# Vulnerabilities published in 2026


- [CVE-2026-69857](https://insights.sbomify.com/CVE-2026-69857/): Azure Cosmos DB Spoofing Vulnerability (high 8.5)
- [CVE-2026-69856](https://insights.sbomify.com/CVE-2026-69856/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69855](https://insights.sbomify.com/CVE-2026-69855/): Microsoft Copilot in Azure Information Disclosure Vulnerability (high 7.7)
- [CVE-2026-69854](https://insights.sbomify.com/CVE-2026-69854/): Spring Cloud Azure Elevation of Privilege Vulnerability (critical 9.0)
- [CVE-2026-69853](https://insights.sbomify.com/CVE-2026-69853/): Win32k Information Disclosure Vulnerability (medium 4.7)
- [CVE-2026-69852](https://insights.sbomify.com/CVE-2026-69852/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69851](https://insights.sbomify.com/CVE-2026-69851/): Microsoft Entra ID Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-69850](https://insights.sbomify.com/CVE-2026-69850/): Windows Certificates Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6985](https://insights.sbomify.com/CVE-2026-6985/): Cesanta Mongoose TCP Option net_builtin.c handle_opt infinite loop (medium 6.9)
- [CVE-2026-69847](https://insights.sbomify.com/CVE-2026-69847/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-69846](https://insights.sbomify.com/CVE-2026-69846/): Windows Secure Kernel Mode Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-69845](https://insights.sbomify.com/CVE-2026-69845/): Windows DHCP Server Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69844](https://insights.sbomify.com/CVE-2026-69844/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69843](https://insights.sbomify.com/CVE-2026-69843/): Microsoft Fabric Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-69841](https://insights.sbomify.com/CVE-2026-69841/): Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69840](https://insights.sbomify.com/CVE-2026-69840/): Windows Certificates Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-6984](https://insights.sbomify.com/CVE-2026-6984/): AstrBotDevs AstrBot Dashboard API t2i.py create_template special elements used in a template engine (medium 5.1)
- [CVE-2026-69839](https://insights.sbomify.com/CVE-2026-69839/): Windows iSCSI Target Service Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-69838](https://insights.sbomify.com/CVE-2026-69838/): Windows Print Spooler Components Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69836](https://insights.sbomify.com/CVE-2026-69836/): Microsoft Entra ID Remote Code Execution Vulnerability (critical 10.0)
- [CVE-2026-69834](https://insights.sbomify.com/CVE-2026-69834/): Windows ALPC Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69832](https://insights.sbomify.com/CVE-2026-69832/): Win32k Information Disclosure Vulnerability (medium 5.6)
- [CVE-2026-69830](https://insights.sbomify.com/CVE-2026-69830/): Windows DHCP Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-6983](https://insights.sbomify.com/CVE-2026-6983/): pagekit download server-side request forgery (medium 5.1)
- [CVE-2026-69829](https://insights.sbomify.com/CVE-2026-69829/): Windows Shell Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69827](https://insights.sbomify.com/CVE-2026-69827/): Windows DNS Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69826](https://insights.sbomify.com/CVE-2026-69826/): Windows Biometric Service Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69824](https://insights.sbomify.com/CVE-2026-69824/): Microsoft Standard XPS Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69822](https://insights.sbomify.com/CVE-2026-69822/): Windows Kerberos Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69821](https://insights.sbomify.com/CVE-2026-69821/): Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69820](https://insights.sbomify.com/CVE-2026-69820/): Windows Hello Elevation of Privilege Vulnerability (high 8.2)
- [CVE-2026-6982](https://insights.sbomify.com/CVE-2026-6982/): star7th ShowDoc API Page Sort Endpoint PageController.class.PHP sql injection (medium 5.3)
- [CVE-2026-69819](https://insights.sbomify.com/CVE-2026-69819/): RPC Runtime Library Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69818](https://insights.sbomify.com/CVE-2026-69818/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69817](https://insights.sbomify.com/CVE-2026-69817/): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69816](https://insights.sbomify.com/CVE-2026-69816/): Windows Accounts Control Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69814](https://insights.sbomify.com/CVE-2026-69814/): Windows Credential Providers Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69813](https://insights.sbomify.com/CVE-2026-69813/): Windows DNS Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-6981](https://insights.sbomify.com/CVE-2026-6981/): IhateCreatingUserNames2 AiraHub2 Endpoint AiraHub.py sync_agents server-side request forgery (medium 5.3)
- [CVE-2026-69809](https://insights.sbomify.com/CVE-2026-69809/): Windows Active Directory Domain Services Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69808](https://insights.sbomify.com/CVE-2026-69808/): Win32k Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69807](https://insights.sbomify.com/CVE-2026-69807/): PowerShell Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69806](https://insights.sbomify.com/CVE-2026-69806/): .NET Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69805](https://insights.sbomify.com/CVE-2026-69805/): .NET Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-69804](https://insights.sbomify.com/CVE-2026-69804/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69803](https://insights.sbomify.com/CVE-2026-69803/): Windows DHCP Server Information Disclosure Vulnerability (medium 5.9)
- [CVE-2026-69802](https://insights.sbomify.com/CVE-2026-69802/): Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69801](https://insights.sbomify.com/CVE-2026-69801/): Windows Audio Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6980](https://insights.sbomify.com/CVE-2026-6980/): Divyanshu-hash GitPilot-MCP main.py repo_path command injection (medium 6.9)
- [CVE-2026-69799](https://insights.sbomify.com/CVE-2026-69799/): Windows Hello Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69798](https://insights.sbomify.com/CVE-2026-69798/): Windows Wired AutoConfig Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69797](https://insights.sbomify.com/CVE-2026-69797/): Microsoft Office PowerPoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69795](https://insights.sbomify.com/CVE-2026-69795/): Windows Clipboard Server Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69794](https://insights.sbomify.com/CVE-2026-69794/): Windows Encrypting File System (EFS) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69793](https://insights.sbomify.com/CVE-2026-69793/): Windows TCP/IP Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2026-69792](https://insights.sbomify.com/CVE-2026-69792/): Windows Win32K Security Feature Bypass Vulnerability (medium 4.7)
- [CVE-2026-69791](https://insights.sbomify.com/CVE-2026-69791/): Windows Device Association Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69790](https://insights.sbomify.com/CVE-2026-69790/): Windows Credential Providers Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-6979](https://insights.sbomify.com/CVE-2026-6979/): devlikeapro WAHA API Request media.controller.ts server-side request forgery (medium 5.3)
- [CVE-2026-69789](https://insights.sbomify.com/CVE-2026-69789/): Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-69787](https://insights.sbomify.com/CVE-2026-69787/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69786](https://insights.sbomify.com/CVE-2026-69786/): Windows Text Shaping Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69785](https://insights.sbomify.com/CVE-2026-69785/): Windows Smart Card Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69784](https://insights.sbomify.com/CVE-2026-69784/): Windows Hello Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69783](https://insights.sbomify.com/CVE-2026-69783/): Windows Update Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69782](https://insights.sbomify.com/CVE-2026-69782/): Windows DNS Server Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-69781](https://insights.sbomify.com/CVE-2026-69781/): Windows DHCP Client Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-6978](https://insights.sbomify.com/CVE-2026-6978/): JiZhiCMS addcache.html htmlspecialchars_decode sql injection (medium 5.1)
- [CVE-2026-69779](https://insights.sbomify.com/CVE-2026-69779/): Windows Win32k Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69778](https://insights.sbomify.com/CVE-2026-69778/): Microsoft Office Access Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69777](https://insights.sbomify.com/CVE-2026-69777/): Windows DHCP Client Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69775](https://insights.sbomify.com/CVE-2026-69775/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69773](https://insights.sbomify.com/CVE-2026-69773/): Windows Biometric Service Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69772](https://insights.sbomify.com/CVE-2026-69772/): Windows Network File System Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69771](https://insights.sbomify.com/CVE-2026-69771/): Windows Container Manager Service Security Feature Bypass Vulnerability (medium 4.7)
- [CVE-2026-69770](https://insights.sbomify.com/CVE-2026-69770/): Windows Spaceport.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-6977](https://insights.sbomify.com/CVE-2026-6977/): vanna-ai vanna Legacy Flask API improper authorization (medium 6.9)
- [CVE-2026-69769](https://insights.sbomify.com/CVE-2026-69769/): Windows HTTP Print Provider Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69768](https://insights.sbomify.com/CVE-2026-69768/): Windows RNDIS Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-69767](https://insights.sbomify.com/CVE-2026-69767/): Microsoft Office PowerPoint Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69766](https://insights.sbomify.com/CVE-2026-69766/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69765](https://insights.sbomify.com/CVE-2026-69765/): Windows Storport Miniport Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69764](https://insights.sbomify.com/CVE-2026-69764/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69763](https://insights.sbomify.com/CVE-2026-69763/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69762](https://insights.sbomify.com/CVE-2026-69762/): Windows Win32k Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-69761](https://insights.sbomify.com/CVE-2026-69761/): Windows TCP/IP Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69760](https://insights.sbomify.com/CVE-2026-69760/): Windows Kerberos Denial of Service Vulnerability (high 7.5)
- [CVE-2026-6976](https://insights.sbomify.com/CVE-2026-6976/): Authorization Bypass Through User-Controlled Key in GitLab (low 3.7)
- [CVE-2026-69759](https://insights.sbomify.com/CVE-2026-69759/): Microsoft Office Word Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69758](https://insights.sbomify.com/CVE-2026-69758/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69757](https://insights.sbomify.com/CVE-2026-69757/): Windows TCP/IP Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2026-69744](https://insights.sbomify.com/CVE-2026-69744/): Windows Kerberos Denial of Service Vulnerability (high 7.5)
- [CVE-2026-69743](https://insights.sbomify.com/CVE-2026-69743/): Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69742](https://insights.sbomify.com/CVE-2026-69742/): Microsoft Office Publisher Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-69741](https://insights.sbomify.com/CVE-2026-69741/): Windows Spaceport.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-69740](https://insights.sbomify.com/CVE-2026-69740/): Windows Hello Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-69739](https://insights.sbomify.com/CVE-2026-69739/): Microsoft Office Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-69738](https://insights.sbomify.com/CVE-2026-69738/): Windows Biometric Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-69736](https://insights.sbomify.com/CVE-2026-69736/): Windows Credential Manager Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-69735](https://insights.sbomify.com/CVE-2026-69735/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/433/