# Vulnerabilities published in 2026


- [CVE-2026-54519](https://insights.sbomify.com/CVE-2026-54519/): AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion (high 8.8)
- [CVE-2026-54518](https://insights.sbomify.com/CVE-2026-54518/): jackson-databind: @JsonView bypass for unwrapped creator parameters in jackson-databind (medium 6.5)
- [CVE-2026-54517](https://insights.sbomify.com/CVE-2026-54517/): jackson-databind: @JsonView bypass for setterless creator properties (medium 5.3)
- [CVE-2026-54516](https://insights.sbomify.com/CVE-2026-54516/): jackson-databind: Renamed @JsonIgnore'd setters can deserialize via private fields (medium 5.3)
- [CVE-2026-54515](https://insights.sbomify.com/CVE-2026-54515/): jackson-databind: Case-insensitive deserialization bypasses per-property @JsonIgnoreProperties (medium 5.3)
- [CVE-2026-54514](https://insights.sbomify.com/CVE-2026-54514/): jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF) (medium 5.3)
- [CVE-2026-54513](https://insights.sbomify.com/CVE-2026-54513/): jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray) (high 8.1)
- [CVE-2026-54512](https://insights.sbomify.com/CVE-2026-54512/): jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation (high 8.1)
- [CVE-2026-54511](https://insights.sbomify.com/CVE-2026-54511/): @logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys (high 8.6)
- [CVE-2026-54510](https://insights.sbomify.com/CVE-2026-54510/): Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook (high 7.1)
- [CVE-2026-5451](https://insights.sbomify.com/CVE-2026-5451/): Cross-site scripting in Extensions for Leaflet Map (medium 6.4)
- [CVE-2026-54509](https://insights.sbomify.com/CVE-2026-54509/): TREK IDOR: any authenticated user can read another user's journey share token (full journey leak) (medium 6.5)
- [CVE-2026-54508](https://insights.sbomify.com/CVE-2026-54508/): TREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution (medium 5.3)
- [CVE-2026-54507](https://insights.sbomify.com/CVE-2026-54507/): Vvveb oEmbedProxy vulnerable to server-side request forgery (high 8.4)
- [CVE-2026-54506](https://insights.sbomify.com/CVE-2026-54506/): Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field (high 7.6)
- [CVE-2026-54505](https://insights.sbomify.com/CVE-2026-54505/): TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner (low 2.0)
- [CVE-2026-54504](https://insights.sbomify.com/CVE-2026-54504/): MCP Documentation Server: Web UI API binds to all interfaces without authentication by default (high 8.8)
- [CVE-2026-54503](https://insights.sbomify.com/CVE-2026-54503/): plone.app.textfield: Stored XSS by spoofing mime type (medium 4.3)
- [CVE-2026-54502](https://insights.sbomify.com/CVE-2026-54502/): Oj: Stack Buffer Overflow in Oj.dump via Large Indent (medium 6.3)
- [CVE-2026-54501](https://insights.sbomify.com/CVE-2026-54501/): Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors (critical 9.4)
- [CVE-2026-54500](https://insights.sbomify.com/CVE-2026-54500/): Oj: intern.c form_attr has an uninitialized stack read (medium 5.3)
- [CVE-2026-5450](https://insights.sbomify.com/CVE-2026-5450/): scanf %mc off-by-one heap buffer overflow (critical 9.8)
- [CVE-2026-54499](https://insights.sbomify.com/CVE-2026-54499/): Stanza: Remote Code Execution via Unsafe Pickle Deserialization in Model Loaders (high 7.5)
- [CVE-2026-54498](https://insights.sbomify.com/CVE-2026-54498/): view_component: around_render HTML-Safety Bypass (high 8.7)
- [CVE-2026-54497](https://insights.sbomify.com/CVE-2026-54497/): view_component: Reused Component Instances Retain Stale Render Context (medium 6.8)
- [CVE-2026-54496](https://insights.sbomify.com/CVE-2026-54496/): Zebra: Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness (critical 9.3)
- [CVE-2026-54495](https://insights.sbomify.com/CVE-2026-54495/): Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters (medium 4.3)
- [CVE-2026-54494](https://insights.sbomify.com/CVE-2026-54494/): Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4 (medium 5.3)
- [CVE-2026-54493](https://insights.sbomify.com/CVE-2026-54493/): Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations (high 7.7)
- [CVE-2026-54492](https://insights.sbomify.com/CVE-2026-54492/): Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation (medium 4.3)
- [CVE-2026-54491](https://insights.sbomify.com/CVE-2026-54491/): Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths (high 7.1)
- [CVE-2026-54490](https://insights.sbomify.com/CVE-2026-54490/): websocket-driver: Resource limit bypass via message compression (medium 6.3)
- [CVE-2026-54489](https://insights.sbomify.com/CVE-2026-54489/): Information disclosure in Virtual Storage Integrator for VMware vSphere Client (critical 9.1)
- [CVE-2026-54483](https://insights.sbomify.com/CVE-2026-54483/): Command injection in PowerProtect Data Domain (medium 6.7)
- [CVE-2026-54481](https://insights.sbomify.com/CVE-2026-54481/): Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295) (high 7.5)
- [CVE-2026-5448](https://insights.sbomify.com/CVE-2026-5448/): 1-2 Byte Buffer Overflow in wolfSSL_X509_notAfter/notBefore (low 2.3)
- [CVE-2026-54479](https://insights.sbomify.com/CVE-2026-54479/): EVoke Systems EVoke CSMS Insufficient Session Expiration (medium 6.9)
- [CVE-2026-54478](https://insights.sbomify.com/CVE-2026-54478/): DNS Cookie bypass when combined with proxy-protocol use (low 3.7)
- [CVE-2026-54477](https://insights.sbomify.com/CVE-2026-54477/): Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax (medium 5.1)
- [CVE-2026-54475](https://insights.sbomify.com/CVE-2026-54475/): Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Temporary destination ownership takeover (high 7.5)
- [CVE-2026-54472](https://insights.sbomify.com/CVE-2026-54472/): Hardcoded credentials in Container Storage Modules (critical 9.8)
- [CVE-2026-54471](https://insights.sbomify.com/CVE-2026-54471/): Missing authorization in SmartFabric Manager (low 3.5)
- [CVE-2026-54470](https://insights.sbomify.com/CVE-2026-54470/): XML external entity in Unisphere for PowerMax (medium 5.3)
- [CVE-2026-5447](https://insights.sbomify.com/CVE-2026-5447/): Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier (medium 6.3)
- [CVE-2026-54469](https://insights.sbomify.com/CVE-2026-54469/): Deserialization in Unisphere for PowerMax (high 8.8)
- [CVE-2026-54468](https://insights.sbomify.com/CVE-2026-54468/): Path traversal in Unisphere for PowerMax (medium 6.5)
- [CVE-2026-54467](https://insights.sbomify.com/CVE-2026-54467/): Memory corruption in Trusted Firmware-M (high 7.0)
- [CVE-2026-54466](https://insights.sbomify.com/CVE-2026-54466/): websocket-driver: Message corruption via abuse of protocol length headers (critical 9.2)
- [CVE-2026-54465](https://insights.sbomify.com/CVE-2026-54465/): websocket-driver: Memory exhaustion in HTTP header parser (medium 6.3)
- [CVE-2026-54464](https://insights.sbomify.com/CVE-2026-54464/): websocket-driver: Resource limit bypass via message compression (medium 6.3)
- [CVE-2026-54463](https://insights.sbomify.com/CVE-2026-54463/): websocket-driver: Memory exhaustion via abuse of protocol length headers (medium 6.9)
- [CVE-2026-54462](https://insights.sbomify.com/CVE-2026-54462/): knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion (medium 6.5)
- [CVE-2026-54461](https://insights.sbomify.com/CVE-2026-54461/): Habitica: Regex Injection / ReDoS in Member Search (medium 6.5)
- [CVE-2026-54460](https://insights.sbomify.com/CVE-2026-54460/): OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover (critical 9.8)
- [CVE-2026-5446](https://insights.sbomify.com/CVE-2026-5446/): wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse (medium 6.0)
- [CVE-2026-54459](https://insights.sbomify.com/CVE-2026-54459/): FileRise: Missing CSRF enforcement for file creation and share-link creation (medium 4.3)
- [CVE-2026-54458](https://insights.sbomify.com/CVE-2026-54458/): AVideo: Unauthenticated Stored DOM Cross-Site Scripting via Per-Client Metadata Broadcast in YPTSocket Plugin (critical 9.6)
- [CVE-2026-54457](https://insights.sbomify.com/CVE-2026-54457/): TensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpoint (high 7.7)
- [CVE-2026-54455](https://insights.sbomify.com/CVE-2026-54455/): OpenCATS: Authenticated SQL injection in activity DataGrid date filters (high 7.6)
- [CVE-2026-54454](https://insights.sbomify.com/CVE-2026-54454/): OpenCATS: Authenticated RCE in the Import module (critical 9.1)
- [CVE-2026-54453](https://insights.sbomify.com/CVE-2026-54453/): OpenCATS: Authenticated Remote Code Execution via SettingsUI (manageProfessional) (high 7.2)
- [CVE-2026-54452](https://insights.sbomify.com/CVE-2026-54452/): safeurl: Missing IPv6 CIDR Ranges in Blocklist (medium 6.3)
- [CVE-2026-54451](https://insights.sbomify.com/CVE-2026-54451/): Elixir protobuf: Unbounded recursion depth in embedded-message decoding (high 8.2)
- [CVE-2026-54450](https://insights.sbomify.com/CVE-2026-54450/): ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway (low 2.9)
- [CVE-2026-5445](https://insights.sbomify.com/CVE-2026-5445/): Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable) (critical 9.1)
- [CVE-2026-54449](https://insights.sbomify.com/CVE-2026-54449/): LangBot: Authenticated RCE Via MCP Configuration (high 8.8)
- [CVE-2026-54448](https://insights.sbomify.com/CVE-2026-54448/): Trivy: Helm chart tar bomb causes OOM via unbounded io.ReadAll in parser (medium 6.9)
- [CVE-2026-54447](https://insights.sbomify.com/CVE-2026-54447/): garminconnect: Insecure Permission Assignment for Garmin OAuth Token Store (high 8.4)
- [CVE-2026-54446](https://insights.sbomify.com/CVE-2026-54446/): NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode (high 8.1)
- [CVE-2026-54445](https://insights.sbomify.com/CVE-2026-54445/): Vantage6: Set admin user and password from environment or configuration (medium 6.9)
- [CVE-2026-54443](https://insights.sbomify.com/CVE-2026-54443/): Dashy: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) (medium 5.9)
- [CVE-2026-5444](https://insights.sbomify.com/CVE-2026-5444/): Heap Buffer Overflow in PAM Image Buffer Allocation (high 7.1)
- [CVE-2026-54433](https://insights.sbomify.com/CVE-2026-54433/): Cross-site scripting in Webmail (high 7.2)
- [CVE-2026-54432](https://insights.sbomify.com/CVE-2026-54432/): Cross-site scripting in Webmail (medium 4.7)
- [CVE-2026-54431](https://insights.sbomify.com/CVE-2026-54431/): Improper Data Validation in liboauth2 (medium 5.1)
- [CVE-2026-54430](https://insights.sbomify.com/CVE-2026-54430/): Server-Site Request Forgery in liboauth2 (medium 5.1)
- [CVE-2026-5443](https://insights.sbomify.com/CVE-2026-5443/): Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode) (critical 9.8)
- [CVE-2026-54429](https://insights.sbomify.com/CVE-2026-54429/): Denial of service in SIMATIC S7-PLCSIM Advanced (medium 6.0)
- [CVE-2026-54428](https://insights.sbomify.com/CVE-2026-54428/): Apache HttpComponents Core: HPackDecoder Unlimited Header List Size Before SETTINGS ACK (high 7.5)
- [CVE-2026-54427](https://insights.sbomify.com/CVE-2026-54427/): Apache bRPC: Stack Exhaustion via Unbounded Recursion in AMF Parser (not scored)
- [CVE-2026-54426](https://insights.sbomify.com/CVE-2026-54426/): Apache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply Parser (not scored)
- [CVE-2026-54425](https://insights.sbomify.com/CVE-2026-54425/): Apache bRPC: Stack Exhaustion via Recursive HPACK Dynamic Table Size Update Decoding (not scored)
- [CVE-2026-54424](https://insights.sbomify.com/CVE-2026-54424/): Privilege escalation in Parsec (high 8.4)
- [CVE-2026-54423](https://insights.sbomify.com/CVE-2026-54423/): Missing authorization in Ironic (high 8.2)
- [CVE-2026-54422](https://insights.sbomify.com/CVE-2026-54422/): Information disclosure in Ironic Python Agent (medium 5.5)
- [CVE-2026-54421](https://insights.sbomify.com/CVE-2026-54421/): OpenStack Ironic can return unredacted sensitive information when applying a PATCH to update fields in volume properties (medium 6.8)
- [CVE-2026-54420](https://insights.sbomify.com/CVE-2026-54420/): LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following (high 8.5, exploited in the wild)
- [CVE-2026-5442](https://insights.sbomify.com/CVE-2026-5442/): Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions (critical 9.8)
- [CVE-2026-54419](https://insights.sbomify.com/CVE-2026-54419/): PIAF-HMS multiple unauthenticated SQL injection vulnerabilities via mysql_query (critical 9.3)
- [CVE-2026-54418](https://insights.sbomify.com/CVE-2026-54418/): Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Account 2FA Secret Disclosure and Bypass (high 8.1)
- [CVE-2026-54417](https://insights.sbomify.com/CVE-2026-54417/): Integer Overflow in rxi/microtar mtar_next() Causes Infinite Loop DoS (high 8.7)
- [CVE-2026-54416](https://insights.sbomify.com/CVE-2026-54416/): Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist (high 7.2)
- [CVE-2026-54415](https://insights.sbomify.com/CVE-2026-54415/): Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover (high 8.6)
- [CVE-2026-54414](https://insights.sbomify.com/CVE-2026-54414/): FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover (critical 9.3)
- [CVE-2026-54413](https://insights.sbomify.com/CVE-2026-54413/): iso14229 Integer Underflow and Out-of-Bounds Read in Handle_0x27_SecurityAccess() (high 7.8)
- [CVE-2026-54412](https://insights.sbomify.com/CVE-2026-54412/): MQTT-C Heap Out-of-Bounds Read and Integer Underflow in mqtt_unpack_publish_response() (high 7.8)
- [CVE-2026-54411](https://insights.sbomify.com/CVE-2026-54411/): Linux-PAM pam_userdb Observable Timing Discrepancy in Plaintext Password Comparison (medium 6.9)
- [CVE-2026-54410](https://insights.sbomify.com/CVE-2026-54410/): nanoMODBUS Off-by-One Buffer Overflow in recv_msg_header() via Crafted MBAP Length Field (high 7.8)
- [CVE-2026-5441](https://insights.sbomify.com/CVE-2026-5441/): Out-of-Bounds Read in DicomImageDecoder (PMSCT_RLE1 Decompression) (high 7.1)
- [CVE-2026-54409](https://insights.sbomify.com/CVE-2026-54409/): Auth bypass in UniFi Protect Application (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/551/