# Vulnerabilities published in 2026


- [CVE-2026-69992](https://insights.sbomify.com/CVE-2026-69992/): Remote Desktop Services Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69991](https://insights.sbomify.com/CVE-2026-69991/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-6999](https://insights.sbomify.com/CVE-2026-6999/): BIVOCOM TR321 Wireless Setting cross site scripting (medium 4.8)
- [CVE-2026-69989](https://insights.sbomify.com/CVE-2026-69989/): Windows DNS Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69988](https://insights.sbomify.com/CVE-2026-69988/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69987](https://insights.sbomify.com/CVE-2026-69987/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69986](https://insights.sbomify.com/CVE-2026-69986/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69985](https://insights.sbomify.com/CVE-2026-69985/): Windows libarchive Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69984](https://insights.sbomify.com/CVE-2026-69984/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69982](https://insights.sbomify.com/CVE-2026-69982/): Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability (medium 5.9)
- [CVE-2026-6998](https://insights.sbomify.com/CVE-2026-6998/): BDCOM P3310D New RMON Statistics cross site scripting (medium 4.8)
- [CVE-2026-69979](https://insights.sbomify.com/CVE-2026-69979/): Windows AppX Deployment Service Security Feature Bypass Vulnerability (medium 5.5)
- [CVE-2026-69978](https://insights.sbomify.com/CVE-2026-69978/): Microsoft Windows VMSwitch Denial of Service Vulnerability (medium 5.6)
- [CVE-2026-69977](https://insights.sbomify.com/CVE-2026-69977/): Quality Windows Audio/Video Experience (QWAVE) service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69976](https://insights.sbomify.com/CVE-2026-69976/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69974](https://insights.sbomify.com/CVE-2026-69974/): Desktop Window Manager Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69973](https://insights.sbomify.com/CVE-2026-69973/): Windows libarchive Tampering Vulnerability (medium 6.5)
- [CVE-2026-69971](https://insights.sbomify.com/CVE-2026-69971/): Windows Kernel-Mode Drivers Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69970](https://insights.sbomify.com/CVE-2026-69970/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6997](https://insights.sbomify.com/CVE-2026-6997/): BDCOM P3310D New RMON History cross site scripting (medium 4.8)
- [CVE-2026-69969](https://insights.sbomify.com/CVE-2026-69969/): Windows AppX Deployment Service Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69968](https://insights.sbomify.com/CVE-2026-69968/): Windows libarchive Tampering Vulnerability (medium 6.5)
- [CVE-2026-69967](https://insights.sbomify.com/CVE-2026-69967/): Windows Overlay Filter Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69966](https://insights.sbomify.com/CVE-2026-69966/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69964](https://insights.sbomify.com/CVE-2026-69964/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69963](https://insights.sbomify.com/CVE-2026-69963/): Kernel Streaming Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6996](https://insights.sbomify.com/CVE-2026-6996/): BDCOM P3310D rmon event Tab cross site scripting (medium 4.8)
- [CVE-2026-69959](https://insights.sbomify.com/CVE-2026-69959/): Windows Overlay Filter Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-69958](https://insights.sbomify.com/CVE-2026-69958/): Windows Overlay Filter Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2026-69957](https://insights.sbomify.com/CVE-2026-69957/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69955](https://insights.sbomify.com/CVE-2026-69955/): Windows Client for NFS Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69954](https://insights.sbomify.com/CVE-2026-69954/): Windows Overlay Filter Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69953](https://insights.sbomify.com/CVE-2026-69953/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69952](https://insights.sbomify.com/CVE-2026-69952/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69950](https://insights.sbomify.com/CVE-2026-69950/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6995](https://insights.sbomify.com/CVE-2026-6995/): BDCOM P3310D New User index.asp cross site scripting (medium 4.8)
- [CVE-2026-69949](https://insights.sbomify.com/CVE-2026-69949/): Windows Client for NFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69947](https://insights.sbomify.com/CVE-2026-69947/): Windows Overlay Filter Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2026-69945](https://insights.sbomify.com/CVE-2026-69945/): Windows AppX Deployment Extensions Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69943](https://insights.sbomify.com/CVE-2026-69943/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69942](https://insights.sbomify.com/CVE-2026-69942/): Windows Overlay Filter Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-69940](https://insights.sbomify.com/CVE-2026-69940/): Windows Client for NFS Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-6994](https://insights.sbomify.com/CVE-2026-6994/): Envoy Query Parameter header_mutation.cc params.add injection (medium 5.3)
- [CVE-2026-69935](https://insights.sbomify.com/CVE-2026-69935/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69934](https://insights.sbomify.com/CVE-2026-69934/): Windows Spaceport.sys Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69931](https://insights.sbomify.com/CVE-2026-69931/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69930](https://insights.sbomify.com/CVE-2026-69930/): Windows DHCP Server Information Disclosure Vulnerability (medium 5.9)
- [CVE-2026-6993](https://insights.sbomify.com/CVE-2026-6993/): go-kratos http.DefaultServeMux Fallback server.go NewServer confused deputy (medium 6.9)
- [CVE-2026-69929](https://insights.sbomify.com/CVE-2026-69929/): Windows DHCP Server Information Disclosure Vulnerability (medium 5.9)
- [CVE-2026-69926](https://insights.sbomify.com/CVE-2026-69926/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69923](https://insights.sbomify.com/CVE-2026-69923/): Windows AI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69922](https://insights.sbomify.com/CVE-2026-69922/): Microsoft Office Excel Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69921](https://insights.sbomify.com/CVE-2026-69921/): Windows Print Spooler Components Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6992](https://insights.sbomify.com/CVE-2026-6992/): Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection (high 8.6)
- [CVE-2026-69919](https://insights.sbomify.com/CVE-2026-69919/): Windows Cryptographic Services Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69918](https://insights.sbomify.com/CVE-2026-69918/): Windows Core Messaging Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69916](https://insights.sbomify.com/CVE-2026-69916/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69915](https://insights.sbomify.com/CVE-2026-69915/): Windows NTFS Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69914](https://insights.sbomify.com/CVE-2026-69914/): Windows AppX Deployment Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69913](https://insights.sbomify.com/CVE-2026-69913/): Windows TCP/IP Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69911](https://insights.sbomify.com/CVE-2026-69911/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69910](https://insights.sbomify.com/CVE-2026-69910/): Windows Hyper-V Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-6991](https://insights.sbomify.com/CVE-2026-6991/): colinhacks Zod CUID Data Type regexes.ts sql injection (medium 5.3)
- [CVE-2026-69909](https://insights.sbomify.com/CVE-2026-69909/): Microsoft COM for Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69907](https://insights.sbomify.com/CVE-2026-69907/): Windows Enterprise App Management Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69906](https://insights.sbomify.com/CVE-2026-69906/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-69905](https://insights.sbomify.com/CVE-2026-69905/): Windows AppX Deployment Service Tampering Vulnerability (medium 5.5)
- [CVE-2026-69904](https://insights.sbomify.com/CVE-2026-69904/): Microsoft Office SharePoint Information Disclosure Vulnerability (low 3.5)
- [CVE-2026-69902](https://insights.sbomify.com/CVE-2026-69902/): Windows NTFS Remote Code Execution Vulnerability (medium 6.7)
- [CVE-2026-69900](https://insights.sbomify.com/CVE-2026-69900/): Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6990](https://insights.sbomify.com/CVE-2026-6990/): projeto-siga novo cross site scripting (medium 5.1)
- [CVE-2026-69898](https://insights.sbomify.com/CVE-2026-69898/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69896](https://insights.sbomify.com/CVE-2026-69896/): Windows Error Reporting Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69895](https://insights.sbomify.com/CVE-2026-69895/): Windows Spaceport.sys Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69891](https://insights.sbomify.com/CVE-2026-69891/): Windows Media Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69890](https://insights.sbomify.com/CVE-2026-69890/): Windows Virtual Trusted Platform Module Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-6989](https://insights.sbomify.com/CVE-2026-6989/): Tenda F453 Telnet Service telnet TendaTelnet command injection (medium 5.3)
- [CVE-2026-69889](https://insights.sbomify.com/CVE-2026-69889/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69886](https://insights.sbomify.com/CVE-2026-69886/): Windows Imaging Component Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69884](https://insights.sbomify.com/CVE-2026-69884/): Windows GDI Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69883](https://insights.sbomify.com/CVE-2026-69883/): Windows iSCSI Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69882](https://insights.sbomify.com/CVE-2026-69882/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69881](https://insights.sbomify.com/CVE-2026-69881/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69880](https://insights.sbomify.com/CVE-2026-69880/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6988](https://insights.sbomify.com/CVE-2026-6988/): Tenda HG10 Boa Service formRouting formRoute buffer overflow (high 8.7)
- [CVE-2026-69878](https://insights.sbomify.com/CVE-2026-69878/): Windows DHCP Server Remote Code Execution Vulnerability (medium 6.4)
- [CVE-2026-69877](https://insights.sbomify.com/CVE-2026-69877/): Azure DevOps Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69876](https://insights.sbomify.com/CVE-2026-69876/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-69875](https://insights.sbomify.com/CVE-2026-69875/): Windows NTFS Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69874](https://insights.sbomify.com/CVE-2026-69874/): Windows ALPC Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-6987](https://insights.sbomify.com/CVE-2026-6987/): PicoClaw Web Launcher Management Plane restart command injection (medium 6.9)
- [CVE-2026-69867](https://insights.sbomify.com/CVE-2026-69867/): SQLite Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69866](https://insights.sbomify.com/CVE-2026-69866/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69865](https://insights.sbomify.com/CVE-2026-69865/): Microsoft Container Registry Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-69864](https://insights.sbomify.com/CVE-2026-69864/): Windows Hello Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69862](https://insights.sbomify.com/CVE-2026-69862/): Windows Wireless Wide Area Network Service Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69860](https://insights.sbomify.com/CVE-2026-69860/): Windows Imaging Component Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-6986](https://insights.sbomify.com/CVE-2026-6986/): Cesanta Mongoose GCM Authentication Tag tls_aes128.c mg_aes_gcm_decrypt signature verification (medium 6.3)
- [CVE-2026-69859](https://insights.sbomify.com/CVE-2026-69859/): Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69858](https://insights.sbomify.com/CVE-2026-69858/): Windows DNS Server Remote Code Execution Vulnerability (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/432/