# Vulnerabilities published in 2026


- [CVE-2026-49473](https://insights.sbomify.com/CVE-2026-49473/): @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation (high 8.8)
- [CVE-2026-49472](https://insights.sbomify.com/CVE-2026-49472/): FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat (medium 5.3)
- [CVE-2026-49471](https://insights.sbomify.com/CVE-2026-49471/): Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE (high 8.3)
- [CVE-2026-49470](https://insights.sbomify.com/CVE-2026-49470/): GLPI: Missing Rate Limiting on Login and TOTP Verification — Account Takeover via Brute Force (high 7.7)
- [CVE-2026-4947](https://insights.sbomify.com/CVE-2026-4947/): Insecure Direct Object Reference (IDOR) Leading to Signature Forgery in Foxit eSign (high 7.1)
- [CVE-2026-49469](https://insights.sbomify.com/CVE-2026-49469/): GLPI: LDAP filter injection in user import feature (medium 4.6)
- [CVE-2026-49468](https://insights.sbomify.com/CVE-2026-49468/): LiteLLM: Authentication Bypass via Host Header Injection (critical 9.5)
- [CVE-2026-49467](https://insights.sbomify.com/CVE-2026-49467/): TOTP enrollment hijack: password gate skipped due to unawaited promise (high 8.8)
- [CVE-2026-49466](https://insights.sbomify.com/CVE-2026-49466/): Draft List - Contributor Stored Cross-Site Scripting via Draft Title in Custom Drafts Template Attributes (medium 6.5)
- [CVE-2026-49465](https://insights.sbomify.com/CVE-2026-49465/): n8n: Git Node Clone and Push Operations Bypass File Sandbox (medium 6.0)
- [CVE-2026-49464](https://insights.sbomify.com/CVE-2026-49464/): NL Portal: IDOR allows any authenticated user to complete and tamper with another user's taak (high 8.1)
- [CVE-2026-49463](https://insights.sbomify.com/CVE-2026-49463/): NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries (medium 6.5)
- [CVE-2026-49462](https://insights.sbomify.com/CVE-2026-49462/): nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default (medium 5.3)
- [CVE-2026-49461](https://insights.sbomify.com/CVE-2026-49461/): pypdf: Possible large memory usage for form XObjects during text extraction (medium 6.9)
- [CVE-2026-49460](https://insights.sbomify.com/CVE-2026-49460/): pypdf: Inefficient decoding of FlateDecode PNG predictor streams (medium 5.1)
- [CVE-2026-4946](https://insights.sbomify.com/CVE-2026-4946/): NSA Ghidra Auto-Analysis Annotation Command Execution (high 8.8)
- [CVE-2026-49459](https://insights.sbomify.com/CVE-2026-49459/): DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM (medium 6.1)
- [CVE-2026-49458](https://insights.sbomify.com/CVE-2026-49458/): DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks (medium 6.1)
- [CVE-2026-49457](https://insights.sbomify.com/CVE-2026-49457/): QUIC has Broken TLS verification (critical 9.1)
- [CVE-2026-49456](https://insights.sbomify.com/CVE-2026-49456/): Waku: Open Redirect via `unstable_redirect` Helper (low 3.1)
- [CVE-2026-49455](https://insights.sbomify.com/CVE-2026-49455/): Waku: Cross-Origin CSRF on RSC Server Action Dispatch (medium 6.5)
- [CVE-2026-49454](https://insights.sbomify.com/CVE-2026-49454/): Relyra SAML SignatureValue not cryptographically verified -> authentication bypass (critical 9.1)
- [CVE-2026-49453](https://insights.sbomify.com/CVE-2026-49453/): Joplin: Path traversal in resource sync — silent arbitrary file write outside the resource directory (high 7.0)
- [CVE-2026-49452](https://insights.sbomify.com/CVE-2026-49452/): WeasyPrint: CSS Injection via Presentational Hints (medium 6.5)
- [CVE-2026-49451](https://insights.sbomify.com/CVE-2026-49451/): Microsoft.OpenAPI: Circular schema references may terminate OpenAPI parsing (high 7.5)
- [CVE-2026-49450](https://insights.sbomify.com/CVE-2026-49450/): Security feature bypass in joplin (high 7.1)
- [CVE-2026-4945](https://insights.sbomify.com/CVE-2026-4945/): Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass (medium 5.3)
- [CVE-2026-49449](https://insights.sbomify.com/CVE-2026-49449/): Joplin: KaTeX `trust:true` enables URL-allowlist bypass leading to NTLMv2 credential theft via UNC path on Windows (low 2.5)
- [CVE-2026-49448](https://insights.sbomify.com/CVE-2026-49448/): authentik: SourceStage bypass via empty POST (critical 9.8)
- [CVE-2026-49447](https://insights.sbomify.com/CVE-2026-49447/): Cosmos-Server's constellation public-devices endpoint accepts arbitrary bearer tokens (medium 5.3)
- [CVE-2026-49446](https://insights.sbomify.com/CVE-2026-49446/): Cosmos: Authentication bypass via forward-auth header smuggling on Constellation tunnel in Cosmos-Server (medium 6.1)
- [CVE-2026-49445](https://insights.sbomify.com/CVE-2026-49445/): Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access (critical 9.2)
- [CVE-2026-49444](https://insights.sbomify.com/CVE-2026-49444/): n8n: Python sandbox escape (high 7.1)
- [CVE-2026-49443](https://insights.sbomify.com/CVE-2026-49443/): authentik: `UserSourceConnection.user` and `GroupSourceConnection.group` are changeable through the API (high 8.8)
- [CVE-2026-49442](https://insights.sbomify.com/CVE-2026-49442/): Cacti: User Enumeration via Error Messages (medium 5.3)
- [CVE-2026-49441](https://insights.sbomify.com/CVE-2026-49441/): Path traversal in wazuh (critical 9.1)
- [CVE-2026-49440](https://insights.sbomify.com/CVE-2026-49440/): Deno: Miller-Rabin Primality Test Allows Zero Rounds (high 7.4)
- [CVE-2026-4944](https://insights.sbomify.com/CVE-2026-4944/): Hardcoded trust_remote_code=True in vllm-project/vllm Bypasses User Security Control (high 8.8)
- [CVE-2026-49439](https://insights.sbomify.com/CVE-2026-49439/): OpenRemote read-only asset users can write predicted datapoints (medium 4.3)
- [CVE-2026-49436](https://insights.sbomify.com/CVE-2026-49436/): LinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API (high 7.3)
- [CVE-2026-49435](https://insights.sbomify.com/CVE-2026-49435/): Keysight IxChariot-related products stack-based buffer overflow (critical 9.3)
- [CVE-2026-49434](https://insights.sbomify.com/CVE-2026-49434/): Server-side request forgery in Apache ActiveMQ (high 7.5)
- [CVE-2026-49433](https://insights.sbomify.com/CVE-2026-49433/): DeepAI api.deepai.org/change_user_email CSRF (low 2.3)
- [CVE-2026-49432](https://insights.sbomify.com/CVE-2026-49432/): Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service (high 7.5)
- [CVE-2026-49431](https://insights.sbomify.com/CVE-2026-49431/): Incorrect user validation in ZFS_IOC_SET_PROP ioctl (low 3.3)
- [CVE-2026-49430](https://insights.sbomify.com/CVE-2026-49430/): Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl (high 7.8)
- [CVE-2026-49429](https://insights.sbomify.com/CVE-2026-49429/): Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl (high 7.8)
- [CVE-2026-49428](https://insights.sbomify.com/CVE-2026-49428/): posixshm: system calls can incorrectly free memory of largepage objects (high 8.4)
- [CVE-2026-49427](https://insights.sbomify.com/CVE-2026-49427/): posixshm: largepage shared memory objects not explicitly wired (high 8.8)
- [CVE-2026-49426](https://insights.sbomify.com/CVE-2026-49426/): Incorrect audit records for ptrace(2) syscall requests (low 3.3)
- [CVE-2026-49425](https://insights.sbomify.com/CVE-2026-49425/): Kernel stack disclosure in 32-bit compatibility support (medium 5.5)
- [CVE-2026-49424](https://insights.sbomify.com/CVE-2026-49424/): Kernel stack disclosure in Linux compatibility layer (medium 5.5)
- [CVE-2026-49423](https://insights.sbomify.com/CVE-2026-49423/): Remote DOS via uninitialized memory access in KTLS receive (low 3.3)
- [CVE-2026-49422](https://insights.sbomify.com/CVE-2026-49422/): Use-after-free in TCP RACK stack option handler (high 8.4)
- [CVE-2026-49421](https://insights.sbomify.com/CVE-2026-49421/): unlinkat(2) ignores AT_RESOLVE_BENEATH flag (high 7.1)
- [CVE-2026-49420](https://insights.sbomify.com/CVE-2026-49420/): Buffer overflow in libalias RTSP handler (high 8.8)
- [CVE-2026-4942](https://insights.sbomify.com/CVE-2026-4942/): IBM i is Affected by Algorithm Downgrade in Transport Layer Security [] (medium 5.9)
- [CVE-2026-49419](https://insights.sbomify.com/CVE-2026-49419/): Jail reference count underflow (high 8.8)
- [CVE-2026-49418](https://insights.sbomify.com/CVE-2026-49418/): Use-after-free in device pager page list (high 8.8)
- [CVE-2026-49417](https://insights.sbomify.com/CVE-2026-49417/): Multiple vulnerabilities in the sound(4) mmap path (high 7.0)
- [CVE-2026-49416](https://insights.sbomify.com/CVE-2026-49416/): Integer overflow in vt(4) CONS_HISTORY ioctl (high 7.8)
- [CVE-2026-49415](https://insights.sbomify.com/CVE-2026-49415/): Local privilege escalation via execve(2) TOCTOU race (high 8.8)
- [CVE-2026-49414](https://insights.sbomify.com/CVE-2026-49414/): ASLR bypass for setuid executables via procctl(2) (high 7.8)
- [CVE-2026-49413](https://insights.sbomify.com/CVE-2026-49413/): Flaw in Linuxulator execution of setugid binaries (high 7.1)
- [CVE-2026-49412](https://insights.sbomify.com/CVE-2026-49412/): Use-after-free bug in the IPV6_MSFILTER socket option handler (high 7.8)
- [CVE-2026-49411](https://insights.sbomify.com/CVE-2026-49411/): Deno Node TCPWrap numeric hostname aliases bypass --deny-net resolved-IP deny checks (medium 6.5)
- [CVE-2026-49410](https://insights.sbomify.com/CVE-2026-49410/): OpenHuman /auth/telegram CSRF allows attacker-controlled session implantation (high 8.1)
- [CVE-2026-49406](https://insights.sbomify.com/CVE-2026-49406/): Deno: BYONM module resolution allows `package.json` main path traversal to bypass `--allow-read` restrictions (medium 5.5)
- [CVE-2026-49402](https://insights.sbomify.com/CVE-2026-49402/): Deno: Command Injection via spawnSync & spawn on Windows (high 8.1)
- [CVE-2026-49401](https://insights.sbomify.com/CVE-2026-49401/): Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS) (high 7.3)
- [CVE-2026-49400](https://insights.sbomify.com/CVE-2026-49400/): October CMS: PHP Object Injection via Backend Widget Session Storage (low 3.3)
- [CVE-2026-49397](https://insights.sbomify.com/CVE-2026-49397/): Nezha's private services (`EnableShowInService: false`) are enumerable via per-server endpoints, leaking name and timing data (medium 5.3)
- [CVE-2026-49396](https://insights.sbomify.com/CVE-2026-49396/): Nezha Monitoring: Cross-site GET request can trigger stored cron commands on a victim's agents (high 7.1)
- [CVE-2026-49394](https://insights.sbomify.com/CVE-2026-49394/): Frappe: Auth. bypass via update_page (high 7.1)
- [CVE-2026-49392](https://insights.sbomify.com/CVE-2026-49392/): Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd (medium 5.3)
- [CVE-2026-49391](https://insights.sbomify.com/CVE-2026-49391/): Frappe: Stored XSS in Column Headers via Data Import (medium 5.1)
- [CVE-2026-49386](https://insights.sbomify.com/CVE-2026-49386/): Missing authorization in YouTrack (medium 6.5)
- [CVE-2026-49385](https://insights.sbomify.com/CVE-2026-49385/): Missing authorization in YouTrack (medium 6.5)
- [CVE-2026-49384](https://insights.sbomify.com/CVE-2026-49384/): Cross-site scripting in PyCharm (medium 6.1)
- [CVE-2026-49383](https://insights.sbomify.com/CVE-2026-49383/): XML external entity in IntelliJ IDEA (low 3.3)
- [CVE-2026-49382](https://insights.sbomify.com/CVE-2026-49382/): Code injection in IntelliJ IDEA (medium 4.5)
- [CVE-2026-49381](https://insights.sbomify.com/CVE-2026-49381/): Cross-site scripting in TeamCity (low 3.4)
- [CVE-2026-49380](https://insights.sbomify.com/CVE-2026-49380/): Open redirect in TeamCity (low 3.1)
- [CVE-2026-4938](https://insights.sbomify.com/CVE-2026-4938/): Incorrect Authorization in IBM Verify Identity Access and IBM Security Verify Access (medium 6.5)
- [CVE-2026-49379](https://insights.sbomify.com/CVE-2026-49379/): Information disclosure in TeamCity (medium 6.5)
- [CVE-2026-49378](https://insights.sbomify.com/CVE-2026-49378/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2026-49377](https://insights.sbomify.com/CVE-2026-49377/): Information disclosure in TeamCity (medium 4.3)
- [CVE-2026-49376](https://insights.sbomify.com/CVE-2026-49376/): Auth bypass in TeamCity (medium 6.5)
- [CVE-2026-49375](https://insights.sbomify.com/CVE-2026-49375/): Cross-site scripting in TeamCity (medium 6.1)
- [CVE-2026-49374](https://insights.sbomify.com/CVE-2026-49374/): Missing authorization in TeamCity (high 7.6)
- [CVE-2026-49373](https://insights.sbomify.com/CVE-2026-49373/): Command injection in TeamCity (high 7.1)
- [CVE-2026-49372](https://insights.sbomify.com/CVE-2026-49372/): Server-side request forgery in TeamCity (high 7.5)
- [CVE-2026-49371](https://insights.sbomify.com/CVE-2026-49371/): Cross-site scripting in TeamCity (high 7.1)
- [CVE-2026-49370](https://insights.sbomify.com/CVE-2026-49370/): Information disclosure in YouTrack (low 3.4)
- [CVE-2026-4937](https://insights.sbomify.com/CVE-2026-4937/): Power System Insufficient Entropy (medium 5.3)
- [CVE-2026-49369](https://insights.sbomify.com/CVE-2026-49369/): Information disclosure in YouTrack (medium 4.3)
- [CVE-2026-49368](https://insights.sbomify.com/CVE-2026-49368/): Cross-site scripting in YouTrack (high 8.7)
- [CVE-2026-49367](https://insights.sbomify.com/CVE-2026-49367/): Missing authorization in IntelliJ IDEA (high 8.0)
- [CVE-2026-49366](https://insights.sbomify.com/CVE-2026-49366/): Command injection in IntelliJ IDEA (high 7.8)
- [CVE-2026-49365](https://insights.sbomify.com/CVE-2026-49365/): Apache Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/584/