# Vulnerabilities published in 2026


- [CVE-2026-48724](https://insights.sbomify.com/CVE-2026-48724/): ImageMagick: Heap Buffer Underwrite in Floyd-Steinberg depth dithering (medium 5.5)
- [CVE-2026-48723](https://insights.sbomify.com/CVE-2026-48723/): Command injection in browserstack-cypress-cli (high 7.8)
- [CVE-2026-48722](https://insights.sbomify.com/CVE-2026-48722/): Nextflow: Incorrect default permissions in the nextflow auth login command (medium 5.5)
- [CVE-2026-48721](https://insights.sbomify.com/CVE-2026-48721/): Warp: Env-var prefixes can lead to denylisted command autoexecution (high 8.6)
- [CVE-2026-48720](https://insights.sbomify.com/CVE-2026-48720/): Warp: SSH remote output can lead to local file overwrite and persistence (high 8.8)
- [CVE-2026-48719](https://insights.sbomify.com/CVE-2026-48719/): Warp branch selector command injection via Git branch names (high 8.0)
- [CVE-2026-48717](https://insights.sbomify.com/CVE-2026-48717/): OpenAM OAuth Authorization Bypass via PKCE Challenge (critical 9.1)
- [CVE-2026-48716](https://insights.sbomify.com/CVE-2026-48716/): nanobot: Path traversal via unsanitized WhatsApp document fileName enables arbitrary file write (high 8.7)
- [CVE-2026-48715](https://insights.sbomify.com/CVE-2026-48715/): radvdump's Route Information Option Parser has a Stack Buffer Overflow (high 7.7)
- [CVE-2026-48714](https://insights.sbomify.com/CVE-2026-48714/): i18next-http-middleware missingKeyHandler does not reject keys whose segments contain prototype-polluting names (critical 9.1)
- [CVE-2026-48713](https://insights.sbomify.com/CVE-2026-48713/): i18next-fs-backend: Prototype pollution via crafted missing-key string (critical 9.1)
- [CVE-2026-48712](https://insights.sbomify.com/CVE-2026-48712/): protobufjs: Denial of service through unbounded Any expansion during JSON conversion (high 7.5)
- [CVE-2026-48711](https://insights.sbomify.com/CVE-2026-48711/): SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (high 7.0)
- [CVE-2026-48710](https://insights.sbomify.com/CVE-2026-48710/): Kludex Starlette HTTP Request/Response Smuggling (medium 6.5, exploited in the wild)
- [CVE-2026-4871](https://insights.sbomify.com/CVE-2026-4871/): Sports Club Management <= 1.12.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' Attribute (medium 6.4)
- [CVE-2026-48709](https://insights.sbomify.com/CVE-2026-48709/): OliveTin: ValidateArgumentType API Endpoint Missing Authentication Allows Action and Argument Enumeration (low 3.7)
- [CVE-2026-48708](https://insights.sbomify.com/CVE-2026-48708/): OliveTin has a Concurrent Template Parsing Race Condition which Leads to Cross-Request Command Contamination (high 7.5)
- [CVE-2026-48707](https://insights.sbomify.com/CVE-2026-48707/): InstantCMS vulnerable to SSRF via upload redirect bypass allows internal network service scanning (low 3.1)
- [CVE-2026-48706](https://insights.sbomify.com/CVE-2026-48706/): Envoy Heap Buffer Overflow in TcpStatsdSink (medium 5.9)
- [CVE-2026-48704](https://insights.sbomify.com/CVE-2026-48704/): Warp Markdown notebook links may open executable local files (high 8.8)
- [CVE-2026-48703](https://insights.sbomify.com/CVE-2026-48703/): Warp: Command Injection via Warp code search tool arguments (high 7.8)
- [CVE-2026-48702](https://insights.sbomify.com/CVE-2026-48702/): Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic (high 7.5)
- [CVE-2026-48700](https://insights.sbomify.com/CVE-2026-48700/): Code injection in PCManFM-Qt (critical 9.3)
- [CVE-2026-4870](https://insights.sbomify.com/CVE-2026-4870/): Denial of service in Qiskit SDK (high 7.5)
- [CVE-2026-48697](https://insights.sbomify.com/CVE-2026-48697/): Security feature bypass in pavel-odintsov:fastnetmon (high 7.4)
- [CVE-2026-48696](https://insights.sbomify.com/CVE-2026-48696/): Memory corruption in pavel-odintsov:fastnetmon (medium 6.2)
- [CVE-2026-48695](https://insights.sbomify.com/CVE-2026-48695/): Command injection in pavel-odintsov:fastnetmon (high 8.1)
- [CVE-2026-48694](https://insights.sbomify.com/CVE-2026-48694/): Command injection in pavel-odintsov:fastnetmon (high 8.1)
- [CVE-2026-48693](https://insights.sbomify.com/CVE-2026-48693/): Other in pavel-odintsov:fastnetmon (medium 5.5)
- [CVE-2026-48692](https://insights.sbomify.com/CVE-2026-48692/): Missing authorization in pavel-odintsov:fastnetmon (high 8.1)
- [CVE-2026-48691](https://insights.sbomify.com/CVE-2026-48691/): Integer overflow in pavel-odintsov:fastnetmon (high 7.3)
- [CVE-2026-48690](https://insights.sbomify.com/CVE-2026-48690/): Integer overflow in pavel-odintsov:fastnetmon (high 7.1)
- [CVE-2026-4869](https://insights.sbomify.com/CVE-2026-4869/): Potential Privilege Escalation in InstallShield (medium 5.4)
- [CVE-2026-48689](https://insights.sbomify.com/CVE-2026-48689/): Memory corruption in pavel-odintsov:fastnetmon (critical 9.8)
- [CVE-2026-48688](https://insights.sbomify.com/CVE-2026-48688/): Memory corruption in pavel-odintsov:fastnetmon (high 7.5)
- [CVE-2026-48687](https://insights.sbomify.com/CVE-2026-48687/): Command injection in pavel-odintsov:fastnetmon (high 8.1)
- [CVE-2026-48686](https://insights.sbomify.com/CVE-2026-48686/): Memory corruption in pavel-odintsov:fastnetmon (critical 9.8)
- [CVE-2026-48685](https://insights.sbomify.com/CVE-2026-48685/): Memory corruption in pavel-odintsov:fastnetmon (medium 6.5)
- [CVE-2026-48684](https://insights.sbomify.com/CVE-2026-48684/): Memory corruption in pavel-odintsov:fastnetmon (medium 6.5)
- [CVE-2026-48683](https://insights.sbomify.com/CVE-2026-48683/): FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. (medium 6.5)
- [CVE-2026-48682](https://insights.sbomify.com/CVE-2026-48682/): FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the IPv4 packet parser. (medium 5.9)
- [CVE-2026-48681](https://insights.sbomify.com/CVE-2026-48681/): OpenStack Ironic allows file overwrite via directory traversal during deployment with a crafted ISO image (medium 5.9)
- [CVE-2026-4868](https://insights.sbomify.com/CVE-2026-4868/): Authorization Bypass Through User-Controlled Key in GitLab (high 8.2)
- [CVE-2026-4867](https://insights.sbomify.com/CVE-2026-4867/): path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters (high 7.5)
- [CVE-2026-4862](https://insights.sbomify.com/CVE-2026-4862/): UTT HiPER 1250GW Parameter formConfigDnsFilterGlobal strcpy buffer overflow (high 8.7)
- [CVE-2026-48619](https://insights.sbomify.com/CVE-2026-48619/): Denial of service in node (medium 5.3)
- [CVE-2026-48618](https://insights.sbomify.com/CVE-2026-48618/): Security feature bypass in node (high 7.7)
- [CVE-2026-48617](https://insights.sbomify.com/CVE-2026-48617/): Security feature bypass in node (low 1.8)
- [CVE-2026-48616](https://insights.sbomify.com/CVE-2026-48616/): Missing authorization in Rocket.Chat (critical 9.3)
- [CVE-2026-48615](https://insights.sbomify.com/CVE-2026-48615/): Information disclosure in node (medium 5.9)
- [CVE-2026-48614](https://insights.sbomify.com/CVE-2026-48614/): Privilege escalation in Plesk (critical 9.9)
- [CVE-2026-48613](https://insights.sbomify.com/CVE-2026-48613/): SQL injection in phpBB (high 7.1)
- [CVE-2026-48612](https://insights.sbomify.com/CVE-2026-48612/): Auth bypass in phpBB (high 8.0)
- [CVE-2026-48611](https://insights.sbomify.com/CVE-2026-48611/): Auth bypass in phpBB (critical 9.8)
- [CVE-2026-48610](https://insights.sbomify.com/CVE-2026-48610/): Missing authorization in EFG (high 8.1)
- [CVE-2026-4861](https://insights.sbomify.com/CVE-2026-4861/): Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow (high 8.7)
- [CVE-2026-4860](https://insights.sbomify.com/CVE-2026-4860/): 648540858 wvp-GB28181-pro API Endpoint RedisTemplateConfig.java GenericFastJsonRedisSerializer deserialization (medium 6.9)
- [CVE-2026-48599](https://insights.sbomify.com/CVE-2026-48599/): Authorization bypass via path binding override in elixir-grpc/grpc HTTP transcoding (high 7.6)
- [CVE-2026-48598](https://insights.sbomify.com/CVE-2026-48598/): CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection (low 2.1)
- [CVE-2026-48597](https://insights.sbomify.com/CVE-2026-48597/): Atom table exhaustion via untrusted URL scheme in Tesla.Adapter.Mint (high 8.2)
- [CVE-2026-48596](https://insights.sbomify.com/CVE-2026-48596/): CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection (low 2.1)
- [CVE-2026-48595](https://insights.sbomify.com/CVE-2026-48595/): Authorization header leaks to third-party origin on cross-origin redirect in Tesla.Middleware.FollowRedirects (high 8.2)
- [CVE-2026-48594](https://insights.sbomify.com/CVE-2026-48594/): Decompression bomb in Tesla.Middleware.DecompressResponse and Tesla.Middleware.Compression (high 8.2)
- [CVE-2026-48593](https://insights.sbomify.com/CVE-2026-48593/): Unbounded range expansion in cron describe causes memory exhaustion in oban_web (medium 5.9)
- [CVE-2026-48592](https://insights.sbomify.com/CVE-2026-48592/): Missing authorization check on save-job event handler in oban_web (medium 5.3)
- [CVE-2026-48591](https://insights.sbomify.com/CVE-2026-48591/): Stored XSS via unescaped HTML attribute values in earmark (medium 4.8)
- [CVE-2026-48590](https://insights.sbomify.com/CVE-2026-48590/): Element and Attribute Names Injected Verbatim into XML Output in xml_builder (low 2.1)
- [CVE-2026-4859](https://insights.sbomify.com/CVE-2026-4859/): SP Blog Designer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'design' Attribute (medium 6.4)
- [CVE-2026-48589](https://insights.sbomify.com/CVE-2026-48589/): Apache Shiro: Jakarta EE open redirect via untrusted Referer in post-login redirect flow (not scored)
- [CVE-2026-48588](https://insights.sbomify.com/CVE-2026-48588/): Potential exposure of private data via cached Set-Cookie response (low 2.3)
- [CVE-2026-48587](https://insights.sbomify.com/CVE-2026-48587/): Potential exposure of private data via whitespace padding in Vary header (low 2.3)
- [CVE-2026-48586](https://insights.sbomify.com/CVE-2026-48586/): Denial of service in Apache Thrift (high 8.7)
- [CVE-2026-48584](https://insights.sbomify.com/CVE-2026-48584/): Microsoft Azure Synapse Elevation of Privilege Vulnerability (critical 9.9)
- [CVE-2026-48583](https://insights.sbomify.com/CVE-2026-48583/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-48582](https://insights.sbomify.com/CVE-2026-48582/): Microsoft Exchange Online Elevation of Privilege Vulnerability (critical 9.6)
- [CVE-2026-48581](https://insights.sbomify.com/CVE-2026-48581/): Surface Broker SDMA Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-48580](https://insights.sbomify.com/CVE-2026-48580/): Microsoft Excel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-4858](https://insights.sbomify.com/CVE-2026-4858/): Path traversal in integration action URL leading to arbitrary API execution via system admin’s auth token. (high 8.0)
- [CVE-2026-48579](https://insights.sbomify.com/CVE-2026-48579/): Microsoft Exchange Online Information Disclosure Vulnerability (critical 9.1)
- [CVE-2026-48578](https://insights.sbomify.com/CVE-2026-48578/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-48576](https://insights.sbomify.com/CVE-2026-48576/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-48575](https://insights.sbomify.com/CVE-2026-48575/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-48574](https://insights.sbomify.com/CVE-2026-48574/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-48573](https://insights.sbomify.com/CVE-2026-48573/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-48572](https://insights.sbomify.com/CVE-2026-48572/): Windows App Package Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-48571](https://insights.sbomify.com/CVE-2026-48571/): Windows App Package Installer Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-48570](https://insights.sbomify.com/CVE-2026-48570/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-4857](https://insights.sbomify.com/CVE-2026-4857/): SailPoint IdentityIQ Debug UI Incorrect Authorization (high 8.4)
- [CVE-2026-48569](https://insights.sbomify.com/CVE-2026-48569/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.1)
- [CVE-2026-48568](https://insights.sbomify.com/CVE-2026-48568/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-48567](https://insights.sbomify.com/CVE-2026-48567/): Azure HorizonDB Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-48566](https://insights.sbomify.com/CVE-2026-48566/): Windows DWM Core Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-48565](https://insights.sbomify.com/CVE-2026-48565/): Windows Narrator Braille Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-48564](https://insights.sbomify.com/CVE-2026-48564/): DHCP Server Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-48563](https://insights.sbomify.com/CVE-2026-48563/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-48562](https://insights.sbomify.com/CVE-2026-48562/): Microsoft SharePoint Server Spoofing Vulnerability (medium 4.6)
- [CVE-2026-48561](https://insights.sbomify.com/CVE-2026-48561/): Microsoft Edge Copilot Remote Code Execution Vulnerability (critical 9.6)
- [CVE-2026-48560](https://insights.sbomify.com/CVE-2026-48560/): Microsoft SharePoint Server Spoofing Vulnerability (medium 5.4)
- [CVE-2026-48559](https://insights.sbomify.com/CVE-2026-48559/): Lightweight Music Server 3.76.0 Stored XSS via Media File Metadata Tags (medium 5.1)
- [CVE-2026-48558](https://insights.sbomify.com/CVE-2026-48558/): SimpleHelp Authentication Bypass (critical 9.5, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/591/