# Vulnerabilities published in 2026


- [CVE-2026-75829](https://insights.sbomify.com/CVE-2026-75829/): grav-plugin-api before 1.0.15 Twig SSTI via translate endpoint (high 8.6)
- [CVE-2026-75828](https://insights.sbomify.com/CVE-2026-75828/): Grav before 2.0.15 Stored XSS via detectXss() Quote Bypass (critical 9.3)
- [CVE-2026-75827](https://insights.sbomify.com/CVE-2026-75827/): Grav before 2.0.15 Arbitrary File Write via error_log (critical 9.3)
- [CVE-2026-75826](https://insights.sbomify.com/CVE-2026-75826/): Teltonika Command Injection in Backup function (high 8.5)
- [CVE-2026-75825](https://insights.sbomify.com/CVE-2026-75825/): Authentication Bypass vulnerability (high 8.8)
- [CVE-2026-75824](https://insights.sbomify.com/CVE-2026-75824/): WP User Frontend 2.5.8 - 4.3.11 - Unauthenticated Account Creation with Registration Disabled (medium 5.3)
- [CVE-2026-75823](https://insights.sbomify.com/CVE-2026-75823/): WP User Frontend 3.5.29 - 4.3.11 - Unauthenticated Privilege Escalation via Registration Role Encryption (high 7.4)
- [CVE-2026-75820](https://insights.sbomify.com/CVE-2026-75820/): Integer Truncation Leading to Heap Corruption in GNU Aspell (low 1.8)
- [CVE-2026-7582](https://insights.sbomify.com/CVE-2026-7582/): AcademySoftwareFoundation OpenImageIO DDS Image ddsinput.cpp out-of-bounds write (medium 4.8)
- [CVE-2026-75819](https://insights.sbomify.com/CVE-2026-75819/): Out-of-bounds Read in GNU Aspell (low 1.8)
- [CVE-2026-75818](https://insights.sbomify.com/CVE-2026-75818/): Heap Buffer Overflow in GNU Aspell's prezip utility (low 1.8)
- [CVE-2026-75816](https://insights.sbomify.com/CVE-2026-75816/): Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifier (critical 9.8)
- [CVE-2026-75814](https://insights.sbomify.com/CVE-2026-75814/): Ebyte NA111-M Cross-Site Request Forgery (high 8.6)
- [CVE-2026-75813](https://insights.sbomify.com/CVE-2026-75813/): Ebyte NE2-D11 Missing Authorization (high 8.7)
- [CVE-2026-75811](https://insights.sbomify.com/CVE-2026-75811/): Security feature bypass in Armoury Crate (medium 5.8)
- [CVE-2026-75810](https://insights.sbomify.com/CVE-2026-75810/): Security feature bypass in Armoury Crate (medium 5.7)
- [CVE-2026-7581](https://insights.sbomify.com/CVE-2026-7581/): alexta69 MeTube CORS Policy main.py on_prepare cross-domain policy (medium 5.3)
- [CVE-2026-75809](https://insights.sbomify.com/CVE-2026-75809/): Missing authorization in Armoury Crate (medium 5.9)
- [CVE-2026-75808](https://insights.sbomify.com/CVE-2026-75808/): Denial of service in Armoury Crate (medium 5.7)
- [CVE-2026-75807](https://insights.sbomify.com/CVE-2026-75807/): SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning (high 7.5)
- [CVE-2026-75806](https://insights.sbomify.com/CVE-2026-75806/): Unauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoS (medium 5.3)
- [CVE-2026-75805](https://insights.sbomify.com/CVE-2026-75805/): NULL Pointer Dereference in CMP Client Revocation Response Handling (medium 5.3)
- [CVE-2026-75804](https://insights.sbomify.com/CVE-2026-75804/): QUIC Connection-Level Flow Control is Not Enforced for Streams (medium 5.3)
- [CVE-2026-75803](https://insights.sbomify.com/CVE-2026-75803/): AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher() (critical 9.1)
- [CVE-2026-75802](https://insights.sbomify.com/CVE-2026-75802/): Apache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabel (medium 5.1)
- [CVE-2026-75800](https://insights.sbomify.com/CVE-2026-75800/): Frontegg SAML SSO <= 1.0.1 - Unauthenticated Account Takeover via Unverified SAMLResponse (critical 9.8)
- [CVE-2026-7580](https://insights.sbomify.com/CVE-2026-7580/): Exiftool JPEG/QuickTime/MOV/MP4 GM.pm Process_mrld code injection (medium 4.8)
- [CVE-2026-75799](https://insights.sbomify.com/CVE-2026-75799/): YAHMAN Add-ons < 0.9.31 - Unauthenticated Arbitrary File Upload via Blog Card Cache (critical 9.0)
- [CVE-2026-75798](https://insights.sbomify.com/CVE-2026-75798/): AI Engine 3.4.0 - 3.7.1 - Unauthenticated Arbitrary AI Query Execution via Editor Assistant (medium 5.3)
- [CVE-2026-75797](https://insights.sbomify.com/CVE-2026-75797/): AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter (high 7.7)
- [CVE-2026-75796](https://insights.sbomify.com/CVE-2026-75796/): AI Engine 2.8.0 - 3.6.0 - Admin+ Multisite Network Administrator Account Takeover via MCP User Tools (high 7.2)
- [CVE-2026-75793](https://insights.sbomify.com/CVE-2026-75793/): SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic Login (medium 6.5)
- [CVE-2026-75792](https://insights.sbomify.com/CVE-2026-75792/): IBM Sterling Secure Proxy is vulnerable to multiple issues (medium 4.3)
- [CVE-2026-75791](https://insights.sbomify.com/CVE-2026-75791/): Authentication bypass vulnerability (high 8.6)
- [CVE-2026-7579](https://insights.sbomify.com/CVE-2026-7579/): AstrBotDevs AstrBot Dashboard auth.py hard-coded credentials (medium 6.9)
- [CVE-2026-75786](https://insights.sbomify.com/CVE-2026-75786/): SQL Injection in Grafana Integration Endpoint (query.php) (high 7.2)
- [CVE-2026-75784](https://insights.sbomify.com/CVE-2026-75784/): TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow (critical 10.0)
- [CVE-2026-75783](https://insights.sbomify.com/CVE-2026-75783/): TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow (critical 9.4)
- [CVE-2026-75782](https://insights.sbomify.com/CVE-2026-75782/): IBM Aspera Enterprise Webapps Untrusted Search Path (high 7.8)
- [CVE-2026-7578](https://insights.sbomify.com/CVE-2026-7578/): MacCMS Pro Plugin Installation add.html install unrestricted upload (medium 5.1)
- [CVE-2026-75779](https://insights.sbomify.com/CVE-2026-75779/): Command injection in Router (high 8.6)
- [CVE-2026-75778](https://insights.sbomify.com/CVE-2026-75778/): code-projects Task Management System Login Form index.php select_with_multiple_condition sql injection (medium 6.9)
- [CVE-2026-75777](https://insights.sbomify.com/CVE-2026-75777/): Multiple vulnerabilities in IBM Aspera Enterprise Webapps (high 8.8)
- [CVE-2026-75775](https://insights.sbomify.com/CVE-2026-75775/): Command injection in Router (high 7.7)
- [CVE-2026-75774](https://insights.sbomify.com/CVE-2026-75774/): karakeep-app karakeep OAuth Sign-In auth.ts improper authentication (medium 6.3)
- [CVE-2026-75773](https://insights.sbomify.com/CVE-2026-75773/): karakeep-app karakeep Login Endpoint auth.ts authorize excessive authentication (medium 6.3)
- [CVE-2026-75771](https://insights.sbomify.com/CVE-2026-75771/): Photoshop Desktop | Integer Overflow or Wraparound (CWE-190) (high 7.8)
- [CVE-2026-75770](https://insights.sbomify.com/CVE-2026-75770/): Substance3D - Painter | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-75769](https://insights.sbomify.com/CVE-2026-75769/): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-75768](https://insights.sbomify.com/CVE-2026-75768/): Substance3D - Painter | Untrusted Search Path (CWE-426) (high 7.8)
- [CVE-2026-75767](https://insights.sbomify.com/CVE-2026-75767/): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-75766](https://insights.sbomify.com/CVE-2026-75766/): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-75760](https://insights.sbomify.com/CVE-2026-75760/): AshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error (high 7.1)
- [CVE-2026-75759](https://insights.sbomify.com/CVE-2026-75759/): Encrypted ID token or JARM response accepted without a nested signature in erlef oidcc (high 7.6)
- [CVE-2026-75758](https://insights.sbomify.com/CVE-2026-75758/): Unbounded recursion between Inspect.List charlist rendering and List.to_string/1 error path in Elixir (medium 5.9)
- [CVE-2026-75757](https://insights.sbomify.com/CVE-2026-75757/): AshAdmin cookie reader matches names by substring, enabling actor/session shadowing from a sibling subdomain (high 8.3)
- [CVE-2026-75754](https://insights.sbomify.com/CVE-2026-75754/): Server-side request forgery in Control Center Enterprise (ACC) (critical 10.0)
- [CVE-2026-75753](https://insights.sbomify.com/CVE-2026-75753/): Missing authorization in Router (medium 5.3)
- [CVE-2026-75752](https://insights.sbomify.com/CVE-2026-75752/): Substance3D - Painter | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2026-75750](https://insights.sbomify.com/CVE-2026-75750/): Substance3D - Painter | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-75749](https://insights.sbomify.com/CVE-2026-75749/): Substance3D - Painter | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-75748](https://insights.sbomify.com/CVE-2026-75748/): ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918) (high 7.6)
- [CVE-2026-75746](https://insights.sbomify.com/CVE-2026-75746/): ColdFusion | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89) (critical 9.1)
- [CVE-2026-75745](https://insights.sbomify.com/CVE-2026-75745/): Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863) (critical 10.0)
- [CVE-2026-75744](https://insights.sbomify.com/CVE-2026-75744/): Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79) (high 8.1)
- [CVE-2026-75743](https://insights.sbomify.com/CVE-2026-75743/): Adobe Experience Manager Forms JEE | Cross-Site Request Forgery (CSRF) (CWE-352) (high 7.1)
- [CVE-2026-75742](https://insights.sbomify.com/CVE-2026-75742/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75741](https://insights.sbomify.com/CVE-2026-75741/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75740](https://insights.sbomify.com/CVE-2026-75740/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-7574](https://insights.sbomify.com/CVE-2026-7574/): Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use (high 8.7)
- [CVE-2026-75739](https://insights.sbomify.com/CVE-2026-75739/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75738](https://insights.sbomify.com/CVE-2026-75738/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75737](https://insights.sbomify.com/CVE-2026-75737/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75736](https://insights.sbomify.com/CVE-2026-75736/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75735](https://insights.sbomify.com/CVE-2026-75735/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75734](https://insights.sbomify.com/CVE-2026-75734/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75733](https://insights.sbomify.com/CVE-2026-75733/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75732](https://insights.sbomify.com/CVE-2026-75732/): Adobe Experience Manager | Incorrect Authorization (CWE-863) (critical 9.9)
- [CVE-2026-75731](https://insights.sbomify.com/CVE-2026-75731/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75730](https://insights.sbomify.com/CVE-2026-75730/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-7573](https://insights.sbomify.com/CVE-2026-7573/): GetUserRoles API endpoint allows any authenticated user to enumerate ACL policies across all organizations (medium 5.0)
- [CVE-2026-75729](https://insights.sbomify.com/CVE-2026-75729/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75728](https://insights.sbomify.com/CVE-2026-75728/): Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) (critical 9.1)
- [CVE-2026-75727](https://insights.sbomify.com/CVE-2026-75727/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75726](https://insights.sbomify.com/CVE-2026-75726/): Adobe Experience Manager | Improper Input Validation (CWE-20) (low 3.5)
- [CVE-2026-75725](https://insights.sbomify.com/CVE-2026-75725/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75724](https://insights.sbomify.com/CVE-2026-75724/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75723](https://insights.sbomify.com/CVE-2026-75723/): Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863) (critical 10.0)
- [CVE-2026-75722](https://insights.sbomify.com/CVE-2026-75722/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75721](https://insights.sbomify.com/CVE-2026-75721/): Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94) (critical 10.0)
- [CVE-2026-75720](https://insights.sbomify.com/CVE-2026-75720/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-7572](https://insights.sbomify.com/CVE-2026-7572/): Velociraptor EVTX Parser — Process Crash via Crafted .evtx File (medium 4.4)
- [CVE-2026-75719](https://insights.sbomify.com/CVE-2026-75719/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75718](https://insights.sbomify.com/CVE-2026-75718/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75717](https://insights.sbomify.com/CVE-2026-75717/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75716](https://insights.sbomify.com/CVE-2026-75716/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75715](https://insights.sbomify.com/CVE-2026-75715/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75714](https://insights.sbomify.com/CVE-2026-75714/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75713](https://insights.sbomify.com/CVE-2026-75713/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-75712](https://insights.sbomify.com/CVE-2026-75712/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/383/