# Vulnerabilities published in 2026


- [CVE-2026-67279](https://insights.sbomify.com/CVE-2026-67279/): Mikrotik RouterOS Improper Enforcement of Behavioral Workflow (medium 6.9, exploited in the wild)
- [CVE-2026-67278](https://insights.sbomify.com/CVE-2026-67278/): TLS server impersonation possible in Mikrotik RouterOS (medium 6.3)
- [CVE-2026-67277](https://insights.sbomify.com/CVE-2026-67277/): MikroTik RouterOS Missing Authentication for Critical Function (high 8.8, exploited in the wild)
- [CVE-2026-67276](https://insights.sbomify.com/CVE-2026-67276/): SSH user impersonation possible in Mikrotik RouterOS (critical 9.2)
- [CVE-2026-67275](https://insights.sbomify.com/CVE-2026-67275/): Other in PowerProtect One (medium 5.3)
- [CVE-2026-67273](https://insights.sbomify.com/CVE-2026-67273/): Code injection in Container Storage Modules (critical 9.6)
- [CVE-2026-67271](https://insights.sbomify.com/CVE-2026-67271/): Memory corruption in PowerStore 1000T (critical 9.8)
- [CVE-2026-67270](https://insights.sbomify.com/CVE-2026-67270/): Weak cryptography in Container Storage Modules (CSM) (high 8.2)
- [CVE-2026-6727](https://insights.sbomify.com/CVE-2026-6727/): CVE-2026-6727 (medium 5.9)
- [CVE-2026-67269](https://insights.sbomify.com/CVE-2026-67269/): Privilege escalation in Container Storage Modules (CSM) (critical 9.9)
- [CVE-2026-67268](https://insights.sbomify.com/CVE-2026-67268/): XML external entity in Dell Command Update (DCU) (medium 6.5)
- [CVE-2026-67267](https://insights.sbomify.com/CVE-2026-67267/): Information disclosure in Dell Command Update (DCU) (medium 5.5)
- [CVE-2026-67266](https://insights.sbomify.com/CVE-2026-67266/): Privilege escalation in Dell Command Update (DCU) (medium 5.5)
- [CVE-2026-67262](https://insights.sbomify.com/CVE-2026-67262/): Missing authorization in PowerStore 1000T (high 8.1)
- [CVE-2026-67261](https://insights.sbomify.com/CVE-2026-67261/): Command injection in Virtual Storage Integrator for VMware vSphere Client (critical 9.8)
- [CVE-2026-67260](https://insights.sbomify.com/CVE-2026-67260/): Apache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserialization (high 7.3)
- [CVE-2026-6726](https://insights.sbomify.com/CVE-2026-6726/): An information leakage vulnerability in the TCG TPM 2.0 reference code. (high 7.9)
- [CVE-2026-6725](https://insights.sbomify.com/CVE-2026-6725/): Cross-site scripting in WPC Smart Messages for WooCommerce (medium 6.4)
- [CVE-2026-67249](https://insights.sbomify.com/CVE-2026-67249/): Apache Answer: Email Code Purpose Confusion May Allow Account Takeover (medium 5.4)
- [CVE-2026-67248](https://insights.sbomify.com/CVE-2026-67248/): A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM (high 8.7)
- [CVE-2026-67247](https://insights.sbomify.com/CVE-2026-67247/): A path traversal vulnerability was found in the IHM Log handling of ADM (high 7.1)
- [CVE-2026-67246](https://insights.sbomify.com/CVE-2026-67246/): A path traversal vulnerability was found in the Wallpaper component of ADM (medium 6.9)
- [CVE-2026-67245](https://insights.sbomify.com/CVE-2026-67245/): A path traversal vulnerability was found in the VPN Clients on the ADM (high 7.0)
- [CVE-2026-67244](https://insights.sbomify.com/CVE-2026-67244/): A format string vulnerability was found in the Notification OAuth settings of ADM (high 8.6)
- [CVE-2026-67243](https://insights.sbomify.com/CVE-2026-67243/): File upload in freo2 (high 8.6)
- [CVE-2026-67242](https://insights.sbomify.com/CVE-2026-67242/): RabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float exp (medium 6.3)
- [CVE-2026-67241](https://insights.sbomify.com/CVE-2026-67241/): RabbitMQ: AMQP 1.0 management exchange.declare skips alternate-exchange permission check (medium 4.8)
- [CVE-2026-67240](https://insights.sbomify.com/CVE-2026-67240/): RabbitMQ: ReDoS via AMQP 1.0 SQL filter LIKE wildcard (low 2.3)
- [CVE-2026-67239](https://insights.sbomify.com/CVE-2026-67239/): RabbitMQ: Stored XSS via TLS peer-certificate DN in stream-management UI (high 7.6)
- [CVE-2026-67238](https://insights.sbomify.com/CVE-2026-67238/): RabbitMQ: Atom-table exhaustion via reply-to queue name decoding (high 7.1)
- [CVE-2026-67237](https://insights.sbomify.com/CVE-2026-67237/): RabbitMQ: Reflected XSS via the OAuth bootstrap JS endpoint (high 7.5)
- [CVE-2026-67236](https://insights.sbomify.com/CVE-2026-67236/): RabbitMQ: Plaintext username:password stored in an insecure cookie after successful POST /login (high 8.2)
- [CVE-2026-67235](https://insights.sbomify.com/CVE-2026-67235/): RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size (high 7.1)
- [CVE-2026-67234](https://insights.sbomify.com/CVE-2026-67234/): RabbitMQ: Non-RFC-conformant cookie name when clearing the auth-mechanism preference (low 2.3)
- [CVE-2026-67233](https://insights.sbomify.com/CVE-2026-67233/): RabbitMQ: Monitoring-tag user can DELETE shovels (medium 6.0)
- [CVE-2026-67232](https://insights.sbomify.com/CVE-2026-67232/): RabbitMQ: Web-MQTT decompression bomb (high 8.2)
- [CVE-2026-67231](https://insights.sbomify.com/CVE-2026-67231/): RabbitMQ: Trust-store whitelist by Issuer+Serial only (critical 9.1)
- [CVE-2026-67230](https://insights.sbomify.com/CVE-2026-67230/): RabbitMQ: Web-STOMP unbounded pre-auth accumulation (medium 6.3)
- [CVE-2026-6723](https://insights.sbomify.com/CVE-2026-6723/): Missing authorization in Simply Schedule Appointments (medium 5.3)
- [CVE-2026-67229](https://insights.sbomify.com/CVE-2026-67229/): RabbitMQ: Admin-only atom exhaustion: atomize_keys on vhost metadata (medium 6.9)
- [CVE-2026-67228](https://insights.sbomify.com/CVE-2026-67228/): RabbitMQ: Atom exhaustion: to_atom on runtime-parameter component (medium 6.9)
- [CVE-2026-67227](https://insights.sbomify.com/CVE-2026-67227/): RabbitMQ: Atom exhaustion: to_atom on global-parameter :name (medium 5.9)
- [CVE-2026-67226](https://insights.sbomify.com/CVE-2026-67226/): RabbitMQ: Admin-only atom exhaustion: PUT /api/users tags list (medium 6.9)
- [CVE-2026-67225](https://insights.sbomify.com/CVE-2026-67225/): RabbitMQ: Stream-protocol frame length never validated against frame_max (medium 6.3)
- [CVE-2026-67224](https://insights.sbomify.com/CVE-2026-67224/): RabbitMQ: Admin path-traversal write via trace name (low 2.1)
- [CVE-2026-67223](https://insights.sbomify.com/CVE-2026-67223/): RabbitMQ: LDAP DN injection via unescaped substitution (medium 6.3)
- [CVE-2026-67222](https://insights.sbomify.com/CVE-2026-67222/): RabbitMQ: list_to_atom on auth_mechanism URI tokens in amqp_client (medium 5.9)
- [CVE-2026-67221](https://insights.sbomify.com/CVE-2026-67221/): RabbitMQ: AMQP 1.0 shovel status exposes plaintext URI passwords (medium 5.9)
- [CVE-2026-67220](https://insights.sbomify.com/CVE-2026-67220/): RabbitMQ: JMS topic exchange erl_scan atom exhaustion (medium 6.0)
- [CVE-2026-6722](https://insights.sbomify.com/CVE-2026-6722/): Use-After-Free in SOAP using Apache map (critical 9.5)
- [CVE-2026-67219](https://insights.sbomify.com/CVE-2026-67219/): RabbitMQ: Consistent-hash exchange unbounded weight (medium 6.0)
- [CVE-2026-67218](https://insights.sbomify.com/CVE-2026-67218/): RabbitMQ: Super-stream HTTP creation skips configure-permission check (low 2.1)
- [CVE-2026-67217](https://insights.sbomify.com/CVE-2026-67217/): cJSON JSON Patch Non-Atomic Application Destroys Data Before Validation (medium 6.9)
- [CVE-2026-67216](https://insights.sbomify.com/CVE-2026-67216/): cJSON cJSON_Compare Exponential Complexity Denial of Service (high 8.2)
- [CVE-2026-67215](https://insights.sbomify.com/CVE-2026-67215/): cJSON JSON Patch copy/add Uncontrolled Recursion Stack Exhaustion (high 8.7)
- [CVE-2026-67214](https://insights.sbomify.com/CVE-2026-67214/): nanoid Infinite Loop via Negative Size in non-secure module (high 8.2)
- [CVE-2026-67213](https://insights.sbomify.com/CVE-2026-67213/): nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom (high 8.2)
- [CVE-2026-67211](https://insights.sbomify.com/CVE-2026-67211/): Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer (high 7.5)
- [CVE-2026-6721](https://insights.sbomify.com/CVE-2026-6721/): Multiple Vulnerabilities in IBM Concert Software (critical 9.8)
- [CVE-2026-67208](https://insights.sbomify.com/CVE-2026-67208/): Juggle 1.6.0 Unauthenticated RCE via Exposed H2 Console (critical 9.3)
- [CVE-2026-67207](https://insights.sbomify.com/CVE-2026-67207/): Wolf CMS 0.8.3.1 Authorization Bypass via BackupRestoreController (high 8.7)
- [CVE-2026-67206](https://insights.sbomify.com/CVE-2026-67206/): Wolf CMS 0.8.3.1 Authenticated RCE via FileManagerController File Upload (high 8.7)
- [CVE-2026-67204](https://insights.sbomify.com/CVE-2026-67204/): BookStack < 26.05.4 Broken Access Control via Image Gallery API (medium 5.3)
- [CVE-2026-67201](https://insights.sbomify.com/CVE-2026-67201/): V 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http (high 7.7)
- [CVE-2026-67200](https://insights.sbomify.com/CVE-2026-67200/): Perspective 5.0.0 Path Traversal via cwd_static_file_handler (high 8.7)
- [CVE-2026-6720](https://insights.sbomify.com/CVE-2026-6720/): Calicoctl leaks cluster credentials to stderr when verbose logging is enabled (high 7.2)
- [CVE-2026-67199](https://insights.sbomify.com/CVE-2026-67199/): Perspective 5.0.0 DoS via Loop Expression Evaluation (high 7.1)
- [CVE-2026-67198](https://insights.sbomify.com/CVE-2026-67198/): Perspective 5.0.0 DoS via VirtualServer Protocol Dispatcher (high 8.7)
- [CVE-2026-67196](https://insights.sbomify.com/CVE-2026-67196/): Perspective 5.0.0 XSS via Debug Plugin innerHTML Interpolation (medium 5.1)
- [CVE-2026-67195](https://insights.sbomify.com/CVE-2026-67195/): Perspective 5.0.0 RCE via eval() Expression Injection (high 8.7)
- [CVE-2026-67194](https://insights.sbomify.com/CVE-2026-67194/): Courier IMAP < 6.0.1 Mail Server < 2.0.2 Stack Overflow DoS via Nested SEARCH Queries (high 7.1)
- [CVE-2026-67193](https://insights.sbomify.com/CVE-2026-67193/): Xlight FTP Server < 3.9.5 Information Disclosure via USER Command (medium 6.9)
- [CVE-2026-67192](https://insights.sbomify.com/CVE-2026-67192/): Xlight FTP Server < 3.9.5 Pre-Auth Stack Buffer Overflow via SSH GCM Cipher (critical 9.2)
- [CVE-2026-67191](https://insights.sbomify.com/CVE-2026-67191/): Xlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser (critical 9.3)
- [CVE-2026-6719](https://insights.sbomify.com/CVE-2026-6719/): IBM Concert Software Use of Insufficiently Random Values (high 7.5)
- [CVE-2026-67189](https://insights.sbomify.com/CVE-2026-67189/): pfSense Plus/CE Stored XSS via Traffic Graphs PTR Record (medium 5.3)
- [CVE-2026-67187](https://insights.sbomify.com/CVE-2026-67187/): Ninja Forms WordPress Plugin < 3.15.4 Server-Side Validation Bypass via List Fields (medium 5.1)
- [CVE-2026-67185](https://insights.sbomify.com/CVE-2026-67185/): TinyWeb 0.0.8 Path Traversal via URL Path Component (high 8.7)
- [CVE-2026-67184](https://insights.sbomify.com/CVE-2026-67184/): TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP Request (high 8.7)
- [CVE-2026-67183](https://insights.sbomify.com/CVE-2026-67183/): TinyWeb 0.0.8 Memory Leak DoS via HTTP Request Handling (high 8.7)
- [CVE-2026-67182](https://insights.sbomify.com/CVE-2026-67182/): Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Header Injection (medium 6.9)
- [CVE-2026-67181](https://insights.sbomify.com/CVE-2026-67181/): Rouille 0.3.3 - 3.6.2 HTTP Request Smuggling via proxy Transfer-Encoding Header (medium 6.3)
- [CVE-2026-67180](https://insights.sbomify.com/CVE-2026-67180/): Google Turbinia arbitrary command execution (high 7.5)
- [CVE-2026-6718](https://insights.sbomify.com/CVE-2026-6718/): Multiple Vulnerabilities in IBM Concert Software (medium 6.2)
- [CVE-2026-67179](https://insights.sbomify.com/CVE-2026-67179/): Genkit improper host header validation (high 7.8)
- [CVE-2026-67178](https://insights.sbomify.com/CVE-2026-67178/): Open Redirect in MISP Installer-Generated Apache Configuration (high 7.8)
- [CVE-2026-67174](https://insights.sbomify.com/CVE-2026-67174/): DOM-Based Cross-Site Scripting via Unsafe String and SVG Icon Rendering in Pivotick (critical 9.2)
- [CVE-2026-67173](https://insights.sbomify.com/CVE-2026-67173/): Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests (medium 5.1)
- [CVE-2026-67172](https://insights.sbomify.com/CVE-2026-67172/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (low 3.7)
- [CVE-2026-67171](https://insights.sbomify.com/CVE-2026-67171/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (medium 5.3)
- [CVE-2026-67165](https://insights.sbomify.com/CVE-2026-67165/): HCL Connections is vulnerable to cross-site scripting (XSS) (medium 5.4)
- [CVE-2026-6713](https://insights.sbomify.com/CVE-2026-6713/): Incorrect Authorization in GitLab (medium 5.3)
- [CVE-2026-6712](https://insights.sbomify.com/CVE-2026-6712/): Website LLMs.txt <= 8.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting (medium 4.4)
- [CVE-2026-6711](https://insights.sbomify.com/CVE-2026-6711/): Website LLMs.txt <= 8.2.6 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2026-67106](https://insights.sbomify.com/CVE-2026-67106/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (medium 5.3)
- [CVE-2026-67105](https://insights.sbomify.com/CVE-2026-67105/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (high 7.4)
- [CVE-2026-67104](https://insights.sbomify.com/CVE-2026-67104/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (medium 5.3)
- [CVE-2026-67103](https://insights.sbomify.com/CVE-2026-67103/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (high 7.6)
- [CVE-2026-67102](https://insights.sbomify.com/CVE-2026-67102/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (high 8.1)
- [CVE-2026-67101](https://insights.sbomify.com/CVE-2026-67101/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/451/