# Vulnerabilities published in 2026


- [CVE-2026-57208](https://insights.sbomify.com/CVE-2026-57208/): Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind (medium 6.2)
- [CVE-2026-57207](https://insights.sbomify.com/CVE-2026-57207/): NetBox MCP Server: HTTP transport exposes all NetBox data without authentication (medium 5.9)
- [CVE-2026-57206](https://insights.sbomify.com/CVE-2026-57206/): SimpleChat plugin validation endpoints missing authentication and authorization (high 8.6)
- [CVE-2026-57205](https://insights.sbomify.com/CVE-2026-57205/): SimpleChat: Authenticated users can access other users' profile metadata through user IDOR endpoints (medium 4.3)
- [CVE-2026-57204](https://insights.sbomify.com/CVE-2026-57204/): pypdf: Missing stream length values ignore defined limits (medium 6.9)
- [CVE-2026-57203](https://insights.sbomify.com/CVE-2026-57203/): Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location (medium 6.9)
- [CVE-2026-57202](https://insights.sbomify.com/CVE-2026-57202/): Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes (high 8.1)
- [CVE-2026-57201](https://insights.sbomify.com/CVE-2026-57201/): Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer (high 7.5)
- [CVE-2026-57200](https://insights.sbomify.com/CVE-2026-57200/): Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE (high 7.5)
- [CVE-2026-5720](https://insights.sbomify.com/CVE-2026-5720/): miniupnpd Integer Underflow SOAPAction Header Parsing (high 7.1)
- [CVE-2026-57199](https://insights.sbomify.com/CVE-2026-57199/): Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers (low 2.3)
- [CVE-2026-57198](https://insights.sbomify.com/CVE-2026-57198/): Asterisk: Possible RED T.140 Heap Buffer Overflow (low 2.3)
- [CVE-2026-57197](https://insights.sbomify.com/CVE-2026-57197/): Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) (high 7.7)
- [CVE-2026-57196](https://insights.sbomify.com/CVE-2026-57196/): Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages (low 2.3)
- [CVE-2026-57195](https://insights.sbomify.com/CVE-2026-57195/): Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication (high 7.5)
- [CVE-2026-57194](https://insights.sbomify.com/CVE-2026-57194/): Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk (medium 5.9)
- [CVE-2026-57193](https://insights.sbomify.com/CVE-2026-57193/): Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) (medium 6.9)
- [CVE-2026-57192](https://insights.sbomify.com/CVE-2026-57192/): Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch (medium 6.0)
- [CVE-2026-57191](https://insights.sbomify.com/CVE-2026-57191/): Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing (high 8.2)
- [CVE-2026-57190](https://insights.sbomify.com/CVE-2026-57190/): Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field (high 7.0)
- [CVE-2026-5719](https://insights.sbomify.com/CVE-2026-5719/): itsourcecode Construction Management System borrowedtool.php sql injection (medium 5.3)
- [CVE-2026-57189](https://insights.sbomify.com/CVE-2026-57189/): Asterisk: Possible RED T.140 Generation Accumulation OOB Write (low 2.3)
- [CVE-2026-57188](https://insights.sbomify.com/CVE-2026-57188/): Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling (high 7.1)
- [CVE-2026-57187](https://insights.sbomify.com/CVE-2026-57187/): Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing (high 7.1)
- [CVE-2026-57186](https://insights.sbomify.com/CVE-2026-57186/): Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser (high 7.5)
- [CVE-2026-57185](https://insights.sbomify.com/CVE-2026-57185/): Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser (medium 6.5)
- [CVE-2026-57184](https://insights.sbomify.com/CVE-2026-57184/): Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) (medium 6.3)
- [CVE-2026-57183](https://insights.sbomify.com/CVE-2026-57183/): Scoold: Forged JWT Accepted as Admin API Token Allowing Unauthorized Access to Sensitive Configuration and Logs (medium 6.1)
- [CVE-2026-5718](https://insights.sbomify.com/CVE-2026-5718/): File upload in Drag and Drop Multiple File Upload for Contact Form 7 (high 8.1)
- [CVE-2026-57179](https://insights.sbomify.com/CVE-2026-57179/): social-auth-core has a Session Fixation issue (medium 4.2)
- [CVE-2026-57178](https://insights.sbomify.com/CVE-2026-57178/): social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing (high 7.4)
- [CVE-2026-57177](https://insights.sbomify.com/CVE-2026-57177/): social-auth-core has Login CSRF via Missing State Parameter in LoginRadius Backend (medium 4.3)
- [CVE-2026-57176](https://insights.sbomify.com/CVE-2026-57176/): social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend (medium 6.8)
- [CVE-2026-57175](https://insights.sbomify.com/CVE-2026-57175/): social-auth-core has an Improper Authentication issue (medium 6.4)
- [CVE-2026-57173](https://insights.sbomify.com/CVE-2026-57173/): vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions (medium 6.5)
- [CVE-2026-57172](https://insights.sbomify.com/CVE-2026-57172/): DataEase: Hardcoded JWT Signing Secret in ShareLink (high 8.3)
- [CVE-2026-57171](https://insights.sbomify.com/CVE-2026-57171/): Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345) (high 7.7)
- [CVE-2026-57170](https://insights.sbomify.com/CVE-2026-57170/): Trestle SSTI in Jinja2 include tags allows arbitrary code execution (Incomplete fix of CVE-2026-46439) (high 7.8)
- [CVE-2026-5717](https://insights.sbomify.com/CVE-2026-5717/): Cross-site scripting in VI: Include Post By (medium 6.4)
- [CVE-2026-57169](https://insights.sbomify.com/CVE-2026-57169/): Dockhand: Unauthenticated container exec via WebSocket upgrade (critical 9.6)
- [CVE-2026-57167](https://insights.sbomify.com/CVE-2026-57167/): PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (medium 5.1)
- [CVE-2026-57166](https://insights.sbomify.com/CVE-2026-57166/): PJSIP: Pre-authentication overflow in the telnet CLI error (medium 6.3)
- [CVE-2026-57165](https://insights.sbomify.com/CVE-2026-57165/): PJSIP: Pre-authentication overflow in the telnet CLI history (medium 6.3)
- [CVE-2026-57164](https://insights.sbomify.com/CVE-2026-57164/): PJSIP: Heap overflow in the HTTP client (high 8.3)
- [CVE-2026-57163](https://insights.sbomify.com/CVE-2026-57163/): PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend (high 8.8)
- [CVE-2026-57162](https://insights.sbomify.com/CVE-2026-57162/): PJSIP: Stack overflow parsing SDP a=crypto attributes (high 8.8)
- [CVE-2026-57161](https://insights.sbomify.com/CVE-2026-57161/): PJSIP: Stack overflow handling Service-Route headers in a registration response (high 8.8)
- [CVE-2026-57160](https://insights.sbomify.com/CVE-2026-57160/): PJSIP: SIP message header buffer overflow (medium 6.9)
- [CVE-2026-57159](https://insights.sbomify.com/CVE-2026-57159/): PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance (high 8.4)
- [CVE-2026-57158](https://insights.sbomify.com/CVE-2026-57158/): FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for CVE-2026-23530 (medium 5.1)
- [CVE-2026-57157](https://insights.sbomify.com/CVE-2026-57157/): Out-of-bounds read in the camera device enumerator server (rdpecam) via unterminated DeviceName / VirtualChannelName (medium 6.5)
- [CVE-2026-57156](https://insights.sbomify.com/CVE-2026-57156/): FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Points parsing (high 8.6)
- [CVE-2026-57155](https://insights.sbomify.com/CVE-2026-57155/): OPNsense: Root RCE via Arbitrary File Write in GeoIP Alias Importer (critical 9.9)
- [CVE-2026-5715](https://insights.sbomify.com/CVE-2026-5715/): Voyage Plus <= 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'post-content' Shortcode (medium 6.4)
- [CVE-2026-57149](https://insights.sbomify.com/CVE-2026-57149/): plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection (critical 9.9)
- [CVE-2026-57148](https://insights.sbomify.com/CVE-2026-57148/): praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard) (critical 9.8)
- [CVE-2026-57147](https://insights.sbomify.com/CVE-2026-57147/): praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery (critical 9.8)
- [CVE-2026-57146](https://insights.sbomify.com/CVE-2026-57146/): PraisonAI A2U incomplete authentication fix leaves current serve command unauthenticated by default (high 7.5)
- [CVE-2026-57145](https://insights.sbomify.com/CVE-2026-57145/): PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation (critical 9.1)
- [CVE-2026-57144](https://insights.sbomify.com/CVE-2026-57144/): PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable (high 8.8)
- [CVE-2026-57143](https://insights.sbomify.com/CVE-2026-57143/): PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter (high 8.8)
- [CVE-2026-57142](https://insights.sbomify.com/CVE-2026-57142/): PraisonAI recipe workflow policy can be bypassed by declaring and YAML-approving dangerous tools outside TEMPLATE.yaml (high 7.8)
- [CVE-2026-57141](https://insights.sbomify.com/CVE-2026-57141/): PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool (critical 9.8)
- [CVE-2026-57140](https://insights.sbomify.com/CVE-2026-57140/): PraisonAI AgentOS exposes unauthenticated agent listing and invocation (critical 9.4)
- [CVE-2026-5714](https://insights.sbomify.com/CVE-2026-5714/): Enable Media Replace <= 4.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via 'location_dir' Parameter (medium 6.4)
- [CVE-2026-57139](https://insights.sbomify.com/CVE-2026-57139/): PraisonAI MCPServer exposes unauthenticated HTTP tools/call (critical 9.8)
- [CVE-2026-57138](https://insights.sbomify.com/CVE-2026-57138/): PraisonAI codeMode sandbox escape via Function constructor (critical 9.9)
- [CVE-2026-57137](https://insights.sbomify.com/CVE-2026-57137/): PraisonAI AgentLoop onToolCall approval runs after tool execution (high 8.8)
- [CVE-2026-57136](https://insights.sbomify.com/CVE-2026-57136/): PraisonAI SandboxExecutor allowedCommands bypass via shell chaining (high 8.8)
- [CVE-2026-57135](https://insights.sbomify.com/CVE-2026-57135/): PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients (high 7.6)
- [CVE-2026-57134](https://insights.sbomify.com/CVE-2026-57134/): PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation (high 8.2)
- [CVE-2026-57133](https://insights.sbomify.com/CVE-2026-57133/): PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining (high 8.8)
- [CVE-2026-57132](https://insights.sbomify.com/CVE-2026-57132/): PraisonAI: PRAISONAI_CALL_AUTH=disabled environment variable unconditionally disables authentication (high 8.2)
- [CVE-2026-57131](https://insights.sbomify.com/CVE-2026-57131/): praisonai: Jobs API exposes agent-execution endpoints with no authentication (critical 9.8)
- [CVE-2026-57130](https://insights.sbomify.com/CVE-2026-57130/): PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters (high 8.1)
- [CVE-2026-5713](https://insights.sbomify.com/CVE-2026-5713/): Out-of-bounds read/write during remote profiling and asyncio process introspection when connecting to malicious target (medium 5.3)
- [CVE-2026-57129](https://insights.sbomify.com/CVE-2026-57129/): PraisonAI: Arbitrary File Read via `@file:` Mention Path Traversal (high 7.5)
- [CVE-2026-57128](https://insights.sbomify.com/CVE-2026-57128/): PraisonAI: Unauthenticated Event Injection via SSE `/publish` Endpoint (medium 4.3)
- [CVE-2026-57127](https://insights.sbomify.com/CVE-2026-57127/): praisonai: recipe serve auth middleware silently disables itself when no secret is set (critical 9.8)
- [CVE-2026-57126](https://insights.sbomify.com/CVE-2026-57126/): praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS (high 8.5)
- [CVE-2026-57125](https://insights.sbomify.com/CVE-2026-57125/): PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass (critical 9.8)
- [CVE-2026-57124](https://insights.sbomify.com/CVE-2026-57124/): PraisonAI UI MCP connect endpoint allows unauthenticated local command execution (critical 9.8)
- [CVE-2026-57123](https://insights.sbomify.com/CVE-2026-57123/): PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in (critical 9.8)
- [CVE-2026-57122](https://insights.sbomify.com/CVE-2026-57122/): PraisonAI: Webhook signature verification skipped (fail-open) when secret unset, allowing forged inbound webhooks (WhatsApp & Linear bots) (high 8.6)
- [CVE-2026-57121](https://insights.sbomify.com/CVE-2026-57121/): PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform API (high 8.1)
- [CVE-2026-57120](https://insights.sbomify.com/CVE-2026-57120/): PraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder (medium 6.5)
- [CVE-2026-5712](https://insights.sbomify.com/CVE-2026-5712/): IdentityIQ Role Editor Incorrect Authorization Vulnerability (high 8.0)
- [CVE-2026-57119](https://insights.sbomify.com/CVE-2026-57119/): PraisonAI: Unauthenticated Local File Inclusion via agent_file path in the Jobs API (high 7.5)
- [CVE-2026-57118](https://insights.sbomify.com/CVE-2026-57118/): PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints (critical 9.8)
- [CVE-2026-57117](https://insights.sbomify.com/CVE-2026-57117/): PraisonAI: Compute-bridged file tools allow shell command injection (high 8.8)
- [CVE-2026-57116](https://insights.sbomify.com/CVE-2026-57116/): PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation (critical 9.8)
- [CVE-2026-57115](https://insights.sbomify.com/CVE-2026-57115/): PraisonAI: SpiderTools redirect-target SSRF protection bypass (medium 6.5)
- [CVE-2026-57114](https://insights.sbomify.com/CVE-2026-57114/): PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding (high 7.2)
- [CVE-2026-57113](https://insights.sbomify.com/CVE-2026-57113/): PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion (high 8.1)
- [CVE-2026-57112](https://insights.sbomify.com/CVE-2026-57112/): PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools (high 8.3)
- [CVE-2026-57111](https://insights.sbomify.com/CVE-2026-57111/): Apache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin (high 7.5)
- [CVE-2026-5711](https://insights.sbomify.com/CVE-2026-5711/): Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute (medium 6.4)
- [CVE-2026-57108](https://insights.sbomify.com/CVE-2026-57108/): .NET Denial of Service Vulnerability (high 7.5)
- [CVE-2026-57107](https://insights.sbomify.com/CVE-2026-57107/): Windows Admin Center Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-57106](https://insights.sbomify.com/CVE-2026-57106/): Data Quality Elevation of Privilege Vulnerability (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/529/