# Vulnerabilities published in 2026


- [CVE-2026-73137](https://insights.sbomify.com/CVE-2026-73137/): Information disclosure in Red Hat Advanced Cluster Management for Kubernetes 2.11 (high 7.7)
- [CVE-2026-73136](https://insights.sbomify.com/CVE-2026-73136/): Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay (high 8.2)
- [CVE-2026-73135](https://insights.sbomify.com/CVE-2026-73135/): Gitea hidden-owner repository listing disclosure (medium 5.3)
- [CVE-2026-73130](https://insights.sbomify.com/CVE-2026-73130/): Gitea repository initialization resource exhaustion (medium 4.3)
- [CVE-2026-7313](https://insights.sbomify.com/CVE-2026-7313/): CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity (high 8.7)
- [CVE-2026-73126](https://insights.sbomify.com/CVE-2026-73126/): Gitea private workflow badge token scope bypass (medium 4.3)
- [CVE-2026-73125](https://insights.sbomify.com/CVE-2026-73125/): Ebyte NA111-M Missing Authentication for Critical Function (critical 9.3)
- [CVE-2026-73122](https://insights.sbomify.com/CVE-2026-73122/): Privilege escalation in Red Hat Advanced Cluster Management for Kubernetes 2.11 (high 7.7)
- [CVE-2026-7312](https://insights.sbomify.com/CVE-2026-7312/): CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity (critical 10.0)
- [CVE-2026-7311](https://insights.sbomify.com/CVE-2026-7311/): Path traversal in TinyPNG – JPEG, PNG & WebP image compression (high 8.1)
- [CVE-2026-73108](https://insights.sbomify.com/CVE-2026-73108/): RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec (high 8.7)
- [CVE-2026-73102](https://insights.sbomify.com/CVE-2026-73102/): RustDesk Path Traversal via macOS Clipboard File-Paste (medium 6.9)
- [CVE-2026-7310](https://insights.sbomify.com/CVE-2026-7310/): Memory corruption in MACH HiDraw (medium 4.4)
- [CVE-2026-73090](https://insights.sbomify.com/CVE-2026-73090/): PeerTube: Cross-origin remote video takeover via Update activity (critical 9.3)
- [CVE-2026-7309](https://insights.sbomify.com/CVE-2026-7309/): Openshift-controller-manager: openshift container platform: information disclosure via environment variable injection (medium 4.3)
- [CVE-2026-73089](https://insights.sbomify.com/CVE-2026-73089/): Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM (high 7.5)
- [CVE-2026-73088](https://insights.sbomify.com/CVE-2026-73088/): Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats) (high 7.5)
- [CVE-2026-73087](https://insights.sbomify.com/CVE-2026-73087/): Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher (low 2.3)
- [CVE-2026-73086](https://insights.sbomify.com/CVE-2026-73086/): nanoid: Integer Overflow or Wraparound (high 7.4)
- [CVE-2026-73085](https://insights.sbomify.com/CVE-2026-73085/): Audiobookshelf: Refresh Token Accepted on Resource Endpoints (medium 5.3)
- [CVE-2026-73084](https://insights.sbomify.com/CVE-2026-73084/): Activepieces: Reflected Cross-Site Scripting in OAuth Redirect Endpoint (medium 6.1)
- [CVE-2026-73083](https://insights.sbomify.com/CVE-2026-73083/): Activepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading (high 7.6)
- [CVE-2026-73082](https://insights.sbomify.com/CVE-2026-73082/): Activepieces: Server-side request forgery in MCP tool validation endpoint (medium 5.3)
- [CVE-2026-73081](https://insights.sbomify.com/CVE-2026-73081/): Activepieces: Remote Code Execution via Command Injection in Code Step Name (high 8.7)
- [CVE-2026-73080](https://insights.sbomify.com/CVE-2026-73080/): SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle (critical 9.3)
- [CVE-2026-7308](https://insights.sbomify.com/CVE-2026-7308/): Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via HTML Browse Page (medium 5.1)
- [CVE-2026-73079](https://insights.sbomify.com/CVE-2026-73079/): Server-side request forgery in sub2api (high 8.5)
- [CVE-2026-73078](https://insights.sbomify.com/CVE-2026-73078/): Vim: Arbitrary Code Execution via Netrw Menu Construction (high 8.6)
- [CVE-2026-73077](https://insights.sbomify.com/CVE-2026-73077/): Vim: Arbitrary Code Execution via Shell Keyword Lookup (high 8.4)
- [CVE-2026-73076](https://insights.sbomify.com/CVE-2026-73076/): Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` (high 8.4)
- [CVE-2026-73075](https://insights.sbomify.com/CVE-2026-73075/): Vim: Out-of-bounds Access in Popup Opacity Handling (medium 4.6)
- [CVE-2026-73074](https://insights.sbomify.com/CVE-2026-73074/): Vim: Heap Buffer Overflow in Text Property Handling (high 7.1)
- [CVE-2026-73073](https://insights.sbomify.com/CVE-2026-73073/): Vim: Arbitrary Ex Command Execution in C Omni-Completion (high 7.1)
- [CVE-2026-73072](https://insights.sbomify.com/CVE-2026-73072/): Vim: Heap Buffer Overflow when Loading a Spell File (high 8.5)
- [CVE-2026-73071](https://insights.sbomify.com/CVE-2026-73071/): Vim: Use-after-free in JSON Decoding (low 3.3)
- [CVE-2026-73070](https://insights.sbomify.com/CVE-2026-73070/): Vim: Stack Buffer Overflow in the Vim Socket Server (medium 6.8)
- [CVE-2026-7307](https://insights.sbomify.com/CVE-2026-7307/): Keycloak: keycloak: denial of service via specially crafted saml input (high 7.5)
- [CVE-2026-73069](https://insights.sbomify.com/CVE-2026-73069/): Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary PostgreSQL Execution (critical 9.1)
- [CVE-2026-73068](https://insights.sbomify.com/CVE-2026-73068/): Missing authorization in ToolJet (medium 5.9)
- [CVE-2026-73067](https://insights.sbomify.com/CVE-2026-73067/): Tesseract: Heap OOB read in the DAWG loader (medium 6.7)
- [CVE-2026-73066](https://insights.sbomify.com/CVE-2026-73066/): Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata (medium 6.8)
- [CVE-2026-73064](https://insights.sbomify.com/CVE-2026-73064/): Weak cryptography in Mbed TLS (low 2.9)
- [CVE-2026-73062](https://insights.sbomify.com/CVE-2026-73062/): Scriban 3.0.0 through 7.2.0 Denial of Service via Array Multiplication (high 8.7)
- [CVE-2026-73061](https://insights.sbomify.com/CVE-2026-73061/): Scriban before 7.2.2 Arbitrary Property Write via TypedObjectAccessor (critical 9.3)
- [CVE-2026-73060](https://insights.sbomify.com/CVE-2026-73060/): Scriban 3.0.0 through 7.2.5 Denial of Service via ScriptRange.Multiply (high 8.7)
- [CVE-2026-7306](https://insights.sbomify.com/CVE-2026-7306/): Xuxueli xxl-job OpenAPI Endpoint OpenApiController.java hard-coded key (medium 6.3)
- [CVE-2026-73059](https://insights.sbomify.com/CVE-2026-73059/): stoatchat before 0.15.0 Permission Bypass via message_fetch (high 7.1)
- [CVE-2026-73058](https://insights.sbomify.com/CVE-2026-73058/): stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass (medium 6.9)
- [CVE-2026-73057](https://insights.sbomify.com/CVE-2026-73057/): stoatchat before 0.15.0 Uncapped SVG Rendering Denial of Service (high 8.7)
- [CVE-2026-73056](https://insights.sbomify.com/CVE-2026-73056/): SiYuan kernel before 3.7.4 Unthrottled Brute-Force via API Token (critical 9.3)
- [CVE-2026-73055](https://insights.sbomify.com/CVE-2026-73055/): Shescape before 2.1.15 and 3.0.2 Home Directory Disclosure via BusyBox (medium 6.3)
- [CVE-2026-73054](https://insights.sbomify.com/CVE-2026-73054/): SiYuan before v3.7.4 Authentication Bypass via WebSocket (high 8.7)
- [CVE-2026-73053](https://insights.sbomify.com/CVE-2026-73053/): SiYuan before v3.7.4 Cross-Site Scripting via unicode2Emoji (critical 9.4)
- [CVE-2026-73052](https://insights.sbomify.com/CVE-2026-73052/): SiYuan before v3.7.4 Stored XSS via Attribute-View Field Names (critical 9.4)
- [CVE-2026-73051](https://insights.sbomify.com/CVE-2026-73051/): actix-http before 3.12.1 HTTP Request Smuggling via CL.TE (medium 6.3)
- [CVE-2026-73050](https://insights.sbomify.com/CVE-2026-73050/): SiYuan before v3.7.4 Stored XSS via select option color (critical 9.4)
- [CVE-2026-7305](https://insights.sbomify.com/CVE-2026-7305/): Xuxueli xxl-job trigger Endpoint XxlJobServiceImpl.java triggerJob server-side request forgery (medium 5.3)
- [CVE-2026-73049](https://insights.sbomify.com/CVE-2026-73049/): SiYuan before v3.7.4 Information Disclosure via getAttributeViewBacklinks (medium 6.9)
- [CVE-2026-73048](https://insights.sbomify.com/CVE-2026-73048/): SiYuan before v3.7.4 Information Disclosure via getRefIDsByFileAnnotationID (medium 6.9)
- [CVE-2026-73047](https://insights.sbomify.com/CVE-2026-73047/): siyuan before v3.7.4 Server-Side Template Injection via attribute-view (high 8.6)
- [CVE-2026-73046](https://insights.sbomify.com/CVE-2026-73046/): SiYuan before v3.7.4 Authentication Bypass via HTTP Basic Auth (critical 9.3)
- [CVE-2026-73045](https://insights.sbomify.com/CVE-2026-73045/): SiYuan before 3.7.4 Brute-Force via authFilePublishAccess (high 8.7)
- [CVE-2026-73044](https://insights.sbomify.com/CVE-2026-73044/): SiYuan before v3.7.4 Stored Cross-Site Scripting via Column Width (critical 9.4)
- [CVE-2026-73043](https://insights.sbomify.com/CVE-2026-73043/): SiYuan before v3.7.4 Remote Code Execution via Template Calculation (critical 9.4)
- [CVE-2026-73042](https://insights.sbomify.com/CVE-2026-73042/): SiYuan before v3.7.4 Remote Code Execution via Menu Metadata (critical 9.4)
- [CVE-2026-73041](https://insights.sbomify.com/CVE-2026-73041/): SiYuan before v3.7.4 Remote Code Execution via PDF Annotations (critical 9.4)
- [CVE-2026-73040](https://insights.sbomify.com/CVE-2026-73040/): Path traversal in dockge (high 8.7)
- [CVE-2026-7304](https://insights.sbomify.com/CVE-2026-7304/): CVE-2026-7304 (critical 9.8)
- [CVE-2026-73039](https://insights.sbomify.com/CVE-2026-73039/): streama Insecure Direct Object Reference via ViewingStatusController (medium 5.3)
- [CVE-2026-73038](https://insights.sbomify.com/CVE-2026-73038/): NodeBB < 4.15.0 Stored XSS via ActivityPub emoji tag.icon.url and tag.name (medium 5.3)
- [CVE-2026-73037](https://insights.sbomify.com/CVE-2026-73037/): Next AI Draw.io 0.2.1 - 0.4.16 Reflected XSS via unsanitized mcp query parameter (medium 5.1)
- [CVE-2026-73036](https://insights.sbomify.com/CVE-2026-73036/): Bash-it barbuk Theme 3.2.0 Terminal Escape Sequence Injection via pyproject.toml (medium 4.6)
- [CVE-2026-73035](https://insights.sbomify.com/CVE-2026-73035/): npm-check-updates 23.0.2 Terminal Injection via Unsanitized Escape Sequences (medium 5.3)
- [CVE-2026-73034](https://insights.sbomify.com/CVE-2026-73034/): DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header (critical 9.3)
- [CVE-2026-73033](https://insights.sbomify.com/CVE-2026-73033/): Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php (high 7.0)
- [CVE-2026-73032](https://insights.sbomify.com/CVE-2026-73032/): PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval() (critical 9.4)
- [CVE-2026-73031](https://insights.sbomify.com/CVE-2026-73031/): telegram-search Stored XSS via v-html in MessageList.vue (high 8.2)
- [CVE-2026-73030](https://insights.sbomify.com/CVE-2026-73030/): unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape (high 7.2)
- [CVE-2026-7303](https://insights.sbomify.com/CVE-2026-7303/): Xuxueli xxl-job Execution Log JobLogController.java logDetailCat resource injection (medium 6.3)
- [CVE-2026-73029](https://insights.sbomify.com/CVE-2026-73029/): Microsoft SQL Server Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-73028](https://insights.sbomify.com/CVE-2026-73028/): SQL Server Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-73027](https://insights.sbomify.com/CVE-2026-73027/): Windows Setup Files Cleanup Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73026](https://insights.sbomify.com/CVE-2026-73026/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73025](https://insights.sbomify.com/CVE-2026-73025/): Windows iSCSI Security Feature Bypass Vulnerability (critical 9.8)
- [CVE-2026-73024](https://insights.sbomify.com/CVE-2026-73024/): Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73023](https://insights.sbomify.com/CVE-2026-73023/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-73022](https://insights.sbomify.com/CVE-2026-73022/): Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-73021](https://insights.sbomify.com/CVE-2026-73021/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73020](https://insights.sbomify.com/CVE-2026-73020/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-7302](https://insights.sbomify.com/CVE-2026-7302/): CVE-2026-7302 (critical 9.1)
- [CVE-2026-73019](https://insights.sbomify.com/CVE-2026-73019/): Windows URL Moniker Security Feature Bypass Vulnerability (medium 4.3)
- [CVE-2026-73018](https://insights.sbomify.com/CVE-2026-73018/): Graphic Fonts Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-73017](https://insights.sbomify.com/CVE-2026-73017/): Graphics Kernel Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-73016](https://insights.sbomify.com/CVE-2026-73016/): DirectWrite Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-73015](https://insights.sbomify.com/CVE-2026-73015/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73014](https://insights.sbomify.com/CVE-2026-73014/): Data Sharing Service Client Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73013](https://insights.sbomify.com/CVE-2026-73013/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-73012](https://insights.sbomify.com/CVE-2026-73012/): Windows Management Services Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-73011](https://insights.sbomify.com/CVE-2026-73011/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-73010](https://insights.sbomify.com/CVE-2026-73010/): Microsoft Failover Cluster Remote Code Execution Vulnerability (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/404/