# Vulnerabilities published in 2026


- [CVE-2026-48246](https://insights.sbomify.com/CVE-2026-48246/): Open ISES Tickets < 3.44.2 Disabled TLS Certificate Verification in ajax/reports.php (high 8.2)
- [CVE-2026-48245](https://insights.sbomify.com/CVE-2026-48245/): Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in tables.php (medium 6.9)
- [CVE-2026-48244](https://insights.sbomify.com/CVE-2026-48244/): Open ISES Tickets < 3.44.2 Hardcoded Google Maps API Key in settings.inc.php (medium 6.9)
- [CVE-2026-48243](https://insights.sbomify.com/CVE-2026-48243/): Open ISES Tickets < 3.44.2 Hardcoded WhitePages API Key in wp1.php (medium 6.9)
- [CVE-2026-48242](https://insights.sbomify.com/CVE-2026-48242/): Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in import_mdb.php (critical 9.2)
- [CVE-2026-48241](https://insights.sbomify.com/CVE-2026-48241/): Open ISES Tickets < 3.44.2 Hardcoded MySQL Database Credentials in loader.php (critical 9.2)
- [CVE-2026-48240](https://insights.sbomify.com/CVE-2026-48240/): Open ISES Tickets < 3.44.2 SQL Injection via ajax/statistics.php tick_id and f_tick_id Parameters (high 7.1)
- [CVE-2026-4824](https://insights.sbomify.com/CVE-2026-4824/): Enter Software Iperius Backup Backup Job Configuration File privileges management (high 7.3)
- [CVE-2026-48239](https://insights.sbomify.com/CVE-2026-48239/): Open ISES Tickets < 3.44.2 SQL Injection via ajax/reports.php tick_id Parameter (high 7.1)
- [CVE-2026-48238](https://insights.sbomify.com/CVE-2026-48238/): Open ISES Tickets < 3.44.2 SQL Injection via ajax/mobile_main.php id Parameter (high 7.1)
- [CVE-2026-48237](https://insights.sbomify.com/CVE-2026-48237/): Open ISES Tickets < 3.44.2 SQL Injection via message.php frm_ticket_id and frm_resp_id Parameters (high 7.1)
- [CVE-2026-48236](https://insights.sbomify.com/CVE-2026-48236/): Open ISES Tickets < 3.44.2 SQL Injection via db_loader.php Multiple Parameters (high 7.1)
- [CVE-2026-48235](https://insights.sbomify.com/CVE-2026-48235/): Open ISES Tickets < 3.44.2 SQL Injection in incs/remotes.inc.php via External GPS Tracker Data (high 8.8)
- [CVE-2026-48234](https://insights.sbomify.com/CVE-2026-48234/): Open ISES Tickets < 3.44.2 SQL Injection via portal/ajax/list_requests.php sort and dir Parameters (high 7.1)
- [CVE-2026-48233](https://insights.sbomify.com/CVE-2026-48233/): Open ISES Tickets < 3.44.2 SQL Injection via ajax/sit_incidents.php offset Parameter (high 7.1)
- [CVE-2026-48232](https://insights.sbomify.com/CVE-2026-48232/): Open ISES Tickets < 3.44.2 SQL Injection via ajax/fullsit_incidents.php offset Parameter (high 7.1)
- [CVE-2026-48231](https://insights.sbomify.com/CVE-2026-48231/): Open ISES Tickets < 3.44.2 SQL Injection via tables.php Multiple Parameters (high 7.1)
- [CVE-2026-48230](https://insights.sbomify.com/CVE-2026-48230/): Open ISES Tickets < 3.44.2 Reflected XSS via ticketsmdb_import.php Multiple POST Parameters (medium 5.1)
- [CVE-2026-4823](https://insights.sbomify.com/CVE-2026-4823/): Enter Software Iperius Backup NTLM2 information disclosure (low 2.0)
- [CVE-2026-48229](https://insights.sbomify.com/CVE-2026-48229/): Open ISES Tickets < 3.44.2 Reflected XSS via routes_i.php ticket_id Parameter (medium 5.1)
- [CVE-2026-48228](https://insights.sbomify.com/CVE-2026-48228/): Open ISES Tickets < 3.44.2 Reflected XSS via patient_w.php id and ticket_id Parameters (medium 5.1)
- [CVE-2026-48227](https://insights.sbomify.com/CVE-2026-48227/): Open ISES Tickets < 3.44.2 Reflected XSS via patient.php id and ticket_id Parameters (medium 5.1)
- [CVE-2026-48226](https://insights.sbomify.com/CVE-2026-48226/): Open ISES Tickets < 3.44.2 Reflected XSS via os_watch.php ref and mode_orig Parameters (medium 5.1)
- [CVE-2026-48225](https://insights.sbomify.com/CVE-2026-48225/): Open ISES Tickets < 3.44.2 Reflected XSS via landb.php _type Parameter (medium 5.1)
- [CVE-2026-48224](https://insights.sbomify.com/CVE-2026-48224/): Open ISES Tickets < 3.44.2 Reflected XSS via ics214.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-48223](https://insights.sbomify.com/CVE-2026-48223/): Open ISES Tickets < 3.44.2 Reflected XSS via ics213rr.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-48222](https://insights.sbomify.com/CVE-2026-48222/): Open ISES Tickets < 3.44.2 Reflected XSS via ics213.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-48221](https://insights.sbomify.com/CVE-2026-48221/): Open ISES Tickets < 3.44.2 Reflected XSS via ics205a.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-48220](https://insights.sbomify.com/CVE-2026-48220/): Open ISES Tickets < 3.44.2 Reflected XSS via ics205.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-4822](https://insights.sbomify.com/CVE-2026-4822/): Enter Software Iperius Backup Backup Service temp file (high 7.3)
- [CVE-2026-48219](https://insights.sbomify.com/CVE-2026-48219/): Open ISES Tickets < 3.44.2 Reflected XSS via ics202.php frm_add_str Parameter (medium 5.1)
- [CVE-2026-48218](https://insights.sbomify.com/CVE-2026-48218/): Open ISES Tickets < 3.44.2 Reflected XSS via icons/buttons/landb.php frm_name and frm_id Parameters (medium 5.1)
- [CVE-2026-48217](https://insights.sbomify.com/CVE-2026-48217/): Open ISES Tickets < 3.44.2 Reflected XSS via delete_module.php Multiple POST Parameters (medium 5.1)
- [CVE-2026-48216](https://insights.sbomify.com/CVE-2026-48216/): Open ISES Tickets < 3.44.2 Reflected XSS via db_loader.php Multiple POST Parameters (medium 5.1)
- [CVE-2026-48215](https://insights.sbomify.com/CVE-2026-48215/): Open ISES Tickets < 3.44.2 Reflected XSS via circle.php frm_id Parameter (medium 5.1)
- [CVE-2026-48214](https://insights.sbomify.com/CVE-2026-48214/): Open ISES Tickets < 3.44.2 Reflected XSS via add_nm.php ticket_id Parameter (medium 5.1)
- [CVE-2026-48213](https://insights.sbomify.com/CVE-2026-48213/): Open ISES Tickets < 3.44.2 Reflected XSS via add.php ticket_id Parameter (medium 5.1)
- [CVE-2026-48212](https://insights.sbomify.com/CVE-2026-48212/): Stored XSS in external pages (medium 4.8)
- [CVE-2026-48211](https://insights.sbomify.com/CVE-2026-48211/): Cross-Site Request Forgery in Import/Export Admin console (medium 5.4)
- [CVE-2026-48210](https://insights.sbomify.com/CVE-2026-48210/): Possible information disclosure via External Interface (medium 5.7)
- [CVE-2026-48209](https://insights.sbomify.com/CVE-2026-48209/): Reflected XSS in authenticated agent context (high 7.1)
- [CVE-2026-48208](https://insights.sbomify.com/CVE-2026-48208/): Denial-of-Service via SVG Rendering in Ticket (medium 6.5)
- [CVE-2026-48207](https://insights.sbomify.com/CVE-2026-48207/): Apache Fory: PyFory ReduceSerializer Incomplete Policy Enforcement (critical 9.8)
- [CVE-2026-48206](https://insights.sbomify.com/CVE-2026-48206/): Apache Camel-JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter (medium 5.3)
- [CVE-2026-48205](https://insights.sbomify.com/CVE-2026-48205/): Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF) (critical 9.1)
- [CVE-2026-48204](https://insights.sbomify.com/CVE-2026-48204/): Apache Camel: camel-mongodb-gridfs producer allows GridFS operation override and NoSQL operator injection via unfiltered gridfs.* HTTP headers (critical 9.8)
- [CVE-2026-48203](https://insights.sbomify.com/CVE-2026-48203/): Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields (critical 9.1)
- [CVE-2026-48202](https://insights.sbomify.com/CVE-2026-48202/): WordPress Brave plugin <= 0.8.8 - Content Injection vulnerability (medium 5.3)
- [CVE-2026-48200](https://insights.sbomify.com/CVE-2026-48200/): WordPress Document Library Lite plugin <= 1.3.0 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-4820](https://insights.sbomify.com/CVE-2026-4820/): IBM Maximo Application Suite was vulnerable to because Cookie ltpatoken2_<workspace_name> was not set with secure flag (medium 4.3)
- [CVE-2026-48199](https://insights.sbomify.com/CVE-2026-48199/): WordPress Sermon'e plugin <= 1.0.2 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-48197](https://insights.sbomify.com/CVE-2026-48197/): WordPress PublishPress Capabilities plugin <= 2.45.0 - Privilege Escalation vulnerability (high 7.2)
- [CVE-2026-48196](https://insights.sbomify.com/CVE-2026-48196/): WordPress Kali Forms plugin <= 2.4.27 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-48195](https://insights.sbomify.com/CVE-2026-48195/): WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-48194](https://insights.sbomify.com/CVE-2026-48194/): WordPress DukaMarket theme <= 1.3.0 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-48193](https://insights.sbomify.com/CVE-2026-48193/): WordPress Uminex theme <= 1.0.9 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-48192](https://insights.sbomify.com/CVE-2026-48192/): Code injection in Mendix Studio Pro 10.11 (medium 6.8)
- [CVE-2026-48191](https://insights.sbomify.com/CVE-2026-48191/): Wrong Permission Handling in Document Search Article Meta Filters (low 3.5)
- [CVE-2026-48190](https://insights.sbomify.com/CVE-2026-48190/): Incorrect handling of permissions in External Interface Config Item List module (low 3.5)
- [CVE-2026-4819](https://insights.sbomify.com/CVE-2026-4819/): Search Guard audit logs can contain under certain conditions user credentials (medium 4.9)
- [CVE-2026-48189](https://insights.sbomify.com/CVE-2026-48189/): Bypass DedicatedAgentToCustomerGroups Setting (medium 5.7)
- [CVE-2026-48188](https://insights.sbomify.com/CVE-2026-48188/): SQL Injection via MySQL Quote Method (critical 9.1)
- [CVE-2026-48187](https://insights.sbomify.com/CVE-2026-48187/): Email with special content can lead to DoS (medium 5.7)
- [CVE-2026-4818](https://insights.sbomify.com/CVE-2026-4818/): Some management operations on data streams are not properly restricted when user does not have the necessary privileges (medium 6.8)
- [CVE-2026-48172](https://insights.sbomify.com/CVE-2026-48172/): LiteSpeed cPanel Plugin Privilege Escalation (critical 10.0, exploited in the wild)
- [CVE-2026-48170](https://insights.sbomify.com/CVE-2026-48170/): scimPatch vulnerable to prototype pollution via unfiltered keys in patch (critical 9.1)
- [CVE-2026-4817](https://insights.sbomify.com/CVE-2026-4817/): SQL injection in MasterStudy LMS WordPress Plugin – for Online Courses and Education (medium 6.5)
- [CVE-2026-48169](https://insights.sbomify.com/CVE-2026-48169/): PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API (high 8.8)
- [CVE-2026-48168](https://insights.sbomify.com/CVE-2026-48168/): PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name (critical 10.0)
- [CVE-2026-48167](https://insights.sbomify.com/CVE-2026-48167/): Filament: Unvalidated ImageColumn and ImageEntry values can be used for XSS (medium 6.4)
- [CVE-2026-48166](https://insights.sbomify.com/CVE-2026-48166/): Filament: Timing-based user enumeration on login page (medium 5.3)
- [CVE-2026-48165](https://insights.sbomify.com/CVE-2026-48165/): MariaDB: unsafe usage of `wsrep_sst_receive_address` values on the joiner side (high 8.0)
- [CVE-2026-48163](https://insights.sbomify.com/CVE-2026-48163/): MariaDB: wsrep SST unsafe parameter handling on the donor side (rsync) (high 8.0)
- [CVE-2026-48162](https://insights.sbomify.com/CVE-2026-48162/): Path traversal in wazuh (critical 9.1)
- [CVE-2026-48161](https://insights.sbomify.com/CVE-2026-48161/): react18-use was vulnerable to malicious code execution via compromised commits (critical 9.3)
- [CVE-2026-48160](https://insights.sbomify.com/CVE-2026-48160/): react-tracked was vulnerable to malicious code execution via compromised commits (critical 9.3)
- [CVE-2026-4816](https://insights.sbomify.com/CVE-2026-4816/): Reflected Cross Site Scripting (XSS) vulnerability in Support Board (medium 4.8)
- [CVE-2026-48159](https://insights.sbomify.com/CVE-2026-48159/): use-reducer-async was vulnerable to malicious code execution via compromised commits (critical 9.3)
- [CVE-2026-48158](https://insights.sbomify.com/CVE-2026-48158/): use-context-selector was vulnerable to malicious code execution via compromised commits (critical 9.3)
- [CVE-2026-48157](https://insights.sbomify.com/CVE-2026-48157/): Slim has Reflected XSS in the HtmlErrorRenderer (medium 6.1)
- [CVE-2026-48156](https://insights.sbomify.com/CVE-2026-48156/): pypdf: Possible long runtimes for zero-only width values in cross-reference streams (medium 5.1)
- [CVE-2026-48155](https://insights.sbomify.com/CVE-2026-48155/): pypdf: Possible large memory usage for large offsets for layout mode text (medium 4.8)
- [CVE-2026-48154](https://insights.sbomify.com/CVE-2026-48154/): GoRest: InMemorySecret2FA race condition allows process crash via concurrent map access (medium 5.9)
- [CVE-2026-48153](https://insights.sbomify.com/CVE-2026-48153/): Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata (high 8.5)
- [CVE-2026-48152](https://insights.sbomify.com/CVE-2026-48152/): Budibase: Basic app users can exfiltrate stored REST datasource auth by rewriting datasource base URL (high 8.1)
- [CVE-2026-48151](https://insights.sbomify.com/CVE-2026-48151/): Budibase: Webhook schema endpoint authorization bypass allows unauthenticated mutation of webhook and automation schema (high 7.5)
- [CVE-2026-48150](https://insights.sbomify.com/CVE-2026-48150/): Budibase: Workspace-scoped builder escalates to global admin via /api/public/v1/roles/assign (critical 9.0)
- [CVE-2026-4815](https://insights.sbomify.com/CVE-2026-4815/): SQL Injection vulnerability in Support Board (high 8.7)
- [CVE-2026-48149](https://insights.sbomify.com/CVE-2026-48149/): Cross-site scripting in budibase (high 8.1)
- [CVE-2026-48148](https://insights.sbomify.com/CVE-2026-48148/): Budibase: Unvalidated VectorDB Host Parameter Enables SSRF (medium 5.3)
- [CVE-2026-48147](https://insights.sbomify.com/CVE-2026-48147/): Budibase: Unanchored Regex in `matchers.ts` Allows CSRF Bypass via Query String Injection in Budibase Worker (medium 6.5)
- [CVE-2026-48146](https://insights.sbomify.com/CVE-2026-48146/): Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection (high 7.7)
- [CVE-2026-48145](https://insights.sbomify.com/CVE-2026-48145/): Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass (high 8.2)
- [CVE-2026-48144](https://insights.sbomify.com/CVE-2026-48144/): Apache Thrift: c_glib TLS Client Missing Hostname Verification (critical 9.1)
- [CVE-2026-48142](https://insights.sbomify.com/CVE-2026-48142/): NGINX ngx_http_charset_module vulnerability (medium 6.3)
- [CVE-2026-48141](https://insights.sbomify.com/CVE-2026-48141/): Memory leak in NI grpc-device BeginSidebandStream (medium 6.0)
- [CVE-2026-48140](https://insights.sbomify.com/CVE-2026-48140/): Unchecked enum cast vulnerability in NI grpc-device in BeginSidebandStream (high 7.1)
- [CVE-2026-48139](https://insights.sbomify.com/CVE-2026-48139/): NULL pointer dereference vulnerability in NI grpc-device data moniker service (high 8.7)
- [CVE-2026-48138](https://insights.sbomify.com/CVE-2026-48138/): Out-of-bounds read vulnerability in the NI grpc-device streaming API (high 8.7)
- [CVE-2026-48137](https://insights.sbomify.com/CVE-2026-48137/): Untrusted pointer dereference in NI grpc-device sideband streaming API (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/595/