# Vulnerabilities published in 2026


- [CVE-2026-6248](https://insights.sbomify.com/CVE-2026-6248/): wpForo Forum <= 3.0.5 - Authenticated (Subscriber+) Arbitrary File Deletion via Custom Profile Field File Path (high 8.1)
- [CVE-2026-62479](https://insights.sbomify.com/CVE-2026-62479/): Missing authorization in Oracle Public Sector Financials (medium 5.4)
- [CVE-2026-62478](https://insights.sbomify.com/CVE-2026-62478/): Auth bypass in Oracle Public Sector Financials (high 8.8)
- [CVE-2026-62477](https://insights.sbomify.com/CVE-2026-62477/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.1)
- [CVE-2026-62476](https://insights.sbomify.com/CVE-2026-62476/): Auth bypass in Oracle Public Sector Payroll (high 8.8)
- [CVE-2026-62475](https://insights.sbomify.com/CVE-2026-62475/): Missing authorization in Oracle Shipping Execution (medium 6.6)
- [CVE-2026-62474](https://insights.sbomify.com/CVE-2026-62474/): Missing authorization in Oracle Lease and Finance Management (medium 6.3)
- [CVE-2026-62473](https://insights.sbomify.com/CVE-2026-62473/): Missing authorization in Oracle Installed Base (high 8.3)
- [CVE-2026-62472](https://insights.sbomify.com/CVE-2026-62472/): Missing authorization in Oracle Installed Base (high 8.1)
- [CVE-2026-62471](https://insights.sbomify.com/CVE-2026-62471/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 8.1)
- [CVE-2026-62470](https://insights.sbomify.com/CVE-2026-62470/): Information disclosure in Oracle Self-Service Human Resources (medium 6.5)
- [CVE-2026-6247](https://insights.sbomify.com/CVE-2026-6247/): Cross-site scripting in scratchblocks for WP (medium 6.4)
- [CVE-2026-62469](https://insights.sbomify.com/CVE-2026-62469/): Missing authorization in Oracle Human Resources (high 7.1)
- [CVE-2026-62468](https://insights.sbomify.com/CVE-2026-62468/): Missing authorization in Oracle Human Resources (high 8.1)
- [CVE-2026-62467](https://insights.sbomify.com/CVE-2026-62467/): Missing authorization in Oracle Hyperion Infrastructure Technology (high 7.7)
- [CVE-2026-62466](https://insights.sbomify.com/CVE-2026-62466/): Missing authorization in Oracle Human Resources (high 7.2)
- [CVE-2026-62465](https://insights.sbomify.com/CVE-2026-62465/): Denial of service in Oracle HRMS (US) (medium 6.6)
- [CVE-2026-62464](https://insights.sbomify.com/CVE-2026-62464/): Auth bypass in Oracle Payroll (high 8.8)
- [CVE-2026-62463](https://insights.sbomify.com/CVE-2026-62463/): Missing authorization in Oracle Hyperion Infrastructure Technology (critical 9.6)
- [CVE-2026-62462](https://insights.sbomify.com/CVE-2026-62462/): Missing authorization in Oracle Work in Process (high 8.8)
- [CVE-2026-62461](https://insights.sbomify.com/CVE-2026-62461/): Missing authorization in Oracle Hyperion Calculation Manager (low 3.1)
- [CVE-2026-62460](https://insights.sbomify.com/CVE-2026-62460/): Missing authorization in Oracle Hyperion Calculation Manager (medium 5.0)
- [CVE-2026-6246](https://insights.sbomify.com/CVE-2026-6246/): Cross-site scripting in Simple Random Posts Shortcode (medium 6.4)
- [CVE-2026-62459](https://insights.sbomify.com/CVE-2026-62459/): Missing authorization in Oracle Hyperion Calculation Manager (high 7.2)
- [CVE-2026-62458](https://insights.sbomify.com/CVE-2026-62458/): Missing authorization in Oracle Work in Process (high 7.1)
- [CVE-2026-62457](https://insights.sbomify.com/CVE-2026-62457/): Missing authorization in Oracle Hyperion Infrastructure Technology (critical 9.8)
- [CVE-2026-62456](https://insights.sbomify.com/CVE-2026-62456/): Privilege escalation in Oracle HRMS (UK) (high 8.2)
- [CVE-2026-62455](https://insights.sbomify.com/CVE-2026-62455/): Missing authorization in Siebel CRM Cloud Applications (high 8.3)
- [CVE-2026-62454](https://insights.sbomify.com/CVE-2026-62454/): Missing authorization in Siebel CRM Cloud Applications (high 7.8)
- [CVE-2026-62453](https://insights.sbomify.com/CVE-2026-62453/): Missing authorization in Oracle HRMS (UK) (medium 6.3)
- [CVE-2026-62452](https://insights.sbomify.com/CVE-2026-62452/): Missing authorization in Siebel CRM Cloud Applications (critical 9.9)
- [CVE-2026-62451](https://insights.sbomify.com/CVE-2026-62451/): Missing authorization in Oracle Work in Process (high 8.1)
- [CVE-2026-62450](https://insights.sbomify.com/CVE-2026-62450/): Missing authorization in Oracle Flow Manufacturing (high 8.8)
- [CVE-2026-6245](https://insights.sbomify.com/CVE-2026-6245/): Sssd: out-of-bounds read in the sssd (medium 5.5)
- [CVE-2026-62449](https://insights.sbomify.com/CVE-2026-62449/): Missing authorization in Oracle Work in Process (high 7.0)
- [CVE-2026-62448](https://insights.sbomify.com/CVE-2026-62448/): Missing authorization in Oracle Email Center (high 8.2)
- [CVE-2026-62447](https://insights.sbomify.com/CVE-2026-62447/): Auth bypass in Oracle Trade Management (high 8.8)
- [CVE-2026-62446](https://insights.sbomify.com/CVE-2026-62446/): Missing authorization in Oracle Hyperion Calculation Manager (medium 5.3)
- [CVE-2026-62445](https://insights.sbomify.com/CVE-2026-62445/): Missing authorization in Oracle Order Management (high 8.1)
- [CVE-2026-62444](https://insights.sbomify.com/CVE-2026-62444/): Open redirect in Oracle Contracts Integration (medium 6.1)
- [CVE-2026-62443](https://insights.sbomify.com/CVE-2026-62443/): Cross-site request forgery in Oracle Contracts Integration (high 7.1)
- [CVE-2026-62442](https://insights.sbomify.com/CVE-2026-62442/): Security feature bypass in Siebel CRM Cloud Applications (high 8.1)
- [CVE-2026-62441](https://insights.sbomify.com/CVE-2026-62441/): Missing authorization in Oracle Hyperion Calculation Manager (medium 5.4)
- [CVE-2026-62440](https://insights.sbomify.com/CVE-2026-62440/): Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation (critical 9.1)
- [CVE-2026-6244](https://insights.sbomify.com/CVE-2026-6244/): division by zero in libpcap before 1.10.7 (medium 5.5)
- [CVE-2026-62439](https://insights.sbomify.com/CVE-2026-62439/): Gimp: gimp: file-pvr plug-in pvr file parsing integer overflow heap-based buffer overflow vulnerability (high 7.0)
- [CVE-2026-62438](https://insights.sbomify.com/CVE-2026-62438/): Gimp: gimp: paa integer overflow out-of-bounds read (medium 6.1)
- [CVE-2026-62437](https://insights.sbomify.com/CVE-2026-62437/): x86: DMs may cause mem leak by IRQ binding (medium 6.5)
- [CVE-2026-62436](https://insights.sbomify.com/CVE-2026-62436/): grant-table: version change racing with other operations (medium 6.5)
- [CVE-2026-62435](https://insights.sbomify.com/CVE-2026-62435/): grant-table: version change racing with other operations (medium 6.5)
- [CVE-2026-62434](https://insights.sbomify.com/CVE-2026-62434/): PoD: Don't try to reclaim special pages (medium 5.3)
- [CVE-2026-62433](https://insights.sbomify.com/CVE-2026-62433/): correct buffer checks for DM_OP hypercalls (high 7.3)
- [CVE-2026-62432](https://insights.sbomify.com/CVE-2026-62432/): evtchn: Race between FIFO expand and reset (high 7.3)
- [CVE-2026-62431](https://insights.sbomify.com/CVE-2026-62431/): Viridian STIMER division by zero (high 7.5)
- [CVE-2026-62430](https://insights.sbomify.com/CVE-2026-62430/): x86: Out-of-bounds read in vRTC emulation (high 7.5)
- [CVE-2026-6243](https://insights.sbomify.com/CVE-2026-6243/): Frontend Admin by DynamiApps <= 3.28.36 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content (medium 6.4)
- [CVE-2026-62429](https://insights.sbomify.com/CVE-2026-62429/): vNUMA domain cleanup may race other operations (medium 6.5)
- [CVE-2026-62428](https://insights.sbomify.com/CVE-2026-62428/): grant-table: type confusion in grant-copy (high 7.8)
- [CVE-2026-62427](https://insights.sbomify.com/CVE-2026-62427/): sysctl and platform-op locks open to abuse (high 8.8)
- [CVE-2026-62426](https://insights.sbomify.com/CVE-2026-62426/): sysctl and platform-op locks open to abuse (high 8.8)
- [CVE-2026-62425](https://insights.sbomify.com/CVE-2026-62425/): buffer overruns in libfsimage iso9660 handling (medium 5.5)
- [CVE-2026-62424](https://insights.sbomify.com/CVE-2026-62424/): buffer overruns in libfsimage iso9660 handling (medium 5.5)
- [CVE-2026-62423](https://insights.sbomify.com/CVE-2026-62423/): buffer overruns in libfsimage iso9660 handling (medium 5.5)
- [CVE-2026-62422](https://insights.sbomify.com/CVE-2026-62422/): Auth bypass in YouTrack (critical 10.0)
- [CVE-2026-62420](https://insights.sbomify.com/CVE-2026-62420/): Cross-project cluster migration bypasses project restrictions via cluster notification flag (critical 9.9)
- [CVE-2026-6242](https://insights.sbomify.com/CVE-2026-6242/): Authenticated Format String Vulnerability in ONVIF Subscribe Service on TP-Link Tapo C520WS (medium 6.8)
- [CVE-2026-62418](https://insights.sbomify.com/CVE-2026-62418/): Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check (high 8.1)
- [CVE-2026-62416](https://insights.sbomify.com/CVE-2026-62416/): Misconfiguration in Network Scanner Tool (Bundled software for Sharpdesk) (medium 6.9)
- [CVE-2026-62415](https://insights.sbomify.com/CVE-2026-62415/): Joomla Extension - joomdonation.com - Insecure default configuration Membership Pro < 4.6.2 (critical 9.1)
- [CVE-2026-62414](https://insights.sbomify.com/CVE-2026-62414/): Joomla Extension - joomlack.fr - Improper access control in Page Builder CK < 3.6.2 (critical 9.1)
- [CVE-2026-6241](https://insights.sbomify.com/CVE-2026-6241/): Authenticated Format String Vulnerability in ONVIF AddScopes Method on TP-Link Tapo C520WS (medium 6.8)
- [CVE-2026-6240](https://insights.sbomify.com/CVE-2026-6240/): Authenticated Stack-based Buffer Overflow in ONVIF DeleteUsers Service on TP-Link Tapo C520WS (medium 6.8)
- [CVE-2026-62393](https://insights.sbomify.com/CVE-2026-62393/): Apache Kylin: Improper authorization in job information retrieval (medium 4.3)
- [CVE-2026-62392](https://insights.sbomify.com/CVE-2026-62392/): Apache Kylin: OS Command Injection via Async Query API (high 8.8)
- [CVE-2026-62391](https://insights.sbomify.com/CVE-2026-62391/): Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases (high 8.1)
- [CVE-2026-62390](https://insights.sbomify.com/CVE-2026-62390/): Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API (critical 9.8)
- [CVE-2026-6239](https://insights.sbomify.com/CVE-2026-6239/): Authenticated Stack-based Buffer Overflow in ONVIF CreateUsers Service in TP-Link Tao C520WS (medium 6.8)
- [CVE-2026-62388](https://insights.sbomify.com/CVE-2026-62388/): NLTK before 3.10.0 Insecure Default Configuration in pathsec.py (high 8.7)
- [CVE-2026-62387](https://insights.sbomify.com/CVE-2026-62387/): Grav < 1.0.0-rc.16 CORS Misconfiguration via API Plugin (high 7.1)
- [CVE-2026-62386](https://insights.sbomify.com/CVE-2026-62386/): Grav < 1.0.0-rc.16 Authentication Bypass via token URL Parameter (high 8.2)
- [CVE-2026-62385](https://insights.sbomify.com/CVE-2026-62385/): NLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers (high 8.2)
- [CVE-2026-62384](https://insights.sbomify.com/CVE-2026-62384/): NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2 (high 8.7)
- [CVE-2026-62383](https://insights.sbomify.com/CVE-2026-62383/): nltk IPIPANCorpusReader Symlink Arbitrary File Read (medium 6.8)
- [CVE-2026-62382](https://insights.sbomify.com/CVE-2026-62382/): PasswordPusher before v2.9.6 Authentication Bypass via Null Comparison (medium 6.9)
- [CVE-2026-62381](https://insights.sbomify.com/CVE-2026-62381/): luci-lib-px5g 2040-bit Certificate Signing Heap Buffer Overflow (medium 6.9)
- [CVE-2026-62380](https://insights.sbomify.com/CVE-2026-62380/): Netty before 4.2.16.Final SOCKS Proxy Null Byte Injection (medium 6.3)
- [CVE-2026-6238](https://insights.sbomify.com/CVE-2026-6238/): Buffer overread in ns_printrrf with corrupted RDATA field (medium 6.5)
- [CVE-2026-62379](https://insights.sbomify.com/CVE-2026-62379/): OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback (critical 9.8)
- [CVE-2026-62378](https://insights.sbomify.com/CVE-2026-62378/): RustFS Console: Critical Stored XSS in Preview Modal leading to Administrative Account Takeover (critical 9.0)
- [CVE-2026-62377](https://insights.sbomify.com/CVE-2026-62377/): Denial of service in libheif (medium 4.3)
- [CVE-2026-62376](https://insights.sbomify.com/CVE-2026-62376/): Vikunja: Plaintext storage of password-reset/email-confirm tokens in database enables account takeover on DB read access (high 8.1)
- [CVE-2026-62374](https://insights.sbomify.com/CVE-2026-62374/): SD JWT JS: Tampered disclosures silently dropped instead of rejected (high 7.1)
- [CVE-2026-62371](https://insights.sbomify.com/CVE-2026-62371/): KubeEdge: Command Injection in NodeUpgradeJob - RCE on edge nodes via v1alpha2 API (high 8.8)
- [CVE-2026-62370](https://insights.sbomify.com/CVE-2026-62370/): KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub (medium 6.5)
- [CVE-2026-6237](https://insights.sbomify.com/CVE-2026-6237/): Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute (medium 6.4)
- [CVE-2026-62369](https://insights.sbomify.com/CVE-2026-62369/): KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join (high 8.1)
- [CVE-2026-62368](https://insights.sbomify.com/CVE-2026-62368/): Snipe-IT: Stored XSS via Custom Field name in asset-list column headers (high 8.1)
- [CVE-2026-62367](https://insights.sbomify.com/CVE-2026-62367/): Vikunja: OIDC email-fallback account linking ignores email_verified, enabling local-account takeover (high 7.5)
- [CVE-2026-62364](https://insights.sbomify.com/CVE-2026-62364/): wlc may disclose API tokens to project-configured URLs (low 2.3)
- [CVE-2026-62363](https://insights.sbomify.com/CVE-2026-62363/): ImageMagick: Heap Buffer Over-Write in fx operation (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/487/