# Vulnerabilities published in 2026


- [CVE-2026-8558](https://insights.sbomify.com/CVE-2026-8558/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-85579](https://insights.sbomify.com/CVE-2026-85579/): SiYuan before v3.8.2 Information Disclosure via undoState (medium 5.3)
- [CVE-2026-85578](https://insights.sbomify.com/CVE-2026-85578/): SiYuan through 3.8.1 Authorization Bypass via getFile (high 7.1)
- [CVE-2026-85577](https://insights.sbomify.com/CVE-2026-85577/): AVideo userLogin.php Reflected XSS via error parameter (medium 5.3)
- [CVE-2026-85576](https://insights.sbomify.com/CVE-2026-85576/): All in One Files Upload for WooCommerce < 2.0.17 - Subscriber+ Arbitrary Plugin Settings Update (medium 4.3)
- [CVE-2026-85575](https://insights.sbomify.com/CVE-2026-85575/): Cross-site scripting in ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution with eCommerce Templates & Woo Widgets (medium 6.4)
- [CVE-2026-85574](https://insights.sbomify.com/CVE-2026-85574/): Unbounce Landing Pages 1.1.1 - 1.1.4 - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains (high 8.0)
- [CVE-2026-85573](https://insights.sbomify.com/CVE-2026-85573/): All in One Files Upload for WooCommerce 2.0.3 - 2.0.16 - Unauthenticated Stored XSS via SVG Upload (high 8.8)
- [CVE-2026-85572](https://insights.sbomify.com/CVE-2026-85572/): Tutor LMS 4.0.0 - < 4.0.8 - Subscriber+ Cross-Course Lesson Comment Disclosure (medium 4.3)
- [CVE-2026-85571](https://insights.sbomify.com/CVE-2026-85571/): Tutor LMS 4.0.5 - 4.1.0 - Instructor+ Arbitrary Post Reparenting via IDOR (medium 6.5)
- [CVE-2026-8557](https://insights.sbomify.com/CVE-2026-8557/): Use after free in Chrome (high 7.5)
- [CVE-2026-85569](https://insights.sbomify.com/CVE-2026-85569/): Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification (high 7.2)
- [CVE-2026-85568](https://insights.sbomify.com/CVE-2026-85568/): Unlimited Elements For Elementor 1.5.139 - 2.0.20 - Unauthenticated SQLi via 'ucs' Parameter (medium 6.8)
- [CVE-2026-8556](https://insights.sbomify.com/CVE-2026-8556/): Information disclosure in Chrome (low 3.1)
- [CVE-2026-8555](https://insights.sbomify.com/CVE-2026-8555/): Use after free in Chrome (high 8.8)
- [CVE-2026-85547](https://insights.sbomify.com/CVE-2026-85547/): Cross-Site Request Forgery via Attacker-Controlled REST Detection in MISP (medium 6.2)
- [CVE-2026-85546](https://insights.sbomify.com/CVE-2026-85546/): MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests (high 8.6)
- [CVE-2026-85545](https://insights.sbomify.com/CVE-2026-85545/): Missing authorization in HikCentral Access Control (high 7.1)
- [CVE-2026-85544](https://insights.sbomify.com/CVE-2026-85544/): Hardcoded credentials in DS-KD8003 (medium 6.1)
- [CVE-2026-85543](https://insights.sbomify.com/CVE-2026-85543/): Missing authorization in Wi-Fi series camera (medium 4.3)
- [CVE-2026-85542](https://insights.sbomify.com/CVE-2026-85542/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.8)
- [CVE-2026-85541](https://insights.sbomify.com/CVE-2026-85541/): Interinfo｜DreamMaker - Reflected Cross-site Scripting (medium 4.8)
- [CVE-2026-85540](https://insights.sbomify.com/CVE-2026-85540/): Interinfo｜DreamMaker - SQL Injection (high 8.7)
- [CVE-2026-8554](https://insights.sbomify.com/CVE-2026-8554/): Memory corruption in Chrome (low 3.1)
- [CVE-2026-85538](https://insights.sbomify.com/CVE-2026-85538/): MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes (high 8.3)
- [CVE-2026-85534](https://insights.sbomify.com/CVE-2026-85534/): Denial of service in Red Hat Enterprise Linux 10 (medium 5.9)
- [CVE-2026-85533](https://insights.sbomify.com/CVE-2026-85533/): MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter (high 7.6)
- [CVE-2026-85532](https://insights.sbomify.com/CVE-2026-85532/): Apache WSS4J: Insufficient Validation of Derived-Key Parameters (high 7.5)
- [CVE-2026-85531](https://insights.sbomify.com/CVE-2026-85531/): Payment Validation Bypass in Sipay Electronic Money's OpenCart 3.x (critical 9.8)
- [CVE-2026-85530](https://insights.sbomify.com/CVE-2026-85530/): GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch (high 8.1)
- [CVE-2026-8553](https://insights.sbomify.com/CVE-2026-8553/): Use after free in Chrome (low 3.1)
- [CVE-2026-85529](https://insights.sbomify.com/CVE-2026-85529/): Incorrect Authorization in GitLab (medium 5.3)
- [CVE-2026-85528](https://insights.sbomify.com/CVE-2026-85528/): Snowflake JDBC Driver auto-configuration account validation permits credential redirection (medium 5.3)
- [CVE-2026-85526](https://insights.sbomify.com/CVE-2026-85526/): Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD (critical 9.9)
- [CVE-2026-85525](https://insights.sbomify.com/CVE-2026-85525/): Improper OCSP response validation in Snowflake drivers (high 7.4)
- [CVE-2026-85523](https://insights.sbomify.com/CVE-2026-85523/): OS Command Injection in Felisify Informatics' SambaBox (high 8.8)
- [CVE-2026-85522](https://insights.sbomify.com/CVE-2026-85522/): valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds (medium 6.9)
- [CVE-2026-85520](https://insights.sbomify.com/CVE-2026-85520/): Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module (critical 9.3)
- [CVE-2026-8552](https://insights.sbomify.com/CVE-2026-8552/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-85518](https://insights.sbomify.com/CVE-2026-85518/): Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition (medium 6.1)
- [CVE-2026-85517](https://insights.sbomify.com/CVE-2026-85517/): code-projects Vehicle Management System SQL Database Backup File vehicle_management.sql information disclosure (medium 6.9)
- [CVE-2026-85516](https://insights.sbomify.com/CVE-2026-85516/): code-projects Vehicle Management System busprofile.php sql injection (medium 6.9)
- [CVE-2026-85515](https://insights.sbomify.com/CVE-2026-85515/): OpenPGP message truncation not reported, bypassing the SEIPDv1 integrity check (high 8.2)
- [CVE-2026-85514](https://insights.sbomify.com/CVE-2026-85514/): StackStorm st2 API Key auth.py privileges management (medium 5.3)
- [CVE-2026-85513](https://insights.sbomify.com/CVE-2026-85513/): StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management (medium 5.3)
- [CVE-2026-85512](https://insights.sbomify.com/CVE-2026-85512/): SourceCodester Class and Exam Timetabling System session.php authorization (medium 6.9)
- [CVE-2026-85511](https://insights.sbomify.com/CVE-2026-85511/): Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2 (medium 4.2)
- [CVE-2026-8551](https://insights.sbomify.com/CVE-2026-8551/): Use after free in Chrome (high 8.8)
- [CVE-2026-85509](https://insights.sbomify.com/CVE-2026-85509/): Memory corruption in FreeIPMI (critical 9.8)
- [CVE-2026-85508](https://insights.sbomify.com/CVE-2026-85508/): Memory corruption in FreeIPMI (critical 9.8)
- [CVE-2026-85507](https://insights.sbomify.com/CVE-2026-85507/): Memory corruption in FreeIPMI (critical 9.8)
- [CVE-2026-85506](https://insights.sbomify.com/CVE-2026-85506/): Memory corruption in FreeIPMI (critical 9.8)
- [CVE-2026-85505](https://insights.sbomify.com/CVE-2026-85505/): Memory corruption in FreeIPMI (high 7.5)
- [CVE-2026-85504](https://insights.sbomify.com/CVE-2026-85504/): Memory corruption in FreeIPMI (critical 9.8)
- [CVE-2026-85501](https://insights.sbomify.com/CVE-2026-85501/): Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC (medium 5.3)
- [CVE-2026-85500](https://insights.sbomify.com/CVE-2026-85500/): `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication (critical 9.1)
- [CVE-2026-8550](https://insights.sbomify.com/CVE-2026-8550/): Use after free in Chrome (medium 6.5)
- [CVE-2026-85499](https://insights.sbomify.com/CVE-2026-85499/): Apache SkyWalking BanyanDB: Canopy does not enforce readonly-role restrictions on the /monitoring/* proxy (critical 9.1)
- [CVE-2026-85498](https://insights.sbomify.com/CVE-2026-85498/): Polkit: regression in cve-2026-4897 fix (polkit read_cookie()) - stack buffer underflow (low 3.5)
- [CVE-2026-85497](https://insights.sbomify.com/CVE-2026-85497/): CareCam CM2507 Use of Password Hash With Insufficient Computational Effort (critical 9.3)
- [CVE-2026-85496](https://insights.sbomify.com/CVE-2026-85496/): Botslab G980H Dashcams Generation of Predictable Numbers or Identifiers (high 7.7)
- [CVE-2026-85494](https://insights.sbomify.com/CVE-2026-85494/): Denial of service in Apache Thrift (high 8.7)
- [CVE-2026-85493](https://insights.sbomify.com/CVE-2026-85493/): Denial of service in Apache Thrift (high 8.7)
- [CVE-2026-85492](https://insights.sbomify.com/CVE-2026-85492/): All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname (medium 6.1)
- [CVE-2026-85491](https://insights.sbomify.com/CVE-2026-85491/): Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a disp (high 8.8)
- [CVE-2026-85490](https://insights.sbomify.com/CVE-2026-85490/): Path traversal in Brocade Active Support Connectivity Gateway (high 7.7)
- [CVE-2026-8549](https://insights.sbomify.com/CVE-2026-8549/): Use after free in Chrome (high 8.8)
- [CVE-2026-85489](https://insights.sbomify.com/CVE-2026-85489/): Auth bypass in Brocade Active Support Connectivity Gateway (high 8.7)
- [CVE-2026-85488](https://insights.sbomify.com/CVE-2026-85488/): Hardcoded credentials in Brocade Active Support Connectivity Gateway (high 7.0)
- [CVE-2026-85487](https://insights.sbomify.com/CVE-2026-85487/): Path traversal in Brocade Active Support Connectivity Gateway (high 8.6)
- [CVE-2026-85486](https://insights.sbomify.com/CVE-2026-85486/): Code injection in Brocade Active Support Connectivity Gateway (high 8.6)
- [CVE-2026-85485](https://insights.sbomify.com/CVE-2026-85485/): HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping (medium 6.1)
- [CVE-2026-85484](https://insights.sbomify.com/CVE-2026-85484/): HTML::FormHandler versions before 0.410002 for Perl render option group labels and radio button labels into HTML without escaping. (medium 6.1)
- [CVE-2026-85483](https://insights.sbomify.com/CVE-2026-85483/): Apache Thrift: c_glib TZlibTransport reports a full read after a premature stream end (medium 6.3)
- [CVE-2026-8548](https://insights.sbomify.com/CVE-2026-8548/): Memory corruption in Chrome (high 8.3)
- [CVE-2026-85479](https://insights.sbomify.com/CVE-2026-85479/): Grid Protection Alliance openPDC and openHistorian Missing Authentication for Critical Function (medium 6.9)
- [CVE-2026-85478](https://insights.sbomify.com/CVE-2026-85478/): CareCam CM2507 Missing Authentication for Critical Function (low 2.4)
- [CVE-2026-85476](https://insights.sbomify.com/CVE-2026-85476/): Apache Thrift: c_glib `read_all` spins when the underlying read returns 0 (high 8.2)
- [CVE-2026-85475](https://insights.sbomify.com/CVE-2026-85475/): Code injection in Red Hat Ansible Automation Platform 2 (high 7.2)
- [CVE-2026-85473](https://insights.sbomify.com/CVE-2026-85473/): Out-of-Range Timestamp Claim Handling in auth0/java-jwt (medium 5.3)
- [CVE-2026-85471](https://insights.sbomify.com/CVE-2026-85471/): Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable (medium 6.4)
- [CVE-2026-8547](https://insights.sbomify.com/CVE-2026-8547/): Missing authorization in Chrome (high 7.5)
- [CVE-2026-85469](https://insights.sbomify.com/CVE-2026-85469/): Supply chain in Red Hat Quay 3 (high 8.0)
- [CVE-2026-8546](https://insights.sbomify.com/CVE-2026-8546/): Memory corruption in Chrome (medium 5.3)
- [CVE-2026-85458](https://insights.sbomify.com/CVE-2026-85458/): Divide-by-zero in Xpdf 4.06 due to zero-height Type 3 glyph (low 2.1)
- [CVE-2026-85457](https://insights.sbomify.com/CVE-2026-85457/): IBM Planning Analytics Local is affected by security vulnerabilities (high 8.1)
- [CVE-2026-85456](https://insights.sbomify.com/CVE-2026-85456/): MOOS-IvP through 24.8.1 alog Splitting Path Traversal on Windows (medium 6.8)
- [CVE-2026-85455](https://insights.sbomify.com/CVE-2026-85455/): MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet (high 8.8)
- [CVE-2026-85454](https://insights.sbomify.com/CVE-2026-85454/): MOOS core-moos through 10.4.0 Off-by-One Buffer Overflow in Serial Telegram Handling (medium 5.2)
- [CVE-2026-85453](https://insights.sbomify.com/CVE-2026-85453/): MOOS core-moos through 10.4.0 MOOSDB HTTP Pages Stored Cross-Site Scripting (medium 5.3)
- [CVE-2026-85452](https://insights.sbomify.com/CVE-2026-85452/): MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers (high 8.7)
- [CVE-2026-85451](https://insights.sbomify.com/CVE-2026-85451/): MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase (high 7.1)
- [CVE-2026-85450](https://insights.sbomify.com/CVE-2026-85450/): MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion (high 8.7)
- [CVE-2026-8545](https://insights.sbomify.com/CVE-2026-8545/): Memory corruption in Chrome (low 3.1)
- [CVE-2026-85449](https://insights.sbomify.com/CVE-2026-85449/): MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT (high 8.7)
- [CVE-2026-85448](https://insights.sbomify.com/CVE-2026-85448/): MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention (high 8.7)
- [CVE-2026-85447](https://insights.sbomify.com/CVE-2026-85447/): MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service (high 8.7)
- [CVE-2026-85446](https://insights.sbomify.com/CVE-2026-85446/): MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service (high 8.7)
- [CVE-2026-85445](https://insights.sbomify.com/CVE-2026-85445/): MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count (high 8.7)
- [CVE-2026-85444](https://insights.sbomify.com/CVE-2026-85444/): MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/306/