# Vulnerabilities published in 2026


- [CVE-2026-77106](https://insights.sbomify.com/CVE-2026-77106/): Cvlaunchd Code Execution (high 7.7)
- [CVE-2026-77105](https://insights.sbomify.com/CVE-2026-77105/): CommServe Privilege Escalation (high 8.7)
- [CVE-2026-77104](https://insights.sbomify.com/CVE-2026-77104/): CommServe Path Traversal (high 8.3)
- [CVE-2026-77103](https://insights.sbomify.com/CVE-2026-77103/): CommServe Information Disclosure (high 8.7)
- [CVE-2026-77102](https://insights.sbomify.com/CVE-2026-77102/): CommServe Denial of Service (high 8.7)
- [CVE-2026-77101](https://insights.sbomify.com/CVE-2026-77101/): CommServe Stack-based Buffer Overflow (high 8.7)
- [CVE-2026-77100](https://insights.sbomify.com/CVE-2026-77100/): MediaAgent Denial of Service (high 8.7)
- [CVE-2026-7710](https://insights.sbomify.com/CVE-2026-7710/): YunaiV yudao-cloud Ruoyi-Vue-Pro JwtAuthenticationTokenFilter.java doFilterInternal improper authentication (medium 6.9)
- [CVE-2026-77099](https://insights.sbomify.com/CVE-2026-77099/): CVFS Command Execution (critical 9.3)
- [CVE-2026-77098](https://insights.sbomify.com/CVE-2026-77098/): Private Metrics Server SQL Injection (high 8.8)
- [CVE-2026-77097](https://insights.sbomify.com/CVE-2026-77097/): Private Metrics Server Denial of Service (high 8.8)
- [CVE-2026-77096](https://insights.sbomify.com/CVE-2026-77096/): CVFS Missing Authentication (high 7.7)
- [CVE-2026-77095](https://insights.sbomify.com/CVE-2026-77095/): CvFWD Null Pointer Dereference (high 7.1)
- [CVE-2026-77094](https://insights.sbomify.com/CVE-2026-77094/): CvFWD Out-of-Bounds Write (high 7.1)
- [CVE-2026-77093](https://insights.sbomify.com/CVE-2026-77093/): CvFWD Denial of Service (high 7.1)
- [CVE-2026-77092](https://insights.sbomify.com/CVE-2026-77092/): Content Extractor Privilege Escalation (high 7.3)
- [CVE-2026-77091](https://insights.sbomify.com/CVE-2026-77091/): DataCube Security Feature Bypass (high 8.5)
- [CVE-2026-77090](https://insights.sbomify.com/CVE-2026-77090/): CVFS Information Disclosure (high 8.7)
- [CVE-2026-7709](https://insights.sbomify.com/CVE-2026-7709/): janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization (medium 5.3)
- [CVE-2026-77089](https://insights.sbomify.com/CVE-2026-77089/): Command Center API Authentication Bypass (critical 9.3)
- [CVE-2026-77088](https://insights.sbomify.com/CVE-2026-77088/): justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span (medium 5.3)
- [CVE-2026-77087](https://insights.sbomify.com/CVE-2026-77087/): Paperclip before 0.3.1 Remote Code Execution via DNS Rebinding (critical 9.4)
- [CVE-2026-77086](https://insights.sbomify.com/CVE-2026-77086/): SiYuan before v3.7.4 Path Traversal via packageName (critical 9.4)
- [CVE-2026-77085](https://insights.sbomify.com/CVE-2026-77085/): n8n before 2.34.1 SSRF Protection Bypass via SearXNG Tool (medium 6.3)
- [CVE-2026-77084](https://insights.sbomify.com/CVE-2026-77084/): n8n before 1.123.69 Remote Code Execution via Git Node Configuration Values (high 7.7)
- [CVE-2026-77083](https://insights.sbomify.com/CVE-2026-77083/): n8n before 1.123.69 Code Node Sandbox Escape via Function.prototype Pollution (medium 6.0)
- [CVE-2026-77082](https://insights.sbomify.com/CVE-2026-77082/): n8n before 1.123.69 ReDoS via Filter and Switch Node (medium 5.3)
- [CVE-2026-77081](https://insights.sbomify.com/CVE-2026-77081/): n8n before 1.123.69 Allowed-Domains Bypass via GraphQL Node (medium 5.1)
- [CVE-2026-77080](https://insights.sbomify.com/CVE-2026-77080/): n8n before 1.123.69 Arbitrary File Read and Write via Snowflake (high 8.7)
- [CVE-2026-7708](https://insights.sbomify.com/CVE-2026-7708/): Open5GS UDR subscription.c ogs_dbi_subscription_data denial of service (medium 5.3)
- [CVE-2026-77079](https://insights.sbomify.com/CVE-2026-77079/): n8n before 2.34.1 Authorization Bypass via Custom Role Deletion (high 7.4)
- [CVE-2026-77078](https://insights.sbomify.com/CVE-2026-77078/): multer vulnerable to Denial of Service via crafted multipart field names (high 7.5)
- [CVE-2026-77077](https://insights.sbomify.com/CVE-2026-77077/): n8n before 1.123.69 Remote Code Execution via EventEmitter Prototype Pollution (high 7.2)
- [CVE-2026-77076](https://insights.sbomify.com/CVE-2026-77076/): n8n before 1.123.69 Credential Leak via GraphQL Node Error (high 7.1)
- [CVE-2026-77075](https://insights.sbomify.com/CVE-2026-77075/): n8n before 1.123.69 Expression Injection via Resource Locator (high 8.4)
- [CVE-2026-77074](https://insights.sbomify.com/CVE-2026-77074/): n8n before 1.123.69 SSRF via Edit Image Node (medium 6.0)
- [CVE-2026-77073](https://insights.sbomify.com/CVE-2026-77073/): n8n before 2.34.1 Cross-Project Credential Access via MCP (medium 5.3)
- [CVE-2026-77072](https://insights.sbomify.com/CVE-2026-77072/): n8n before 1.123.69 Stored XSS via Form Completion Page (high 8.4)
- [CVE-2026-77071](https://insights.sbomify.com/CVE-2026-77071/): n8n before 1.123.69 PostgREST Filter Injection via Supabase (high 7.1)
- [CVE-2026-77070](https://insights.sbomify.com/CVE-2026-77070/): n8n before 1.123.69 NoSQL Injection via MongoDB Node (high 7.1)
- [CVE-2026-7707](https://insights.sbomify.com/CVE-2026-7707/): Open5GS UDR nudr-handler.c udr_nudr_dr_handle_subscription_context denial of service (medium 5.3)
- [CVE-2026-77069](https://insights.sbomify.com/CVE-2026-77069/): n8n before 1.123.69 SSRF Protection Bypass via OAuth2 (low 2.3)
- [CVE-2026-77068](https://insights.sbomify.com/CVE-2026-77068/): n8n before 2.34.1 Remote Code Execution via Path Traversal (high 8.7)
- [CVE-2026-77067](https://insights.sbomify.com/CVE-2026-77067/): Omnivore Stored Server-Side Request Forgery via the setWebhook Mutation (medium 5.3)
- [CVE-2026-77066](https://insights.sbomify.com/CVE-2026-77066/): Omnivore Server-Side Request Forgery via the scanFeeds GraphQL Query (medium 5.3)
- [CVE-2026-77063](https://insights.sbomify.com/CVE-2026-77063/): multer vulnerable to file size limit bypass via async fileFilter race condition (low 3.7)
- [CVE-2026-77062](https://insights.sbomify.com/CVE-2026-77062/): Clickjacking in boneIO (medium 6.9)
- [CVE-2026-77061](https://insights.sbomify.com/CVE-2026-77061/): Missing Authentication for Critical Function in boneIO (medium 5.3)
- [CVE-2026-77060](https://insights.sbomify.com/CVE-2026-77060/): Incorrect Permission Assignment for Critical Resource in boneIO (medium 6.8)
- [CVE-2026-7706](https://insights.sbomify.com/CVE-2026-7706/): Open5GS AMF gmm-handler.c gmm_handle_service_request denial of service (medium 5.3)
- [CVE-2026-77059](https://insights.sbomify.com/CVE-2026-77059/): TOCTOU Race Condition in boneIO (high 8.8)
- [CVE-2026-77058](https://insights.sbomify.com/CVE-2026-77058/): Cross-Site Request Forgery (CSRF) in boneIO (medium 5.1)
- [CVE-2026-77057](https://insights.sbomify.com/CVE-2026-77057/): Improper Restriction of Excessive Authentication Attempts in boneIO (low 2.3)
- [CVE-2026-77056](https://insights.sbomify.com/CVE-2026-77056/): Use of Default Credentials in boneIO (high 7.1)
- [CVE-2026-77055](https://insights.sbomify.com/CVE-2026-77055/): Improper Privilege Assignment in boneIO (critical 9.3)
- [CVE-2026-77054](https://insights.sbomify.com/CVE-2026-77054/): Cleartext Storage of Sensitive Information in boneIO (medium 6.9)
- [CVE-2026-77053](https://insights.sbomify.com/CVE-2026-77053/): Missing Authentication in Default Configuration in boneIO (high 8.7)
- [CVE-2026-77052](https://insights.sbomify.com/CVE-2026-77052/): Missing Authentication for Node-RED in boneIO (high 8.7)
- [CVE-2026-77051](https://insights.sbomify.com/CVE-2026-77051/): Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search (critical 9.8)
- [CVE-2026-77050](https://insights.sbomify.com/CVE-2026-77050/): Potential denial-of-service vulnerability in get_supported_language_variant() (medium 6.9)
- [CVE-2026-7705](https://insights.sbomify.com/CVE-2026-7705/): JD Cloud JDCOS Service jdcap set_iptv_info command injection (medium 5.3)
- [CVE-2026-7704](https://insights.sbomify.com/CVE-2026-7704/): AV Stumpfl Pixera Two Media Server Service Port 1338 path traversal (medium 5.3)
- [CVE-2026-77037](https://insights.sbomify.com/CVE-2026-77037/): multer vulnerable to Denial of Service via file descriptor leak on aborted uploads (high 7.5)
- [CVE-2026-77036](https://insights.sbomify.com/CVE-2026-77036/): elunez eladmin GenConfigController improper authorization (medium 5.3)
- [CVE-2026-77035](https://insights.sbomify.com/CVE-2026-77035/): Missing authorization in JEM - Joomla Event Manager extension for Joomla (medium 5.1)
- [CVE-2026-77034](https://insights.sbomify.com/CVE-2026-77034/): Missing authorization in JEM - Joomla Event Manager extension for Joomla (medium 6.9)
- [CVE-2026-77031](https://insights.sbomify.com/CVE-2026-77031/): Tenda CH22 formcreateFileName command injection (medium 5.3)
- [CVE-2026-7703](https://insights.sbomify.com/CVE-2026-7703/): AV Stumpfl Pixera Two Media Server Websocket API code injection (medium 6.9)
- [CVE-2026-77029](https://insights.sbomify.com/CVE-2026-77029/): Joomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.66 (medium 4.6)
- [CVE-2026-77028](https://insights.sbomify.com/CVE-2026-77028/): Joomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.66 (medium 5.3)
- [CVE-2026-77027](https://insights.sbomify.com/CVE-2026-77027/): Joomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.2 (high 8.6)
- [CVE-2026-77026](https://insights.sbomify.com/CVE-2026-77026/): Joomla Extension - tassos.gr - Client-controlled validation bypass in Convert Forms extension < 5.2.5 (medium 6.9)
- [CVE-2026-77025](https://insights.sbomify.com/CVE-2026-77025/): itsourcecode Hospital Management System viewappointmentpending.php sql injection (medium 5.3)
- [CVE-2026-77022](https://insights.sbomify.com/CVE-2026-77022/): Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow (critical 9.4)
- [CVE-2026-77021](https://insights.sbomify.com/CVE-2026-77021/): Missing decompression size limit in agent receiver allows memory exhaustion via push agent data (medium 5.3)
- [CVE-2026-77020](https://insights.sbomify.com/CVE-2026-77020/): CodeAstro Apartment Visitor Management System password-recovery.php sql injection (medium 6.9)
- [CVE-2026-7702](https://insights.sbomify.com/CVE-2026-7702/): toeverything AFFiNE Public Markdown Preview Endpoint :docId allowDocPreview authorization (medium 6.9)
- [CVE-2026-77019](https://insights.sbomify.com/CVE-2026-77019/): CodeAstro Apartment Visitor Management System forgotpw.php sql injection (medium 6.9)
- [CVE-2026-77018](https://insights.sbomify.com/CVE-2026-77018/): Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Upload via Candidate Profile Mass Assignment (high 8.8)
- [CVE-2026-77017](https://insights.sbomify.com/CVE-2026-77017/): Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Read via Candidate Profile Mass Assignment (high 7.7)
- [CVE-2026-77016](https://insights.sbomify.com/CVE-2026-77016/): Workeera Remote Tech Job Board < 1.0.6 - Subscriber+ Arbitrary File Deletion via Candidate Profile Mass Assignment (critical 9.6)
- [CVE-2026-77014](https://insights.sbomify.com/CVE-2026-77014/): Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses (medium 5.3)
- [CVE-2026-77013](https://insights.sbomify.com/CVE-2026-77013/): Icollect <= 1.0.0 - Unauthenticated User and Term Creation via Unrestricted Method Dispatch (medium 5.3)
- [CVE-2026-77012](https://insights.sbomify.com/CVE-2026-77012/): Server-side request forgery in 爱采集数据采集和发布插件 (critical 9.3)
- [CVE-2026-77010](https://insights.sbomify.com/CVE-2026-77010/): Missing authorization in HEL Online Classroom: AI-powered Online Classrooms (medium 6.5)
- [CVE-2026-7701](https://insights.sbomify.com/CVE-2026-7701/): Telegram Desktop Bot API url_auth_box.cpp RequestButton null pointer dereference (medium 5.3)
- [CVE-2026-77009](https://insights.sbomify.com/CVE-2026-77009/): WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console (critical 9.9)
- [CVE-2026-77008](https://insights.sbomify.com/CVE-2026-77008/): HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings Update (medium 6.5)
- [CVE-2026-77007](https://insights.sbomify.com/CVE-2026-77007/): HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret Disclosure (high 7.5)
- [CVE-2026-77006](https://insights.sbomify.com/CVE-2026-77006/): WebTotem Backups < 1.1.0 - Subscriber+ Arbitrary File Deletion via Path Traversal (critical 9.6)
- [CVE-2026-77005](https://insights.sbomify.com/CVE-2026-77005/): Code Monkeys Proposals <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal (critical 9.6)
- [CVE-2026-77004](https://insights.sbomify.com/CVE-2026-77004/): Comfast CF-N1-S mbox-config sprintf command injection (medium 5.3)
- [CVE-2026-77003](https://insights.sbomify.com/CVE-2026-77003/): Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create_new_content_mask (low 2.7)
- [CVE-2026-77002](https://insights.sbomify.com/CVE-2026-77002/): SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentication Bypass (critical 9.8)
- [CVE-2026-77001](https://insights.sbomify.com/CVE-2026-77001/): Social Login & Sharing buttons with Analytics By SoClever <= 1.2.0 - Unauthenticated Authentication Bypass (critical 9.8)
- [CVE-2026-77000](https://insights.sbomify.com/CVE-2026-77000/): WP Social Media Login <= 1.0.6 - Unauthenticated Account Takeover via Twitter Login Flow (critical 9.8)
- [CVE-2026-7700](https://insights.sbomify.com/CVE-2026-7700/): langflow-ai langflow LambdaFilterComponent lambda_filter.py eval code injection (medium 5.3)
- [CVE-2026-76999](https://insights.sbomify.com/CVE-2026-76999/): SourceCodester CET Automated Grading System with AI Predictive Analytics index.php add_grade improper authorization (medium 5.3)
- [CVE-2026-76998](https://insights.sbomify.com/CVE-2026-76998/): SourceCodester Simple Online Food Ordering System ajax.php delete_category sql injection (medium 6.9)
- [CVE-2026-76997](https://insights.sbomify.com/CVE-2026-76997/): SourceCodester Simple Online Food Ordering System ajax.php save_category sql injection (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/372/