# Vulnerabilities published in 2026


- [CVE-2026-82988](https://insights.sbomify.com/CVE-2026-82988/): CVE-2026-82988 (high 7.5)
- [CVE-2026-82987](https://insights.sbomify.com/CVE-2026-82987/): CVE-2026-82987 (not scored)
- [CVE-2026-82986](https://insights.sbomify.com/CVE-2026-82986/): Missing authorization in Tables (medium 4.6)
- [CVE-2026-82985](https://insights.sbomify.com/CVE-2026-82985/): Missing authorization in Server (medium 6.5)
- [CVE-2026-82984](https://insights.sbomify.com/CVE-2026-82984/): Missing authorization in Server (medium 4.3)
- [CVE-2026-82983](https://insights.sbomify.com/CVE-2026-82983/): Missing authorization in Tables (low 3.3)
- [CVE-2026-82982](https://insights.sbomify.com/CVE-2026-82982/): Business logic in Approval (medium 4.3)
- [CVE-2026-82980](https://insights.sbomify.com/CVE-2026-82980/): Missing authorization in Files Lock (medium 6.3)
- [CVE-2026-82973](https://insights.sbomify.com/CVE-2026-82973/): Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox (critical 9.4)
- [CVE-2026-82971](https://insights.sbomify.com/CVE-2026-82971/): QVidium Opera11 CGI Script net_tr.cgi command injection (critical 10.0)
- [CVE-2026-82970](https://insights.sbomify.com/CVE-2026-82970/): WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability (critical 10.0)
- [CVE-2026-8297](https://insights.sbomify.com/CVE-2026-8297/): SQLi in GIS Informatics' GisLab Laboratory Management System (critical 9.8)
- [CVE-2026-82969](https://insights.sbomify.com/CVE-2026-82969/): Stored XSS in BİMSER's eBA Plus (medium 5.4)
- [CVE-2026-82968](https://insights.sbomify.com/CVE-2026-82968/): Auth bypass in Red Hat Build of Keycloak (medium 6.4)
- [CVE-2026-82967](https://insights.sbomify.com/CVE-2026-82967/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (critical 9.8)
- [CVE-2026-82964](https://insights.sbomify.com/CVE-2026-82964/): Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys (high 8.8)
- [CVE-2026-82962](https://insights.sbomify.com/CVE-2026-82962/): Out-of-bounds write in Zephyr Ethernet L2 when adding the link-layer header to a forwarded packet (medium 6.5)
- [CVE-2026-82961](https://insights.sbomify.com/CVE-2026-82961/): Unvalidated pin index in GPIO syscall handlers allows out-of-bounds kernel writes from user mode (high 7.8)
- [CVE-2026-8296](https://insights.sbomify.com/CVE-2026-8296/): Cross-site scripting in Octopus Server (medium 5.6)
- [CVE-2026-82958](https://insights.sbomify.com/CVE-2026-82958/): Code injection in Eclipse Ditto (high 7.6)
- [CVE-2026-82957](https://insights.sbomify.com/CVE-2026-82957/): hyperledger-firefly Webhook Subscription webhooks.go ValidateOptions server-side request forgery (medium 6.9)
- [CVE-2026-82955](https://insights.sbomify.com/CVE-2026-82955/): Security feature bypass in Eclipse aeriOS (critical 9.0)
- [CVE-2026-82954](https://insights.sbomify.com/CVE-2026-82954/): Dokploy Settings application.ts writeTraefikConfigInPath path traversal (critical 9.4)
- [CVE-2026-82953](https://insights.sbomify.com/CVE-2026-82953/): Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service (medium 5.3)
- [CVE-2026-8295](https://insights.sbomify.com/CVE-2026-8295/): Integer overflow in simdjson (medium 6.9)
- [CVE-2026-82947](https://insights.sbomify.com/CVE-2026-82947/): Multiple Out-of-Bounds Reads in Frame Processing (high 7.1)
- [CVE-2026-82946](https://insights.sbomify.com/CVE-2026-82946/): Null Pointer Dereference in Mailbox Error Handling (medium 6.5)
- [CVE-2026-82945](https://insights.sbomify.com/CVE-2026-82945/): Memory Corruption via FMMU Configuration Table Overflow (medium 6.5)
- [CVE-2026-82944](https://insights.sbomify.com/CVE-2026-82944/): Buffer Overflow in CoE SDO Upload Multi-Segment Data Transfers (high 8.8)
- [CVE-2026-82943](https://insights.sbomify.com/CVE-2026-82943/): Out-of-Bounds Read via Unchecked Length Values (medium 6.5)
- [CVE-2026-82942](https://insights.sbomify.com/CVE-2026-82942/): Apache bRPC: Race Condition on the Shared Socket Input Buffer in the RDMA Transport Causes Remote Denial of Service (not scored)
- [CVE-2026-82936](https://insights.sbomify.com/CVE-2026-82936/): Denial of Service in mH-DEVELOPER (medium 5.9)
- [CVE-2026-82935](https://insights.sbomify.com/CVE-2026-82935/): Use of End-of-Life components in mH-DEVELOPER (medium 6.9)
- [CVE-2026-82933](https://insights.sbomify.com/CVE-2026-82933/): Cleartext Transmission of Sensitive Information in mH-DEVELOPER (medium 6.0)
- [CVE-2026-82932](https://insights.sbomify.com/CVE-2026-82932/): Missing Firewall Configuration in mH-DEVELOPER (medium 5.3)
- [CVE-2026-82930](https://insights.sbomify.com/CVE-2026-82930/): Missing Authentication in mH-DEVELOPER (medium 6.4)
- [CVE-2026-8293](https://insights.sbomify.com/CVE-2026-8293/): Really Simple Security < 9.5.10.1 - Authentication Bypass via Two-Factor OTP Skip (high 7.5)
- [CVE-2026-82929](https://insights.sbomify.com/CVE-2026-82929/): Use of Shared Cryptographic Key in mH-DEVELOPER (medium 6.3)
- [CVE-2026-82928](https://insights.sbomify.com/CVE-2026-82928/): Undocumented access path in mH-DEVELOPER (high 7.7)
- [CVE-2026-82927](https://insights.sbomify.com/CVE-2026-82927/): Memory corruption in mTower (medium 5.5)
- [CVE-2026-82926](https://insights.sbomify.com/CVE-2026-82926/): Null dereference in mTower (medium 5.5)
- [CVE-2026-82925](https://insights.sbomify.com/CVE-2026-82925/): Site Reviews 7.2.2 - 8.2.2 - Unauthenticated PHP Object Injection via Form Signature (high 8.1)
- [CVE-2026-82924](https://insights.sbomify.com/CVE-2026-82924/): PII Enumeration via Missing Rate Limiting in Pusula Communication's Expert Mail (medium 5.3)
- [CVE-2026-82923](https://insights.sbomify.com/CVE-2026-82923/): AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes (critical 9.8)
- [CVE-2026-82922](https://insights.sbomify.com/CVE-2026-82922/): ShopEx ECShop flow.php flow_update_cart sql injection (medium 6.9)
- [CVE-2026-82921](https://insights.sbomify.com/CVE-2026-82921/): ShopEx ECShop pack.php check_img_type unrestricted upload (medium 6.9)
- [CVE-2026-82920](https://insights.sbomify.com/CVE-2026-82920/): Mattermost ABAC parent policy bypass via policy update endpoint (medium 5.5)
- [CVE-2026-8292](https://insights.sbomify.com/CVE-2026-8292/): Open5GS NRF conv.c yuarel_parse denial of service (medium 5.3)
- [CVE-2026-82919](https://insights.sbomify.com/CVE-2026-82919/): cu silicon edit Endpoint views.py create_app missing authentication (medium 6.9)
- [CVE-2026-82918](https://insights.sbomify.com/CVE-2026-82918/): XML external entity in LJ Series Terminal-Software (medium 6.7)
- [CVE-2026-82915](https://insights.sbomify.com/CVE-2026-82915/): Path Traversal in Bimser Solution Software's eBA Plus (medium 6.5)
- [CVE-2026-82914](https://insights.sbomify.com/CVE-2026-82914/): kishan0725 Hospital-Management-System search.php sql injection (medium 6.9)
- [CVE-2026-82911](https://insights.sbomify.com/CVE-2026-82911/): CSRF in Prospero Flow CRM order confirmation allows unauthorized order state changes (medium 5.1)
- [CVE-2026-8291](https://insights.sbomify.com/CVE-2026-8291/): Open5GS NRF nnrf-handler.c ogs_nnrf_nfm_handle_nf_profile denial of service (medium 5.3)
- [CVE-2026-82909](https://insights.sbomify.com/CVE-2026-82909/): QuantumNous new-api Revoked API Token token session expiration (medium 5.3)
- [CVE-2026-82908](https://insights.sbomify.com/CVE-2026-82908/): MSI Dragon Center MMIO Write Path NTIOLib_X64.sys MmioWritePath integer overflow (critical 9.3)
- [CVE-2026-82906](https://insights.sbomify.com/CVE-2026-82906/): sdcb chats Signed File Download Endpoint FileController.cs DownloadPublic missing authentication (medium 6.3)
- [CVE-2026-82905](https://insights.sbomify.com/CVE-2026-82905/): sdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgery (medium 5.3)
- [CVE-2026-82901](https://insights.sbomify.com/CVE-2026-82901/): Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field (critical 9.8)
- [CVE-2026-82900](https://insights.sbomify.com/CVE-2026-82900/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.1)
- [CVE-2026-8290](https://insights.sbomify.com/CVE-2026-8290/): Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service (medium 5.3)
- [CVE-2026-82896](https://insights.sbomify.com/CVE-2026-82896/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 7.6)
- [CVE-2026-82895](https://insights.sbomify.com/CVE-2026-82895/): Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection (high 8.1)
- [CVE-2026-82893](https://insights.sbomify.com/CVE-2026-82893/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 7.8)
- [CVE-2026-82892](https://insights.sbomify.com/CVE-2026-82892/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.1)
- [CVE-2026-82891](https://insights.sbomify.com/CVE-2026-82891/): IBM Guardium Data Protection is affected by a security vulnerability (high 8.1)
- [CVE-2026-82890](https://insights.sbomify.com/CVE-2026-82890/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (medium 5.9)
- [CVE-2026-8289](https://insights.sbomify.com/CVE-2026-8289/): Open5GS SMF nsmf-handler.c smf_nsmf_handle_update_data_in_vsmf denial of service (medium 5.3)
- [CVE-2026-82887](https://insights.sbomify.com/CVE-2026-82887/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.8)
- [CVE-2026-82885](https://insights.sbomify.com/CVE-2026-82885/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.8)
- [CVE-2026-82884](https://insights.sbomify.com/CVE-2026-82884/): All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block (medium 6.8)
- [CVE-2026-82883](https://insights.sbomify.com/CVE-2026-82883/): WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-82882](https://insights.sbomify.com/CVE-2026-82882/): Devtron through 2.2.0 Missing Authorization via webhook API token endpoint (high 8.7)
- [CVE-2026-82881](https://insights.sbomify.com/CVE-2026-82881/): Aix-DB through 1.2.4 Stored Cross-Site Scripting via Markdown (medium 5.1)
- [CVE-2026-82880](https://insights.sbomify.com/CVE-2026-82880/): YaCy Search Server through 1.941 XML External Entity Injection via Parsers (high 8.7)
- [CVE-2026-8288](https://insights.sbomify.com/CVE-2026-8288/): Open5GS SMF gsm-handler.c denial of service (medium 5.3)
- [CVE-2026-82879](https://insights.sbomify.com/CVE-2026-82879/): DataEase before 2.10.26 Access Control Bypass via Share Tickets (medium 5.3)
- [CVE-2026-82878](https://insights.sbomify.com/CVE-2026-82878/): DataEase before 2.10.26 Missing Object-Level Authorization on Geographic, Linkage and Chart Endpoints (medium 5.3)
- [CVE-2026-82877](https://insights.sbomify.com/CVE-2026-82877/): ILIAS Arbitrary File Read via SOAP addFile (high 7.1)
- [CVE-2026-82876](https://insights.sbomify.com/CVE-2026-82876/): Phison PS3111-S11 Controller Firmware Signature Verification Bypass (critical 9.3)
- [CVE-2026-82875](https://insights.sbomify.com/CVE-2026-82875/): ToolJet before v3.16.208 Authorization Bypass via organizationId (medium 5.1)
- [CVE-2026-82874](https://insights.sbomify.com/CVE-2026-82874/): ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db (critical 9.4)
- [CVE-2026-82873](https://insights.sbomify.com/CVE-2026-82873/): ToolJet through 3.0.0-ee-beta.2 Cross-workspace Schema Disclosure via Export (medium 5.3)
- [CVE-2026-82872](https://insights.sbomify.com/CVE-2026-82872/): ToolJet before v3.16.208 Cross-Workspace Authorization Bypass (high 7.1)
- [CVE-2026-82871](https://insights.sbomify.com/CVE-2026-82871/): ToolJet before v3.16.208 Cross-Organization Data Read via Database Routes (high 8.2)
- [CVE-2026-82870](https://insights.sbomify.com/CVE-2026-82870/): ToolJet before v3.16.208 Cross-Tenant Database Manipulation (high 7.0)
- [CVE-2026-8287](https://insights.sbomify.com/CVE-2026-8287/): Unrestricted File Upload in BizimHesap Information Systems' Online Pre-Accounting Software (medium 4.3)
- [CVE-2026-82869](https://insights.sbomify.com/CVE-2026-82869/): ToolJet Database before v3.16.44 Privilege Escalation via join_tables (high 8.2)
- [CVE-2026-82868](https://insights.sbomify.com/CVE-2026-82868/): @pdfme/schemas before 5.5.9 Cross-Site Scripting via SVG (medium 5.3)
- [CVE-2026-82867](https://insights.sbomify.com/CVE-2026-82867/): @pdfme/schemas before 5.5.9 Cross-Site Scripting via Select (medium 5.3)
- [CVE-2026-82866](https://insights.sbomify.com/CVE-2026-82866/): @pdfme/common before 5.5.10 SSRF via Unvalidated URL Fetch (high 8.9)
- [CVE-2026-82865](https://insights.sbomify.com/CVE-2026-82865/): pdfme schemas before 5.5.10 Cross-Site Scripting via i18n Label (low 2.1)
- [CVE-2026-82864](https://insights.sbomify.com/CVE-2026-82864/): pdfme pdf-lib before 5.5.10 Denial of Service via Decompression Bomb (high 7.1)
- [CVE-2026-82863](https://insights.sbomify.com/CVE-2026-82863/): @hulumi/baseline before 1.3.2 CloudTrail Selector Tampering Detection (high 8.7)
- [CVE-2026-82862](https://insights.sbomify.com/CVE-2026-82862/): Hulumi before v1.3.2 Helper Script Shadowing via Workspace Files (high 8.6)
- [CVE-2026-82861](https://insights.sbomify.com/CVE-2026-82861/): @hulumi/policies before 1.3.2 SecureBucket Parent Spoof Bypass (high 8.7)
- [CVE-2026-82860](https://insights.sbomify.com/CVE-2026-82860/): @hulumi/policies before 1.3.2 Admin Policy Bypass (critical 9.3)
- [CVE-2026-8286](https://insights.sbomify.com/CVE-2026-8286/): wrong STARTTLS connection reuse (high 8.1)
- [CVE-2026-82859](https://insights.sbomify.com/CVE-2026-82859/): hulumi before v1.3.2 SCP Template Tag-on-Create Bypass (critical 9.3)
- [CVE-2026-82858](https://insights.sbomify.com/CVE-2026-82858/): @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/329/