# Vulnerabilities published in 2026


- [CVE-2026-87017](https://insights.sbomify.com/CVE-2026-87017/): Open WebUI: Inaccessible knowledge bases are exposed through the built-in knowledge tool on most vector backends (medium 4.3)
- [CVE-2026-87016](https://insights.sbomify.com/CVE-2026-87016/): Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite (high 8.1)
- [CVE-2026-87015](https://insights.sbomify.com/CVE-2026-87015/): Open WebUI: A user's session cookies are sent to tool servers configured for bearer authentication (medium 6.8)
- [CVE-2026-87014](https://insights.sbomify.com/CVE-2026-87014/): Open WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notes (medium 6.5)
- [CVE-2026-87013](https://insights.sbomify.com/CVE-2026-87013/): Open WebUI: Any authenticated user can start a non-terminating request via a folder parent cycle (medium 4.3)
- [CVE-2026-87012](https://insights.sbomify.com/CVE-2026-87012/): Open WebUI: Any authenticated user can suppress calendar alerts instance-wide via a non-numeric alert value (medium 4.3)
- [CVE-2026-87011](https://insights.sbomify.com/CVE-2026-87011/): Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout (high 7.5)
- [CVE-2026-8701](https://insights.sbomify.com/CVE-2026-8701/): GNTT Post Title Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (medium 6.4)
- [CVE-2026-87004](https://insights.sbomify.com/CVE-2026-87004/): Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification (high 8.1)
- [CVE-2026-8700](https://insights.sbomify.com/CVE-2026-8700/): Crypt::DSA versions before 1.20 for Perl generate seeds using rand (high 7.3)
- [CVE-2026-86996](https://insights.sbomify.com/CVE-2026-86996/): n8n: Agent Workflow Tool Bypasses Sub-Workflow Caller Policy (medium 5.3)
- [CVE-2026-86995](https://insights.sbomify.com/CVE-2026-86995/): n8n: Git Node branch.<name>.remote Config Key Bypasses Sandbox Path Restriction, Enabling Local Git Repository Read (medium 5.3)
- [CVE-2026-86994](https://insights.sbomify.com/CVE-2026-86994/): n8n: Cross-User Active Workflow ID and Lifecycle Event Disclosure via Missing userId Filter (medium 5.3)
- [CVE-2026-86993](https://insights.sbomify.com/CVE-2026-86993/): n8n: Log Streaming Event Destinations Decrypt Generic-Auth Credentials Without Ownership Check (medium 5.9)
- [CVE-2026-86992](https://insights.sbomify.com/CVE-2026-86992/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86991](https://insights.sbomify.com/CVE-2026-86991/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86990](https://insights.sbomify.com/CVE-2026-86990/): Missing authorization in iOS and iPadOS (not scored)
- [CVE-2026-8699](https://insights.sbomify.com/CVE-2026-8699/): Stored Cross-Site Scripting (XSS) in TP-Link Archer C5 Web Management Interface (high 7.0)
- [CVE-2026-86989](https://insights.sbomify.com/CVE-2026-86989/): Information disclosure in iOS and iPadOS (not scored)
- [CVE-2026-86988](https://insights.sbomify.com/CVE-2026-86988/): Information disclosure in iOS and iPadOS (not scored)
- [CVE-2026-86987](https://insights.sbomify.com/CVE-2026-86987/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-86986](https://insights.sbomify.com/CVE-2026-86986/): Use after free in Safari (not scored)
- [CVE-2026-86985](https://insights.sbomify.com/CVE-2026-86985/): Denial of service in Safari (not scored)
- [CVE-2026-86984](https://insights.sbomify.com/CVE-2026-86984/): Information disclosure in macOS (not scored)
- [CVE-2026-86983](https://insights.sbomify.com/CVE-2026-86983/): Denial of service in swift-crypto (not scored)
- [CVE-2026-86981](https://insights.sbomify.com/CVE-2026-86981/): Memory corruption in macOS (medium 5.5)
- [CVE-2026-8698](https://insights.sbomify.com/CVE-2026-8698/): Cross-site scripting in Cryptocurrency Prijsvergelijking Widget (medium 6.4)
- [CVE-2026-86979](https://insights.sbomify.com/CVE-2026-86979/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-86978](https://insights.sbomify.com/CVE-2026-86978/): Information disclosure in iOS and iPadOS (not scored)
- [CVE-2026-86977](https://insights.sbomify.com/CVE-2026-86977/): Missing authorization in iOS and iPadOS (high 7.5)
- [CVE-2026-86976](https://insights.sbomify.com/CVE-2026-86976/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-86975](https://insights.sbomify.com/CVE-2026-86975/): Memory corruption in iOS and iPadOS (medium 4.3)
- [CVE-2026-86974](https://insights.sbomify.com/CVE-2026-86974/): Memory corruption in Safari (not scored)
- [CVE-2026-86973](https://insights.sbomify.com/CVE-2026-86973/): Memory corruption in Safari (not scored)
- [CVE-2026-86972](https://insights.sbomify.com/CVE-2026-86972/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86971](https://insights.sbomify.com/CVE-2026-86971/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2026-86970](https://insights.sbomify.com/CVE-2026-86970/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-8697](https://insights.sbomify.com/CVE-2026-8697/): Improper Authentication Rate Limiting on TP-Link's Archer C64 (high 8.7)
- [CVE-2026-86969](https://insights.sbomify.com/CVE-2026-86969/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86968](https://insights.sbomify.com/CVE-2026-86968/): Security feature bypass in iOS and iPadOS (not scored)
- [CVE-2026-86966](https://insights.sbomify.com/CVE-2026-86966/): Path traversal in iOS and iPadOS (not scored)
- [CVE-2026-86964](https://insights.sbomify.com/CVE-2026-86964/): Null dereference in iOS and iPadOS (not scored)
- [CVE-2026-86963](https://insights.sbomify.com/CVE-2026-86963/): Denial of service in iOS and iPadOS (medium 5.9)
- [CVE-2026-86962](https://insights.sbomify.com/CVE-2026-86962/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-86961](https://insights.sbomify.com/CVE-2026-86961/): Race condition in iOS and iPadOS (high 7.8)
- [CVE-2026-8696](https://insights.sbomify.com/CVE-2026-8696/): radare2 6.1.5 Use-After-Free via gdbr_pids_list() (high 8.7)
- [CVE-2026-86959](https://insights.sbomify.com/CVE-2026-86959/): Denial of service in iOS and iPadOS (not scored)
- [CVE-2026-86958](https://insights.sbomify.com/CVE-2026-86958/): Security feature bypass in macOS (not scored)
- [CVE-2026-86957](https://insights.sbomify.com/CVE-2026-86957/): Memory corruption in iOS and iPadOS (medium 6.5)
- [CVE-2026-86955](https://insights.sbomify.com/CVE-2026-86955/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-86954](https://insights.sbomify.com/CVE-2026-86954/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86953](https://insights.sbomify.com/CVE-2026-86953/): Memory corruption in iOS and iPadOS (medium 4.6)
- [CVE-2026-86950](https://insights.sbomify.com/CVE-2026-86950/): Apple Multiple Products Out-of-Bounds Write (high 8.8, exploited in the wild)
- [CVE-2026-8695](https://insights.sbomify.com/CVE-2026-8695/): radare2 6.1.5 Use-After-Free via gdbr_threads_list() (high 8.7)
- [CVE-2026-86949](https://insights.sbomify.com/CVE-2026-86949/): Security feature bypass in Xcode (high 8.8)
- [CVE-2026-86948](https://insights.sbomify.com/CVE-2026-86948/): Security feature bypass in Xcode (high 8.8)
- [CVE-2026-86946](https://insights.sbomify.com/CVE-2026-86946/): Use after free in macOS (not scored)
- [CVE-2026-86945](https://insights.sbomify.com/CVE-2026-86945/): Security feature bypass in macOS (not scored)
- [CVE-2026-86944](https://insights.sbomify.com/CVE-2026-86944/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86943](https://insights.sbomify.com/CVE-2026-86943/): Denial of service in macOS (not scored)
- [CVE-2026-86942](https://insights.sbomify.com/CVE-2026-86942/): Memory corruption in iOS and iPadOS (not scored)
- [CVE-2026-86941](https://insights.sbomify.com/CVE-2026-86941/): Security feature bypass in macOS (not scored)
- [CVE-2026-86940](https://insights.sbomify.com/CVE-2026-86940/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-8694](https://insights.sbomify.com/CVE-2026-8694/): Improper access control on the API documentation endpoint in PowerShell Universal (medium 5.3)
- [CVE-2026-86939](https://insights.sbomify.com/CVE-2026-86939/): Missing authorization in macOS (not scored)
- [CVE-2026-86938](https://insights.sbomify.com/CVE-2026-86938/): Privilege escalation in FileMaker Pro (high 7.3)
- [CVE-2026-86937](https://insights.sbomify.com/CVE-2026-86937/): Security feature bypass in macOS (not scored)
- [CVE-2026-86936](https://insights.sbomify.com/CVE-2026-86936/): Privilege escalation in macOS (not scored)
- [CVE-2026-86935](https://insights.sbomify.com/CVE-2026-86935/): Privilege escalation in macOS (medium 5.5)
- [CVE-2026-86934](https://insights.sbomify.com/CVE-2026-86934/): Auth bypass in FileMaker Server (critical 9.1)
- [CVE-2026-86933](https://insights.sbomify.com/CVE-2026-86933/): Privilege escalation in macOS (low 3.3)
- [CVE-2026-86932](https://insights.sbomify.com/CVE-2026-86932/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-86931](https://insights.sbomify.com/CVE-2026-86931/): Information disclosure in macOS (not scored)
- [CVE-2026-86930](https://insights.sbomify.com/CVE-2026-86930/): Memory corruption in FileMaker Server (critical 9.1)
- [CVE-2026-86929](https://insights.sbomify.com/CVE-2026-86929/): Memory corruption in macOS (high 8.8)
- [CVE-2026-86928](https://insights.sbomify.com/CVE-2026-86928/): Path traversal in macOS (medium 5.5)
- [CVE-2026-86926](https://insights.sbomify.com/CVE-2026-86926/): Memory corruption in FileMaker Server (high 7.8)
- [CVE-2026-86925](https://insights.sbomify.com/CVE-2026-86925/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-86924](https://insights.sbomify.com/CVE-2026-86924/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-86923](https://insights.sbomify.com/CVE-2026-86923/): Information disclosure in macOS (not scored)
- [CVE-2026-86922](https://insights.sbomify.com/CVE-2026-86922/): Memory corruption in Safari (high 8.8)
- [CVE-2026-86921](https://insights.sbomify.com/CVE-2026-86921/): Privilege escalation in iOS and iPadOS (medium 6.2)
- [CVE-2026-86920](https://insights.sbomify.com/CVE-2026-86920/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-8692](https://insights.sbomify.com/CVE-2026-8692/): Missing authorization in Vedrixa Forms – User Registration Form, Signup Form & Drag & Drop Form Builder (medium 4.3)
- [CVE-2026-86919](https://insights.sbomify.com/CVE-2026-86919/): Memory corruption in iOS and iPadOS (high 8.8)
- [CVE-2026-86918](https://insights.sbomify.com/CVE-2026-86918/): Memory corruption in iOS and iPadOS (medium 4.3)
- [CVE-2026-86917](https://insights.sbomify.com/CVE-2026-86917/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-86916](https://insights.sbomify.com/CVE-2026-86916/): Use after free in iOS and iPadOS (high 7.8)
- [CVE-2026-86915](https://insights.sbomify.com/CVE-2026-86915/): Race condition in macOS (medium 4.7)
- [CVE-2026-86914](https://insights.sbomify.com/CVE-2026-86914/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-86913](https://insights.sbomify.com/CVE-2026-86913/): Use after free in iOS and iPadOS (medium 5.4)
- [CVE-2026-86911](https://insights.sbomify.com/CVE-2026-86911/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-86910](https://insights.sbomify.com/CVE-2026-86910/): Path traversal in macOS (medium 5.5)
- [CVE-2026-86909](https://insights.sbomify.com/CVE-2026-86909/): Security feature bypass in macOS (medium 4.4)
- [CVE-2026-86907](https://insights.sbomify.com/CVE-2026-86907/): Missing authorization in macOS (medium 4.4)
- [CVE-2026-86905](https://insights.sbomify.com/CVE-2026-86905/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-86904](https://insights.sbomify.com/CVE-2026-86904/): Information disclosure in iOS and iPadOS (high 7.5)
- [CVE-2026-86903](https://insights.sbomify.com/CVE-2026-86903/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-86902](https://insights.sbomify.com/CVE-2026-86902/): Path traversal in macOS (medium 5.5)
- [CVE-2026-86901](https://insights.sbomify.com/CVE-2026-86901/): Memory corruption in macOS (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/294/