# Vulnerabilities published in 2026


- [CVE-2026-81678](https://insights.sbomify.com/CVE-2026-81678/): AVideo SSRF Guard Bypass via IPv6 Transition Addresses (medium 6.9)
- [CVE-2026-81677](https://insights.sbomify.com/CVE-2026-81677/): Multiple Vulnerabilities in TOOOLS' iSquad (high 8.8)
- [CVE-2026-81676](https://insights.sbomify.com/CVE-2026-81676/): Multiple Vulnerabilities in TOOOLS' iSquad (high 8.8)
- [CVE-2026-81675](https://insights.sbomify.com/CVE-2026-81675/): Multiple Vulnerabilities in TOOOLS' iSquad (critical 9.3)
- [CVE-2026-81674](https://insights.sbomify.com/CVE-2026-81674/): Multiple Vulnerabilities in TOOOLS' iSquad (critical 9.3)
- [CVE-2026-81673](https://insights.sbomify.com/CVE-2026-81673/): Multiple Vulnerabilities in TOOOLS' iSquad (critical 9.3)
- [CVE-2026-81672](https://insights.sbomify.com/CVE-2026-81672/): Multiple Vulnerabilities in TOOOLS' iSquad (critical 9.3)
- [CVE-2026-8167](https://insights.sbomify.com/CVE-2026-8167/): Reflected XSS in theWP's News Theme V8 (medium 6.1)
- [CVE-2026-81669](https://insights.sbomify.com/CVE-2026-81669/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 7.2)
- [CVE-2026-81668](https://insights.sbomify.com/CVE-2026-81668/): Rubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup (medium 5.4)
- [CVE-2026-81666](https://insights.sbomify.com/CVE-2026-81666/): Integer overflow in Red Hat Enterprise Linux 10 (medium 6.5)
- [CVE-2026-81665](https://insights.sbomify.com/CVE-2026-81665/): Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly (high 7.5)
- [CVE-2026-81664](https://insights.sbomify.com/CVE-2026-81664/): OpenFaaS Gateway 0.27.11 through 0.27.13 Missing Authentication on the /system/telemetry Route (medium 6.9)
- [CVE-2026-81662](https://insights.sbomify.com/CVE-2026-81662/): Flowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys (high 8.6)
- [CVE-2026-81660](https://insights.sbomify.com/CVE-2026-81660/): Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field (high 8.8)
- [CVE-2026-8166](https://insights.sbomify.com/CVE-2026-8166/): Stored XSS in Logo Software's e-Logo Purchasing Portal (medium 5.4)
- [CVE-2026-81659](https://insights.sbomify.com/CVE-2026-81659/): Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing (high 7.1)
- [CVE-2026-81658](https://insights.sbomify.com/CVE-2026-81658/): Foreman: cross-tenant disclosure of template revisions via unauthorized audit lookup (medium 6.5)
- [CVE-2026-81657](https://insights.sbomify.com/CVE-2026-81657/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (critical 9.8)
- [CVE-2026-81656](https://insights.sbomify.com/CVE-2026-81656/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.8)
- [CVE-2026-81655](https://insights.sbomify.com/CVE-2026-81655/): Ad Inserter 2.8.12 - 2.8.18 - Subscriber+ RCE / Stored XSS via Global Custom Fields (high 7.5)
- [CVE-2026-81654](https://insights.sbomify.com/CVE-2026-81654/): NextGEN Gallery < 4.5.0 - Authenticated Plugin Image Settings Update (low 3.1)
- [CVE-2026-81653](https://insights.sbomify.com/CVE-2026-81653/): NextGEN Gallery < 4.5.0 - Authenticated Arbitrary Gallery Image Deletion via IDOR (medium 4.2)
- [CVE-2026-81652](https://insights.sbomify.com/CVE-2026-81652/): NextGEN Gallery < 4.5.0 - Contributor+ Image Metadata Disclosure via IDOR (low 2.7)
- [CVE-2026-81651](https://insights.sbomify.com/CVE-2026-81651/): NextGEN Gallery < 4.5.0 - Authenticated Cross-Gallery Settings Modification via IDOR (low 3.1)
- [CVE-2026-81650](https://insights.sbomify.com/CVE-2026-81650/): NextGEN Gallery < 4.5.0 - Authenticated Arbitrary File Upload via ZIP Import (high 7.2)
- [CVE-2026-81649](https://insights.sbomify.com/CVE-2026-81649/): Fundiin <= 3.4.0 - Unauthenticated Payment Gateway Settings Update and Credential Disclosure (critical 9.1)
- [CVE-2026-81648](https://insights.sbomify.com/CVE-2026-81648/): Missing authorization in CryptoPayment Gateway (critical 10.0)
- [CVE-2026-81647](https://insights.sbomify.com/CVE-2026-81647/): Memory corruption in HarmonyOS (medium 5.3)
- [CVE-2026-81646](https://insights.sbomify.com/CVE-2026-81646/): Memory corruption in HarmonyOS (medium 5.9)
- [CVE-2026-81645](https://insights.sbomify.com/CVE-2026-81645/): Memory corruption in HarmonyOS (medium 5.9)
- [CVE-2026-81644](https://insights.sbomify.com/CVE-2026-81644/): Denial of service in HarmonyOS (medium 4.3)
- [CVE-2026-81643](https://insights.sbomify.com/CVE-2026-81643/): Missing authorization in ash graphql (low 2.3)
- [CVE-2026-81642](https://insights.sbomify.com/CVE-2026-81642/): Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY (critical 9.1)
- [CVE-2026-81640](https://insights.sbomify.com/CVE-2026-81640/): Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials (high 8.7)
- [CVE-2026-8164](https://insights.sbomify.com/CVE-2026-8164/): Search Order Hijacking in ArkSigner's ArkSigner Desktop Client (high 7.3)
- [CVE-2026-81638](https://insights.sbomify.com/CVE-2026-81638/): Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry (low 2.1)
- [CVE-2026-81637](https://insights.sbomify.com/CVE-2026-81637/): Replayable OAuth2 CSRF state retained after a failed callback in AshAuthentication (low 2.3)
- [CVE-2026-81636](https://insights.sbomify.com/CVE-2026-81636/): Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of service (high 8.7)
- [CVE-2026-81635](https://insights.sbomify.com/CVE-2026-81635/): Cross-site scripting in SHIRASAGI (medium 5.1)
- [CVE-2026-81634](https://insights.sbomify.com/CVE-2026-81634/): Possible heap buffer overflow during DNSSEC canonicalization (high 7.5)
- [CVE-2026-81633](https://insights.sbomify.com/CVE-2026-81633/): Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segment (medium 6.9)
- [CVE-2026-81632](https://insights.sbomify.com/CVE-2026-81632/): Single-use sign-in token placed in a redirect query string in AshAuthenticationPhoenix (high 7.2)
- [CVE-2026-81630](https://insights.sbomify.com/CVE-2026-81630/): Botslab G980H Dashcams Insufficient Verification of Data Authenticity (critical 9.2)
- [CVE-2026-8163](https://insights.sbomify.com/CVE-2026-8163/): Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter (high 8.8)
- [CVE-2026-81627](https://insights.sbomify.com/CVE-2026-81627/): Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram (high 8.2)
- [CVE-2026-81626](https://insights.sbomify.com/CVE-2026-81626/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (high 8.6)
- [CVE-2026-81625](https://insights.sbomify.com/CVE-2026-81625/): Stack buffer overflow in Greenbone OS and openvas-scanner (high 8.7)
- [CVE-2026-81624](https://insights.sbomify.com/CVE-2026-81624/): Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite (high 7.5)
- [CVE-2026-81623](https://insights.sbomify.com/CVE-2026-81623/): IBM Guardium Data Protection is affected by multiple vulnerabilities. (medium 6.3)
- [CVE-2026-8162](https://insights.sbomify.com/CVE-2026-8162/): multiparty vulnerable to Denial of Service via Uncaught Exception in filename* parameter parsing (high 7.5)
- [CVE-2026-8161](https://insights.sbomify.com/CVE-2026-8161/): multiparty vulnerable to Denial of Service via Prototype Pollution leading to Uncaught Exception (high 7.5)
- [CVE-2026-8159](https://insights.sbomify.com/CVE-2026-8159/): multiparty vulnerable to ReDoS via filename parsing (high 7.5)
- [CVE-2026-81583](https://insights.sbomify.com/CVE-2026-81583/): Theme My Login 7.0 - 7.1.15 - Subscriber+ Unauthorised Multisite Site Creation and Privilege Escalation (medium 5.4)
- [CVE-2026-81581](https://insights.sbomify.com/CVE-2026-81581/): Memory corruption in wibukey (high 8.8)
- [CVE-2026-8158](https://insights.sbomify.com/CVE-2026-8158/): Memory corruption in Axis File Player (medium 5.3)
- [CVE-2026-81579](https://insights.sbomify.com/CVE-2026-81579/): An untrusted Pointer Dereference can be exploited to escalate privileges by an unprivileged user on Windows (high 8.8)
- [CVE-2026-81578](https://insights.sbomify.com/CVE-2026-81578/): PaperCut NG/MF Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2026-81576](https://insights.sbomify.com/CVE-2026-81576/): Improper Authentication of Session Handles (high 7.7)
- [CVE-2026-81575](https://insights.sbomify.com/CVE-2026-81575/): Missing Sanity Checks for Buffer Lengths (high 7.5)
- [CVE-2026-81574](https://insights.sbomify.com/CVE-2026-81574/): Format String Vulnerability in Logger (high 8.2)
- [CVE-2026-81573](https://insights.sbomify.com/CVE-2026-81573/): Improper Access Control in Local-Only Configuration Commands (high 8.6)
- [CVE-2026-81572](https://insights.sbomify.com/CVE-2026-81572/): Local Privilege Escalation in CodeMeter Runtime on Windows (high 7.8)
- [CVE-2026-81571](https://insights.sbomify.com/CVE-2026-81571/): Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter (medium 4.8)
- [CVE-2026-8157](https://insights.sbomify.com/CVE-2026-8157/): Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation (high 8.8)
- [CVE-2026-81569](https://insights.sbomify.com/CVE-2026-81569/): Apache DolphinScheduler: Improper Authorization in Sub-Workflow Tasks Allows Unauthorized Workflow Execution (medium 4.3)
- [CVE-2026-81568](https://insights.sbomify.com/CVE-2026-81568/): Path traversal in J2Store extension for Joomla (high 8.7)
- [CVE-2026-81567](https://insights.sbomify.com/CVE-2026-81567/): SQL injection in J2Store extension for Joomla (high 8.7)
- [CVE-2026-81566](https://insights.sbomify.com/CVE-2026-81566/): Missing authorization in SP Page Builder (Free and Pro) extension for Joomla (medium 5.1)
- [CVE-2026-81565](https://insights.sbomify.com/CVE-2026-81565/): Path traversal in SP Page Builder (Free and Pro) extension for Joomla (medium 6.9)
- [CVE-2026-81564](https://insights.sbomify.com/CVE-2026-81564/): Path traversal in SP Page Builder (Free and Pro) extension for Joomla (high 7.0)
- [CVE-2026-81563](https://insights.sbomify.com/CVE-2026-81563/): SVCB AliasMode additional-data error leaks qpcache references (high 7.5)
- [CVE-2026-81562](https://insights.sbomify.com/CVE-2026-81562/): AlexGladkov claude-in-mobile client.ts execSync os command injection (medium 4.8)
- [CVE-2026-81560](https://insights.sbomify.com/CVE-2026-81560/): blackms aistack Static File server.ts path traversal (medium 6.9)
- [CVE-2026-81554](https://insights.sbomify.com/CVE-2026-81554/): DataStage on Cloud Pak for Data has several vulnerabilities due to open source software (high 8.8)
- [CVE-2026-81552](https://insights.sbomify.com/CVE-2026-81552/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81551](https://insights.sbomify.com/CVE-2026-81551/): DataStage on Cloud Pak for Data has several vulnerabilities due to open source software (high 8.8)
- [CVE-2026-81550](https://insights.sbomify.com/CVE-2026-81550/): DataStage on Cloud Pak for Data has several vulnerabilities due to open source software (high 8.8)
- [CVE-2026-8155](https://insights.sbomify.com/CVE-2026-8155/): BuddyPress < 14.5.0 - Subscriber+ Private Messages Disclosure via IDOR (medium 5.4)
- [CVE-2026-81549](https://insights.sbomify.com/CVE-2026-81549/): DataStage on Cloud Pak for Data has several vulnerabilities (critical 9.6)
- [CVE-2026-81548](https://insights.sbomify.com/CVE-2026-81548/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81547](https://insights.sbomify.com/CVE-2026-81547/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81546](https://insights.sbomify.com/CVE-2026-81546/): Memory corruption in Affinity (high 7.7)
- [CVE-2026-81545](https://insights.sbomify.com/CVE-2026-81545/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81543](https://insights.sbomify.com/CVE-2026-81543/): Privilege escalation in Abandoned Cart Pro for WooCommerce (high 8.8)
- [CVE-2026-81540](https://insights.sbomify.com/CVE-2026-81540/): DataStage on Cloud Pak for Data has several vulnerabilities due to open source software (high 8.5)
- [CVE-2026-81539](https://insights.sbomify.com/CVE-2026-81539/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81537](https://insights.sbomify.com/CVE-2026-81537/): DataStage on Cloud Pak for Data has several vulnerabilities (high 8.8)
- [CVE-2026-81536](https://insights.sbomify.com/CVE-2026-81536/): DataStage on Cloud Pak for Data has several vulnerabilities (high 7.7)
- [CVE-2026-81535](https://insights.sbomify.com/CVE-2026-81535/): wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check (medium 6.3)
- [CVE-2026-81534](https://insights.sbomify.com/CVE-2026-81534/): Code injection in Email Customizer for WooCommerce (Pro) (high 8.8)
- [CVE-2026-81533](https://insights.sbomify.com/CVE-2026-81533/): MongoDB BI Connector ODBC Driver Memory-Safety Issue When Parsing Oversized LIMIT Values (medium 6.0)
- [CVE-2026-81532](https://insights.sbomify.com/CVE-2026-81532/): BI Connector ODBC Driver Improper Bounds Checking on Cursor Name Leading to Memory Corruption (high 8.7)
- [CVE-2026-81531](https://insights.sbomify.com/CVE-2026-81531/): Unauthenticated Account Information Disclosure in Multiple Omada Controllers (medium 6.9)
- [CVE-2026-81530](https://insights.sbomify.com/CVE-2026-81530/): KMS master key exposure via unredacted credential serialization in driver settings string (medium 6.8)
- [CVE-2026-8153](https://insights.sbomify.com/CVE-2026-8153/): Command injection in Dashboard Server interface (critical 9.8)
- [CVE-2026-81529](https://insights.sbomify.com/CVE-2026-81529/): Connection-option injection via unescaped settings in the canonical MongoDB URL builder (high 7.1)
- [CVE-2026-81528](https://insights.sbomify.com/CVE-2026-81528/): NoSQL injection via array replacement bypassing update shape validation in driver write path (medium 5.3)
- [CVE-2026-81527](https://insights.sbomify.com/CVE-2026-81527/): NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation (medium 6.9)
- [CVE-2026-81526](https://insights.sbomify.com/CVE-2026-81526/): Cross-database write redirection via unvalidated dotted database name in bulk write namespaces (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/340/