# Vulnerabilities published in 2026


- [CVE-2026-59793](https://insights.sbomify.com/CVE-2026-59793/): Path traversal in TeamCity (high 8.8)
- [CVE-2026-59792](https://insights.sbomify.com/CVE-2026-59792/): Path traversal in IntelliJ IDEA (critical 9.6)
- [CVE-2026-59791](https://insights.sbomify.com/CVE-2026-59791/): Cross-site scripting in YouTrack (low 3.5)
- [CVE-2026-5979](https://insights.sbomify.com/CVE-2026-5979/): D-Link DIR-605L POST Request formVirtualServ buffer overflow (high 8.7)
- [CVE-2026-59788](https://insights.sbomify.com/CVE-2026-59788/): Stored XSS vulnerability in OAuth configuration form (medium 5.6)
- [CVE-2026-59787](https://insights.sbomify.com/CVE-2026-59787/): SNMP trap injection in zabbix_trap_receiver.pl (medium 5.3)
- [CVE-2026-59786](https://insights.sbomify.com/CVE-2026-59786/): Active agent heartbeat missing TLS check (medium 6.9)
- [CVE-2026-59785](https://insights.sbomify.com/CVE-2026-59785/): Hidden host credentials inferable via multiselect.get filtering (medium 5.1)
- [CVE-2026-59783](https://insights.sbomify.com/CVE-2026-59783/): Server DoS via binary items (low 2.3)
- [CVE-2026-59782](https://insights.sbomify.com/CVE-2026-59782/): JavaScript preprocessing memory disclosure (medium 6.9)
- [CVE-2026-59781](https://insights.sbomify.com/CVE-2026-59781/): Misconfiguration in Zabbix (medium 5.4)
- [CVE-2026-59780](https://insights.sbomify.com/CVE-2026-59780/): Apache CloudStack: LDAP provider configuration disclosure (high 7.5)
- [CVE-2026-5978](https://insights.sbomify.com/CVE-2026-5978/): Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection (critical 9.3)
- [CVE-2026-59776](https://insights.sbomify.com/CVE-2026-59776/): Weak cryptography in FeliCa IC chips (high 7.0)
- [CVE-2026-59774](https://insights.sbomify.com/CVE-2026-59774/): Gitea Org-mode file disclosure and code execution (critical 9.8)
- [CVE-2026-5977](https://insights.sbomify.com/CVE-2026-5977/): Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection (critical 9.3)
- [CVE-2026-59769](https://insights.sbomify.com/CVE-2026-59769/): Hardcoded credentials in FA-50 (high 8.8)
- [CVE-2026-59766](https://insights.sbomify.com/CVE-2026-59766/): Gitea private repository metadata disclosure after access revocation (medium 4.3)
- [CVE-2026-59765](https://insights.sbomify.com/CVE-2026-59765/): SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata (high 7.5)
- [CVE-2026-59764](https://insights.sbomify.com/CVE-2026-59764/): Command injection in WRC-X3000GS3-B (high 8.6)
- [CVE-2026-59763](https://insights.sbomify.com/CVE-2026-59763/): Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads (medium 4.3)
- [CVE-2026-59762](https://insights.sbomify.com/CVE-2026-59762/): BIG-IP HTTP/2 vulnerability (high 8.7)
- [CVE-2026-5976](https://insights.sbomify.com/CVE-2026-5976/): Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection (critical 9.3)
- [CVE-2026-5975](https://insights.sbomify.com/CVE-2026-5975/): Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection (critical 9.3)
- [CVE-2026-5974](https://insights.sbomify.com/CVE-2026-5974/): FoundationAgents MetaGPT terminal.py Bash.run os command injection (medium 6.9)
- [CVE-2026-59739](https://insights.sbomify.com/CVE-2026-59739/): Apache ZooKeeper: Information disclosure via SetWatches reconnect replay (high 7.5)
- [CVE-2026-59734](https://insights.sbomify.com/CVE-2026-59734/): Coolify: OS Command Injection in Health Check Configuration Allows Remote Code Execution (high 8.8)
- [CVE-2026-59733](https://insights.sbomify.com/CVE-2026-59733/): rclone `serve restic --private-repos` authorization bypass: `..` in the URL path lets an authenticated user read, overwrite and delete other users' repositories (high 8.8)
- [CVE-2026-59732](https://insights.sbomify.com/CVE-2026-59732/): rclone archive extract allows S3 destination prefix escape via crafted archive paths (medium 5.0)
- [CVE-2026-59731](https://insights.sbomify.com/CVE-2026-59731/): Astro 6.4.7 Authorization Bypass via Decode Iteration Limit and Rewrite Path Canonicalization Mismatch (high 8.2)
- [CVE-2026-59730](https://insights.sbomify.com/CVE-2026-59730/): @astrojs/node: Backslash-prefixed paths not recognized as internal by trailing-slash redirect (low 2.1)
- [CVE-2026-5973](https://insights.sbomify.com/CVE-2026-5973/): FoundationAgents MetaGPT common.py get_mime_type os command injection (medium 6.9)
- [CVE-2026-59729](https://insights.sbomify.com/CVE-2026-59729/): Astro: XSS via unescaped spread attribute names in renderHTMLElement (incomplete fix for CVE-2026-54298) (medium 5.1)
- [CVE-2026-59728](https://insights.sbomify.com/CVE-2026-59728/): @astrojs/rss: XML Injection via Unescaped RSS Feed Fields (medium 4.3)
- [CVE-2026-59727](https://insights.sbomify.com/CVE-2026-59727/): Astro: Cross-site scripting via unescaped transition:* directive values on hydrated islands (low 2.1)
- [CVE-2026-59726](https://insights.sbomify.com/CVE-2026-59726/): Ruflo: Unauthenticated RCE in MCP bridge default docker-compose deployment (critical 10.0)
- [CVE-2026-59725](https://insights.sbomify.com/CVE-2026-59725/): Socket.IO: Engine.IO Polling Transport Connection Exhaustion (high 7.5)
- [CVE-2026-59724](https://insights.sbomify.com/CVE-2026-59724/): Socket.IO: Engine.IO WebTransport SID DoS (high 7.5)
- [CVE-2026-59723](https://insights.sbomify.com/CVE-2026-59723/): Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint) (high 8.8)
- [CVE-2026-59721](https://insights.sbomify.com/CVE-2026-59721/): Hoppscotch: Admin RCE via MAILER_SMTP_URL nodemailer sendmail-transport injection (high 7.2)
- [CVE-2026-59720](https://insights.sbomify.com/CVE-2026-59720/): Hoppscotch: Insecure Default Configuration Allows Public Exposure of Private Collection Data via Mock Server (high 7.5)
- [CVE-2026-5972](https://insights.sbomify.com/CVE-2026-5972/): FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection (medium 6.9)
- [CVE-2026-59717](https://insights.sbomify.com/CVE-2026-59717/): Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing (medium 4.3)
- [CVE-2026-59715](https://insights.sbomify.com/CVE-2026-59715/): Open WebUI: Unauthenticated WebSocket Access to Collaborative Document Handlers (ydoc:awareness:update, ydoc:document:leave) (low 3.1)
- [CVE-2026-59714](https://insights.sbomify.com/CVE-2026-59714/): Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids) (high 7.1)
- [CVE-2026-59713](https://insights.sbomify.com/CVE-2026-59713/): Leantime - OIDC Login CSRF via Unconditional State Verification Stub (high 8.6)
- [CVE-2026-59712](https://insights.sbomify.com/CVE-2026-59712/): Leantime - JSON-RPC API Broken Access Control via users.getUser (high 8.6)
- [CVE-2026-59711](https://insights.sbomify.com/CVE-2026-59711/): showdown - Cross-Site Scripting via Unescaped Metadata Title in completeHTMLDocument (medium 5.3)
- [CVE-2026-59710](https://insights.sbomify.com/CVE-2026-59710/): showdown - Stored XSS via Unescaped Table Header ID Attribute Injection (medium 5.3)
- [CVE-2026-5971](https://insights.sbomify.com/CVE-2026-5971/): FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection (medium 6.9)
- [CVE-2026-59709](https://insights.sbomify.com/CVE-2026-59709/): Ghostfolio - Unauthorized Portfolio Holding Tag Modification via Missing Permission Check (medium 5.3)
- [CVE-2026-59708](https://insights.sbomify.com/CVE-2026-59708/): Ghostfolio - Unauthorized Portfolio Data Exposure via Public Endpoint (high 8.7)
- [CVE-2026-59707](https://insights.sbomify.com/CVE-2026-59707/): LocalAI - Server-Side Request Forgery via POST /models/apply (critical 9.2)
- [CVE-2026-59706](https://insights.sbomify.com/CVE-2026-59706/): mem0 - Unauthenticated Config API Exposure and SSRF via ollama_base_url (critical 9.2)
- [CVE-2026-59705](https://insights.sbomify.com/CVE-2026-59705/): mem0 - OpenMemory API Unauthenticated Access via Memory Endpoints (critical 9.3)
- [CVE-2026-59704](https://insights.sbomify.com/CVE-2026-59704/): Cap - Missing Access Control in Video AI Metadata Endpoint (high 7.1)
- [CVE-2026-59703](https://insights.sbomify.com/CVE-2026-59703/): repomix - Local File Inclusion via file:// URL Scheme in Git Clone Endpoint (high 8.7)
- [CVE-2026-59702](https://insights.sbomify.com/CVE-2026-59702/): repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack (critical 9.2)
- [CVE-2026-59701](https://insights.sbomify.com/CVE-2026-59701/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-59700](https://insights.sbomify.com/CVE-2026-59700/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-5970](https://insights.sbomify.com/CVE-2026-5970/): FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection (medium 6.9)
- [CVE-2026-59696](https://insights.sbomify.com/CVE-2026-59696/): uri_string does not bound the port component of a URI before integer conversion (medium 6.9)
- [CVE-2026-59695](https://insights.sbomify.com/CVE-2026-59695/): Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain (high 8.3)
- [CVE-2026-59694](https://insights.sbomify.com/CVE-2026-59694/): Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment (high 8.3)
- [CVE-2026-59693](https://insights.sbomify.com/CVE-2026-59693/): Denial of service in Desigo DXR2 (medium 5.3)
- [CVE-2026-59692](https://insights.sbomify.com/CVE-2026-59692/): Gstreamer1-plugins-bad-free: gstreamer: dtls certificate subject dn stack buffer overflow in openssl_verify_callback (high 7.5)
- [CVE-2026-59691](https://insights.sbomify.com/CVE-2026-59691/): Gstreamer1-plugins-bad-free: gstreamer: rfbsrc/librfb hextile heap out-of-bounds write with 16bpp framebuffer (high 7.1)
- [CVE-2026-59690](https://insights.sbomify.com/CVE-2026-59690/): Missing authorization in ECS Connection Manager (high 8.0)
- [CVE-2026-59689](https://insights.sbomify.com/CVE-2026-59689/): Privilege escalation in ECS Connection Manager (high 8.0)
- [CVE-2026-59688](https://insights.sbomify.com/CVE-2026-59688/): Command injection in ECS Connection Manager (high 8.4)
- [CVE-2026-59687](https://insights.sbomify.com/CVE-2026-59687/): Command injection in ECS Connection Manager (high 8.4)
- [CVE-2026-59686](https://insights.sbomify.com/CVE-2026-59686/): Command injection in ECS Connection Manager (high 8.4)
- [CVE-2026-59685](https://insights.sbomify.com/CVE-2026-59685/): Apache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEM (high 7.5)
- [CVE-2026-59683](https://insights.sbomify.com/CVE-2026-59683/): OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings (critical 9.3)
- [CVE-2026-59682](https://insights.sbomify.com/CVE-2026-59682/): Arbitrary file overwrite and deletion local and remote in OpenRGB (high 8.8)
- [CVE-2026-59681](https://insights.sbomify.com/CVE-2026-59681/): yast2-auth-client: OS command injection via unsanitized Organizational Unit / dnsHostName in AD join (high 8.7)
- [CVE-2026-59680](https://insights.sbomify.com/CVE-2026-59680/): yast2-users: OS command injection via LDAP-supplied shadowLastChange/shadowExpire attribute (high 8.6)
- [CVE-2026-59679](https://insights.sbomify.com/CVE-2026-59679/): fs_read_glyphs() heap OOB read/write via encoding array index mismatch in libXfont2 (critical 9.2)
- [CVE-2026-59678](https://insights.sbomify.com/CVE-2026-59678/): Missing authorization in PortProtonQt (high 7.1)
- [CVE-2026-59677](https://insights.sbomify.com/CVE-2026-59677/): Process Kill Attack Vector in killall() in seunshare (medium 6.8)
- [CVE-2026-59676](https://insights.sbomify.com/CVE-2026-59676/): Local File Deletion Attack Vector in rm_rf() in seunshare (medium 5.8)
- [CVE-2026-59675](https://insights.sbomify.com/CVE-2026-59675/): Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service (high 7.5)
- [CVE-2026-59674](https://insights.sbomify.com/CVE-2026-59674/): LPE from suricata user to root due to chown in %post in suricata packaging (high 7.1)
- [CVE-2026-59673](https://insights.sbomify.com/CVE-2026-59673/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59672](https://insights.sbomify.com/CVE-2026-59672/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59671](https://insights.sbomify.com/CVE-2026-59671/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59670](https://insights.sbomify.com/CVE-2026-59670/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-5967](https://insights.sbomify.com/CVE-2026-5967/): TeamT5｜ThreatSonar Anti-Ransomware - Privilege Escalation (high 8.7)
- [CVE-2026-59669](https://insights.sbomify.com/CVE-2026-59669/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59668](https://insights.sbomify.com/CVE-2026-59668/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59667](https://insights.sbomify.com/CVE-2026-59667/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59666](https://insights.sbomify.com/CVE-2026-59666/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59665](https://insights.sbomify.com/CVE-2026-59665/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59664](https://insights.sbomify.com/CVE-2026-59664/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59663](https://insights.sbomify.com/CVE-2026-59663/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59662](https://insights.sbomify.com/CVE-2026-59662/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59661](https://insights.sbomify.com/CVE-2026-59661/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-59660](https://insights.sbomify.com/CVE-2026-59660/): Multiple vulnerabilities in the Repasat application (medium 4.8)
- [CVE-2026-5966](https://insights.sbomify.com/CVE-2026-5966/): TeamT5｜ThreatSonar Anti-Ransomware - Arbitrary File Deletion (high 7.2)
- [CVE-2026-59659](https://insights.sbomify.com/CVE-2026-59659/): Multiple vulnerabilities in the Repasat application (medium 4.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/511/