-87587](https://insights.sbomify.com/CVE-2026-87587/): Use after free in Chrome (high 8.8)
- [CVE-2026-87586](https://insights.sbomify.com/CVE-2026-87586/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-87585](https://insights.sbomify.com/CVE-2026-87585/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-87584](https://insights.sbomify.com/CVE-2026-87584/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87583](https://insights.sbomify.com/CVE-2026-87583/): Other in Chrome (medium 5.4)
- [CVE-2026-87582](https://insights.sbomify.com/CVE-2026-87582/): Other in Chrome (high 8.3)
- [CVE-2026-87581](https://insights.sbomify.com/CVE-2026-87581/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87580](https://insights.sbomify.com/CVE-2026-87580/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-8758](https://insights.sbomify.com/CVE-2026-8758/): Metasoft 美特软件 MetaCRM upload3.jsp unrestricted upload (medium 6.9)
- [CVE-2026-87579](https://insights.sbomify.com/CVE-2026-87579/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-87578](https://insights.sbomify.com/CVE-2026-87578/): Use after free in Chrome (high 8.3)
- [CVE-2026-87577](https://insights.sbomify.com/CVE-2026-87577/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87576](https://insights.sbomify.com/CVE-2026-87576/): Information disclosure in Chrome (low 3.4)
- [CVE-2026-87575](https://insights.sbomify.com/CVE-2026-87575/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-87574](https://insights.sbomify.com/CVE-2026-87574/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-87573](https://insights.sbomify.com/CVE-2026-87573/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87572](https://insights.sbomify.com/CVE-2026-87572/): Code injection in Chrome (high 8.3)
- [CVE-2026-87571](https://insights.sbomify.com/CVE-2026-87571/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-87570](https://insights.sbomify.com/CVE-2026-87570/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-8757](https://insights.sbomify.com/CVE-2026-8757/): adenhq hive Delete Request routes_sessions.py _read_events_tail path traversal (medium 6.9)
- [CVE-2026-87569](https://insights.sbomify.com/CVE-2026-87569/): Missing authorization in Chrome (high 8.8)
- [CVE-2026-87568](https://insights.sbomify.com/CVE-2026-87568/): Other in Chrome (medium 4.8)
- [CVE-2026-87567](https://insights.sbomify.com/CVE-2026-87567/): Other in Chrome (medium 5.4)
- [CVE-2026-87566](https://insights.sbomify.com/CVE-2026-87566/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-87565](https://insights.sbomify.com/CVE-2026-87565/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87564](https://insights.sbomify.com/CVE-2026-87564/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-87563](https://insights.sbomify.com/CVE-2026-87563/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87562](https://insights.sbomify.com/CVE-2026-87562/): Other in Chrome (medium 5.4)
- [CVE-2026-87561](https://insights.sbomify.com/CVE-2026-87561/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87560](https://insights.sbomify.com/CVE-2026-87560/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-8756](https://insights.sbomify.com/CVE-2026-8756/): fishaudio Bert-VITS2 Gradio webui_preprocess.py generate_config path traversal (medium 6.9)
- [CVE-2026-87559](https://insights.sbomify.com/CVE-2026-87559/): Other in Chrome (medium 4.2)
- [CVE-2026-87558](https://insights.sbomify.com/CVE-2026-87558/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87557](https://insights.sbomify.com/CVE-2026-87557/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-87556](https://insights.sbomify.com/CVE-2026-87556/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-87555](https://insights.sbomify.com/CVE-2026-87555/): Information disclosure in Chrome (medium 4.7)
- [CVE-2026-87554](https://insights.sbomify.com/CVE-2026-87554/): Race condition in Chrome (high 8.1)
- [CVE-2026-87553](https://insights.sbomify.com/CVE-2026-87553/): Security feature bypass in Chrome (high 8.3)
- [CVE-2026-87552](https://insights.sbomify.com/CVE-2026-87552/): Missing authorization in Chrome (medium 5.5)
- [CVE-2026-87551](https://insights.sbomify.com/CVE-2026-87551/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87550](https://insights.sbomify.com/CVE-2026-87550/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-8755](https://insights.sbomify.com/CVE-2026-8755/): fishaudio Bert-VITS2 Model hiyoriUI.py _get_all_models path traversal (medium 6.9)
- [CVE-2026-87549](https://insights.sbomify.com/CVE-2026-87549/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87548](https://insights.sbomify.com/CVE-2026-87548/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87547](https://insights.sbomify.com/CVE-2026-87547/): Other in Chrome (critical 9.6)
- [CVE-2026-87546](https://insights.sbomify.com/CVE-2026-87546/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-87545](https://insights.sbomify.com/CVE-2026-87545/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87544](https://insights.sbomify.com/CVE-2026-87544/): Security feature bypass in Chrome (high 8.8)
- [CVE-2026-87543](https://insights.sbomify.com/CVE-2026-87543/): Missing authorization in Chrome (medium 4.3)
- [CVE-2026-87542](https://insights.sbomify.com/CVE-2026-87542/): Use after free in Chrome (high 8.8)
- [CVE-2026-87541](https://insights.sbomify.com/CVE-2026-87541/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-87540](https://insights.sbomify.com/CVE-2026-87540/): Security feature bypass in Chrome (medium 5.4)
- [CVE-2026-8754](https://insights.sbomify.com/CVE-2026-8754/): AstrBotDevs AstrBot File Upload chat.py post_file path traversal (medium 5.3)
- [CVE-2026-87539](https://insights.sbomify.com/CVE-2026-87539/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-87538](https://insights.sbomify.com/CVE-2026-87538/): Other in Chrome (medium 4.2)
- [CVE-2026-87537](https://insights.sbomify.com/CVE-2026-87537/): Missing authorization in Chrome (high 8.1)
- [CVE-2026-87536](https://insights.sbomify.com/CVE-2026-87536/): Use after free in Chrome (high 8.8)
- [CVE-2026-87535](https://insights.sbomify.com/CVE-2026-87535/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87534](https://insights.sbomify.com/CVE-2026-87534/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87533](https://insights.sbomify.com/CVE-2026-87533/): Use after free in Chrome (high 8.1)
- [CVE-2026-87532](https://insights.sbomify.com/CVE-2026-87532/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87531](https://insights.sbomify.com/CVE-2026-87531/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-87530](https://insights.sbomify.com/CVE-2026-87530/): Other in Chrome (high 8.1)
- [CVE-2026-8753](https://insights.sbomify.com/CVE-2026-8753/): kalcaddle Kodbox fileThumb Plugin VideoResize.class.php parseVideoInfo command injection (medium 5.3)
- [CVE-2026-87529](https://insights.sbomify.com/CVE-2026-87529/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-87528](https://insights.sbomify.com/CVE-2026-87528/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-87527](https://insights.sbomify.com/CVE-2026-87527/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-87526](https://insights.sbomify.com/CVE-2026-87526/): Use after free in Chrome (critical 9.6)
- [CVE-2026-87525](https://insights.sbomify.com/CVE-2026-87525/): Memory corruption in Chrome (low 2.7)
- [CVE-2026-87524](https://insights.sbomify.com/CVE-2026-87524/): Use after free in Chrome (high 8.3)
- [CVE-2026-87523](https://insights.sbomify.com/CVE-2026-87523/): Race condition in Chrome (medium 6.5)
- [CVE-2026-87522](https://insights.sbomify.com/CVE-2026-87522/): Missing authorization in Chrome (medium 6.5)
- [CVE-2026-87521](https://insights.sbomify.com/CVE-2026-87521/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-87520](https://insights.sbomify.com/CVE-2026-87520/): Use after free in Chrome (critical 9.6)
- [CVE-2026-8752](https://insights.sbomify.com/CVE-2026-8752/): h2oai h2o-3 Rapids setproperty Primitive AstSetProperty.java exec access control (medium 6.9)
- [CVE-2026-87519](https://insights.sbomify.com/CVE-2026-87519/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87518](https://insights.sbomify.com/CVE-2026-87518/): Information disclosure in Chrome (medium 5.3)
- [CVE-2026-87517](https://insights.sbomify.com/CVE-2026-87517/): Race condition in Chrome (low 3.1)
- [CVE-2026-87516](https://insights.sbomify.com/CVE-2026-87516/): Information disclosure in Chrome (medium 4.3)
- [CVE-2026-87515](https://insights.sbomify.com/CVE-2026-87515/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-87514](https://insights.sbomify.com/CVE-2026-87514/): Use after free in Chrome (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/288/