# Vulnerabilities published in 2026


- [CVE-2026-6679](https://insights.sbomify.com/CVE-2026-6679/): DTLS 1.3 ACK serialization heap buffer overflow via integer truncation (high 8.8)
- [CVE-2026-66788](https://insights.sbomify.com/CVE-2026-66788/): Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label (critical 9.9)
- [CVE-2026-66787](https://insights.sbomify.com/CVE-2026-66787/): Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses (high 8.7)
- [CVE-2026-66786](https://insights.sbomify.com/CVE-2026-66786/): Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets (critical 9.1)
- [CVE-2026-66785](https://insights.sbomify.com/CVE-2026-66785/): Security feature bypass in Red Hat Advanced Cluster Management for Kubernetes 2 (high 8.7)
- [CVE-2026-66783](https://insights.sbomify.com/CVE-2026-66783/): Submariner-operator: release workflow consumes same-org composite action via mutable @devel branch ref (medium 4.4)
- [CVE-2026-66782](https://insights.sbomify.com/CVE-2026-66782/): Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps (medium 5.8)
- [CVE-2026-66781](https://insights.sbomify.com/CVE-2026-66781/): Submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication (medium 5.4)
- [CVE-2026-66780](https://insights.sbomify.com/CVE-2026-66780/): Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity (medium 6.5)
- [CVE-2026-6678](https://insights.sbomify.com/CVE-2026-6678/): Integer underflow in wc_PKCS7_DecryptOri handling crafted Other Recipient Info (low 1.0)
- [CVE-2026-66779](https://insights.sbomify.com/CVE-2026-66779/): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (medium 6.3)
- [CVE-2026-66778](https://insights.sbomify.com/CVE-2026-66778/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 5.3)
- [CVE-2026-66777](https://insights.sbomify.com/CVE-2026-66777/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 5.9)
- [CVE-2026-66776](https://insights.sbomify.com/CVE-2026-66776/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 5.9)
- [CVE-2026-66775](https://insights.sbomify.com/CVE-2026-66775/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 4.3)
- [CVE-2026-66774](https://insights.sbomify.com/CVE-2026-66774/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (low 3.7)
- [CVE-2026-66773](https://insights.sbomify.com/CVE-2026-66773/): Server-controlled `__next` URL is not checking cross-origin (medium 5.9)
- [CVE-2026-66772](https://insights.sbomify.com/CVE-2026-66772/): Missing Authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin Tools) (medium 4.3)
- [CVE-2026-66771](https://insights.sbomify.com/CVE-2026-66771/): Cross Site Scripting (XSS) vulnerability in SAPUI5 (medium 6.1)
- [CVE-2026-66770](https://insights.sbomify.com/CVE-2026-66770/): SQL Injection vulnerability in SAP Social Intelligence (medium 6.3)
- [CVE-2026-66768](https://insights.sbomify.com/CVE-2026-66768/): Improper Access Control in SAP NetWeaver (SAP GUI for Java) (critical 9.0)
- [CVE-2026-66767](https://insights.sbomify.com/CVE-2026-66767/): Memory Corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (high 7.7)
- [CVE-2026-66766](https://insights.sbomify.com/CVE-2026-66766/): Denial of Service (DoS) in SAP S/4HANA (Manage Supply Protection) (high 7.5)
- [CVE-2026-66764](https://insights.sbomify.com/CVE-2026-66764/): Missing Authorization check in SAP S/4 HANA (Reprocess Bank Statement Items) (medium 4.3)
- [CVE-2026-66763](https://insights.sbomify.com/CVE-2026-66763/): Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server) (high 7.9)
- [CVE-2026-66761](https://insights.sbomify.com/CVE-2026-66761/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 4.3)
- [CVE-2026-66760](https://insights.sbomify.com/CVE-2026-66760/): Multiple vulnerabilities in SAP Business AI Platform (Approuter) (medium 6.4)
- [CVE-2026-6676](https://insights.sbomify.com/CVE-2026-6676/): Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archive (high 7.8)
- [CVE-2026-66759](https://insights.sbomify.com/CVE-2026-66759/): Gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted icns images (high 7.1)
- [CVE-2026-66758](https://insights.sbomify.com/CVE-2026-66758/): Gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted fits images (high 7.8)
- [CVE-2026-66757](https://insights.sbomify.com/CVE-2026-66757/): Gimp: signed integer overflow in file-sgi (sgi-lib) causes the plugin to crash on rle sgi images (medium 5.5)
- [CVE-2026-66756](https://insights.sbomify.com/CVE-2026-66756/): Apache Tika: unpack endpoint in tika-server allows configuration with unsecureFeatures=false (medium 6.9)
- [CVE-2026-66755](https://insights.sbomify.com/CVE-2026-66755/): Apache Tika: Arbitrary Local File Read in ISArchiveParser (medium 5.9)
- [CVE-2026-66754](https://insights.sbomify.com/CVE-2026-66754/): Rouille 0.1.6 - 3.6.2 Reachable Assertion DoS via remove_prefix percent-encoding (high 8.2)
- [CVE-2026-66753](https://insights.sbomify.com/CVE-2026-66753/): tiny-http 0.12.0 HTTP Response Splitting via Header Injection (medium 6.3)
- [CVE-2026-66752](https://insights.sbomify.com/CVE-2026-66752/): tiny-http 0.12.0 HTTP Request Smuggling via Transfer-Encoding Handling (medium 6.3)
- [CVE-2026-66751](https://insights.sbomify.com/CVE-2026-66751/): Let's Chat 0.3.0 - 0.4.8 Improper Authorization via DELETE /rooms/:room (medium 5.3)
- [CVE-2026-66750](https://insights.sbomify.com/CVE-2026-66750/): Let's Chat 0.3.0 - 0.4.8 Broken Access Control File Disclosure via GET /files route (medium 5.3)
- [CVE-2026-6675](https://insights.sbomify.com/CVE-2026-6675/): Responsive Blocks <= 2.2.0 - Unauthenticated Open Email Relay via REST API 'email_to' Parameter (medium 5.3)
- [CVE-2026-66749](https://insights.sbomify.com/CVE-2026-66749/): Let's Chat 0.4.0 - 0.4.8 Denial of Service via Null Dereference in Room Lookup (high 7.1)
- [CVE-2026-66748](https://insights.sbomify.com/CVE-2026-66748/): Camaleon CMS 2.1.1 - 2.9.1 Authenticated RCE via select_eval Custom Field (high 8.7)
- [CVE-2026-66747](https://insights.sbomify.com/CVE-2026-66747/): ENDLESSDOORS: Zbtlink Router rctl/kworker Phone-Home Root Implant (critical 9.3)
- [CVE-2026-66746](https://insights.sbomify.com/CVE-2026-66746/): Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection (medium 5.3)
- [CVE-2026-66745](https://insights.sbomify.com/CVE-2026-66745/): Artica Proxy 4.50 Session Fixation via fw.login.php (high 7.5)
- [CVE-2026-6674](https://insights.sbomify.com/CVE-2026-6674/): Plugin: CMS für Motorrad Werkstätten <= 1.0.0 - Authenticated (Subscriber+) SQL Injection via 'arttype' Parameter (medium 6.5)
- [CVE-2026-66738](https://insights.sbomify.com/CVE-2026-66738/): SPIP < 4.4.18 Code Injection via Navigation Endpoint on SQLite (high 7.7)
- [CVE-2026-66733](https://insights.sbomify.com/CVE-2026-66733/): Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache (high 8.7)
- [CVE-2026-66732](https://insights.sbomify.com/CVE-2026-66732/): Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager (high 8.3)
- [CVE-2026-66731](https://insights.sbomify.com/CVE-2026-66731/): facil.io 0.7.5 - 0.7.6 HTTP/1.1 Chunked Transfer Encoding Parser Crash DoS (high 8.7)
- [CVE-2026-66730](https://insights.sbomify.com/CVE-2026-66730/): facil.io 0.6.0 - 0.7.6 Infinite Loop DoS via Multipart MIME Body Parser (high 8.7)
- [CVE-2026-6673](https://insights.sbomify.com/CVE-2026-6673/): Mattermost Jira plugin had unauthenticated {{/ac/installed}} lifecycle callback during pending Jira Cloud install (medium 6.4)
- [CVE-2026-66729](https://insights.sbomify.com/CVE-2026-66729/): facil.io 0.6.0 - 0.7.6 Integer Underflow DoS via Multipart MIME Body Parser (high 8.7)
- [CVE-2026-66724](https://insights.sbomify.com/CVE-2026-66724/): Permission Bypass Via Undocumented HTTP Methods In MWDB Core (medium 5.3)
- [CVE-2026-66723](https://insights.sbomify.com/CVE-2026-66723/): Missing authentication requirement in Remote Instances proxy API in MWDB Core (high 7.0)
- [CVE-2026-66722](https://insights.sbomify.com/CVE-2026-66722/): Apache CloudStack: ProjectRole & ProjectRolePermission authorization issue (high 7.2)
- [CVE-2026-66721](https://insights.sbomify.com/CVE-2026-66721/): Apache CloudStack: Authorization issue with listHostTags for domain admins (low 2.7)
- [CVE-2026-66720](https://insights.sbomify.com/CVE-2026-66720/): MZ Automation libiec61850 Out-of-bounds Read (high 7.1)
- [CVE-2026-6672](https://insights.sbomify.com/CVE-2026-6672/): Cross-site scripting in Affiliate Program Suite — SliceWP Affiliates (medium 6.4)
- [CVE-2026-66713](https://insights.sbomify.com/CVE-2026-66713/): Apache Axis2/Java: deserialization of untrusted Data (critical 9.8)
- [CVE-2026-66712](https://insights.sbomify.com/CVE-2026-66712/): WordPress Simple Membership plugin <= 4.7.8 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-66711](https://insights.sbomify.com/CVE-2026-66711/): WordPress WooCommerce Multilingual & Multicurrency plugin <= 5.5.6 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66710](https://insights.sbomify.com/CVE-2026-66710/): WordPress e2pdf plugin <= 1.32.40 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-66709](https://insights.sbomify.com/CVE-2026-66709/): WordPress CTX Feed plugin <= 6.6.42 - Remote Code Execution (RCE) vulnerability (critical 9.1)
- [CVE-2026-66708](https://insights.sbomify.com/CVE-2026-66708/): WordPress Total Upkeep plugin <= 1.17.2 - Broken Access Control vulnerability (high 8.2)
- [CVE-2026-66707](https://insights.sbomify.com/CVE-2026-66707/): WordPress Facebook for WooCommerce plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66706](https://insights.sbomify.com/CVE-2026-66706/): WordPress Subscribe to Comments plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability (medium 5.9)
- [CVE-2026-66705](https://insights.sbomify.com/CVE-2026-66705/): WordPress Facebook for WordPress plugin <= 5.2.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66704](https://insights.sbomify.com/CVE-2026-66704/): WordPress Gutenverse Companion plugin <= 2.5.1 - Server Side Request Forgery (SSRF) vulnerability (high 7.2)
- [CVE-2026-66703](https://insights.sbomify.com/CVE-2026-66703/): WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-66702](https://insights.sbomify.com/CVE-2026-66702/): WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66701](https://insights.sbomify.com/CVE-2026-66701/): WordPress Profile Builder plugin <= 3.16.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-66700](https://insights.sbomify.com/CVE-2026-66700/): WordPress Smart Online Order for Clover plugin <= 1.6.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-6670](https://insights.sbomify.com/CVE-2026-6670/): Media Sync <= 1.4.9 - Authenticated (Author+) Path Traversal via 'sub_dir' and 'media_items' Parameters (medium 6.5)
- [CVE-2026-66699](https://insights.sbomify.com/CVE-2026-66699/): WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-66698](https://insights.sbomify.com/CVE-2026-66698/): WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66697](https://insights.sbomify.com/CVE-2026-66697/): Cross-site scripting in Colissimo Officiel : Méthodes de livraison pour WooCommerce (high 7.1)
- [CVE-2026-66696](https://insights.sbomify.com/CVE-2026-66696/): WordPress Gutenberg Blocks by Kadence Blocks plugin <= 3.7.8 - Sensitive Data Exposure vulnerability (medium 4.3)
- [CVE-2026-66695](https://insights.sbomify.com/CVE-2026-66695/): WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability (medium 6.5)
- [CVE-2026-66694](https://insights.sbomify.com/CVE-2026-66694/): WordPress Thrive Architect plugin <= 10.9.3.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-66693](https://insights.sbomify.com/CVE-2026-66693/): WordPress Motors plugin <= 1.4.113 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-66692](https://insights.sbomify.com/CVE-2026-66692/): Missing authorization in Colissimo Officiel : Méthodes de livraison pour WooCommerce (medium 4.3)
- [CVE-2026-66691](https://insights.sbomify.com/CVE-2026-66691/): WordPress Nokri theme <= 1.6.6 - Broken Access Control vulnerability (critical 9.8)
- [CVE-2026-66690](https://insights.sbomify.com/CVE-2026-66690/): WordPress GiveWP plugin <= 4.16.5 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-6669](https://insights.sbomify.com/CVE-2026-6669/): Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer (medium 5.9)
- [CVE-2026-66689](https://insights.sbomify.com/CVE-2026-66689/): WordPress Anti Spam and list cleaner – AcyChecker plugin <= 2.0.0 - Broken Access Control vulnerability (medium 6.3)
- [CVE-2026-66688](https://insights.sbomify.com/CVE-2026-66688/): WordPress Ultimate Addons for Elementor plugin <= 1.45.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-66687](https://insights.sbomify.com/CVE-2026-66687/): WordPress WpBookingly plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-66686](https://insights.sbomify.com/CVE-2026-66686/): WordPress Plugins Garbage Collector (Database Cleanup) plugin <= 0.14 - Cross Site Request Forgery (CSRF) vulnerability (medium 6.5)
- [CVE-2026-66685](https://insights.sbomify.com/CVE-2026-66685/): WordPress Featured Video Plus plugin <= 2.3.3 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-66684](https://insights.sbomify.com/CVE-2026-66684/): WordPress Export Import Menus plugin <= 1.9.2 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-66683](https://insights.sbomify.com/CVE-2026-66683/): WordPress Custom CSS and JavaScript plugin <= 2.0.16 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-66682](https://insights.sbomify.com/CVE-2026-66682/): WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability (critical 9.8)
- [CVE-2026-66681](https://insights.sbomify.com/CVE-2026-66681/): WordPress theme My Login plugin <= 7.1.14 - Cross Site Request Forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2026-66680](https://insights.sbomify.com/CVE-2026-66680/): WordPress Locatoraid Store Locator plugin <= 3.9.72 - SQL Injection vulnerability (critical 9.3)
- [CVE-2026-6668](https://insights.sbomify.com/CVE-2026-6668/): Integer overflow causes an infinite loop in packet buffer growth in PgBouncer (high 7.5)
- [CVE-2026-66679](https://insights.sbomify.com/CVE-2026-66679/): WordPress Appointment Hour Booking plugin <= 1.5.91 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-66678](https://insights.sbomify.com/CVE-2026-66678/): WordPress Advanced Custom Fields: Font Awesome Field plugin <= 6.1.1 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-66677](https://insights.sbomify.com/CVE-2026-66677/): WordPress Leyka plugin <= 3.32.3 - Broken Authentication vulnerability (high 7.6)
- [CVE-2026-66676](https://insights.sbomify.com/CVE-2026-66676/): WordPress Easy Invoice plugin <= 2.3.8 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-66674](https://insights.sbomify.com/CVE-2026-66674/): WordPress Simple Cloudflare Turnstile plugin <= 1.42.1 - Captcha Bypass vulnerability (medium 5.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/453/