# Vulnerabilities published in 2026


- [CVE-2026-47273](https://insights.sbomify.com/CVE-2026-47273/): pam_usb: XPath injection via PAM-supplied identifiers in pam_usb configuration queries (medium 6.5)
- [CVE-2026-47272](https://insights.sbomify.com/CVE-2026-47272/): pam_usb: OTP pad authentication bypass via missing system pad check and uninitialized RNG buffer (high 7.1)
- [CVE-2026-47271](https://insights.sbomify.com/CVE-2026-47271/): pam_usb: OOM guards removed by -DNDEBUG cause NULL dereference and authentication process crash (medium 5.1)
- [CVE-2026-47270](https://insights.sbomify.com/CVE-2026-47270/): pam_usb: strtok() race condition in multi-threaded PAM hosts can corrupt deny_remote result (medium 6.3)
- [CVE-2026-4727](https://insights.sbomify.com/CVE-2026-4727/): Denial-of-service in the Libraries component in NSS (high 7.5)
- [CVE-2026-47269](https://insights.sbomify.com/CVE-2026-47269/): pam_usb: deny_remote feature incorrectly classifies IPv4-mapped IPv6 remote connections as local (high 7.4)
- [CVE-2026-47268](https://insights.sbomify.com/CVE-2026-47268/): Nezha Monitoring: Authenticated DDNS webhook configuration allows blind SSRF from the dashboard host (medium 6.4)
- [CVE-2026-47267](https://insights.sbomify.com/CVE-2026-47267/): Gogs: SSRF in webhook deliveries (high 8.3)
- [CVE-2026-47266](https://insights.sbomify.com/CVE-2026-47266/): Formie: Unauthenticated front-end submission editing can overwrite existing submissions (high 8.7)
- [CVE-2026-47265](https://insights.sbomify.com/CVE-2026-47265/): AIOHTTP vulnerable to cross-origin redirect with per-request cookies (medium 6.6)
- [CVE-2026-47264](https://insights.sbomify.com/CVE-2026-47264/): Discourse: Don't leak restricted tag group names via tag info (medium 5.3)
- [CVE-2026-47263](https://insights.sbomify.com/CVE-2026-47263/): Discourse: Prevent webhook payload disclosure on event redelivery (medium 4.3)
- [CVE-2026-47262](https://insights.sbomify.com/CVE-2026-47262/): containerd image-triggered runtime DoS via unbounded group parsing (medium 5.3)
- [CVE-2026-47261](https://insights.sbomify.com/CVE-2026-47261/): Wasmtime: WASI path_open(TRUNCATE) bypasses `FilePerms::WRITE` host restriction (high 7.5)
- [CVE-2026-47260](https://insights.sbomify.com/CVE-2026-47260/): Koel Vulnerable to SSRF via Podcast Episode Enclosure URLs (high 7.7)
- [CVE-2026-4726](https://insights.sbomify.com/CVE-2026-4726/): Denial-of-service in the XML component (high 7.5)
- [CVE-2026-47256](https://insights.sbomify.com/CVE-2026-47256/): opentelemetry-collector-contrib sentryexporter: Path traversal in Sentry exporter via attacker-controlled service.name reaches privileged Sentry API endpoints with operator bearer token (medium 5.3)
- [CVE-2026-47255](https://insights.sbomify.com/CVE-2026-47255/): AgenticMail API/storage and outbound relay hardening (high 8.2)
- [CVE-2026-47254](https://insights.sbomify.com/CVE-2026-47254/): libheif Has Heap Buffer Overflow in `Track::get_next_sample_raw_data()` -- OOB Chunk Vector Access (medium 6.1)
- [CVE-2026-47253](https://insights.sbomify.com/CVE-2026-47253/): Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion (high 7.3)
- [CVE-2026-47252](https://insights.sbomify.com/CVE-2026-47252/): Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari) (critical 9.0)
- [CVE-2026-47251](https://insights.sbomify.com/CVE-2026-47251/): libheif has an incomplete fix for CVE-2026-3949: integer overflow bypass in vvdec_push_data2 (medium 6.8)
- [CVE-2026-47250](https://insights.sbomify.com/CVE-2026-47250/): mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bearer token exfiltration (medium 6.1)
- [CVE-2026-4725](https://insights.sbomify.com/CVE-2026-4725/): Sandbox escape due to use-after-free in the Graphics: Canvas2D component (critical 9.3)
- [CVE-2026-47249](https://insights.sbomify.com/CVE-2026-47249/): Klever-Go KVM: Hash-array amplification in P2P resolver request handling (high 7.5)
- [CVE-2026-47248](https://insights.sbomify.com/CVE-2026-47248/): Parse Server: GraphQL "Did you mean" validation suggestions disclose schema to unauthenticated callers (medium 6.9)
- [CVE-2026-47247](https://insights.sbomify.com/CVE-2026-47247/): libheif Vulnerable to Heap Information Disclosure via Grid Image Gap + Uninitialized Pixel Plane Allocation (high 7.5)
- [CVE-2026-47245](https://insights.sbomify.com/CVE-2026-47245/): MyBB: Buddy list corruption (medium 4.3)
- [CVE-2026-47244](https://insights.sbomify.com/CVE-2026-47244/): Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced (medium 5.3)
- [CVE-2026-47243](https://insights.sbomify.com/CVE-2026-47243/): Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs (critical 9.2)
- [CVE-2026-47242](https://insights.sbomify.com/CVE-2026-47242/): Net::IMAP: Command Injection via ID command argument (medium 5.8)
- [CVE-2026-47241](https://insights.sbomify.com/CVE-2026-47241/): Net::IMAP: Denial of Service via incomplete raw argument validation (low 2.1)
- [CVE-2026-47240](https://insights.sbomify.com/CVE-2026-47240/): Net::IMAP: Command Injection via non-synchronizing literal in "raw" argument (medium 5.8)
- [CVE-2026-4724](https://insights.sbomify.com/CVE-2026-4724/): Undefined behavior in the Audio/Video component (critical 9.1)
- [CVE-2026-47238](https://insights.sbomify.com/CVE-2026-47238/): ClipBucket: IDOR in videos subtitle editor (medium 6.5)
- [CVE-2026-47237](https://insights.sbomify.com/CVE-2026-47237/): Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing (high 8.0)
- [CVE-2026-47236](https://insights.sbomify.com/CVE-2026-47236/): Missing authorization in solidtime (medium 4.3)
- [CVE-2026-47235](https://insights.sbomify.com/CVE-2026-47235/): SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array (high 7.5)
- [CVE-2026-47234](https://insights.sbomify.com/CVE-2026-47234/): Admidio writes session IDs and auto-login cookie values to application logs (medium 4.4)
- [CVE-2026-47233](https://insights.sbomify.com/CVE-2026-47233/): Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024 (medium 6.5)
- [CVE-2026-47232](https://insights.sbomify.com/CVE-2026-47232/): Admidio PKCS#12 private key export action lacks CSRF protection (medium 4.3)
- [CVE-2026-47231](https://insights.sbomify.com/CVE-2026-47231/): Admidio has IDOR in `documents-files.php` `mode=move_save` that lets any folder-uploader exfiltrate files from private folders (high 8.1)
- [CVE-2026-47230](https://insights.sbomify.com/CVE-2026-47230/): Admidio: IDOR in documents-files.php allows cross-folder file rename and description changes by unauthorized uploaders (medium 6.5)
- [CVE-2026-4723](https://insights.sbomify.com/CVE-2026-4723/): Use-after-free in the JavaScript Engine component (critical 9.8)
- [CVE-2026-47229](https://insights.sbomify.com/CVE-2026-47229/): Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation (medium 5.4)
- [CVE-2026-47228](https://insights.sbomify.com/CVE-2026-47228/): Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords (medium 5.2)
- [CVE-2026-47227](https://insights.sbomify.com/CVE-2026-47227/): Admidio module-administrator can delete or reorder categories owned by other modules via dead authorization check in `modules/categories.php` (medium 6.5)
- [CVE-2026-47226](https://insights.sbomify.com/CVE-2026-47226/): Admidio: Authorization bypass in file_delete enables cross-folder file removal by authenticated users without delete privileges (medium 6.5)
- [CVE-2026-47225](https://insights.sbomify.com/CVE-2026-47225/): Improper Search Cache Isolation for Scoped Search API Keys in Typesense (medium 6.0)
- [CVE-2026-47224](https://insights.sbomify.com/CVE-2026-47224/): NanaZip: Heap buffer-overflow read in NanaZip LVM metadata CRC check (medium 4.3)
- [CVE-2026-47223](https://insights.sbomify.com/CVE-2026-47223/): NanaZip: Heap out-of-bounds read in NanaZip AVB hashtree descriptor parser via 32-bit unsigned integer overflow (medium 5.4)
- [CVE-2026-47222](https://insights.sbomify.com/CVE-2026-47222/): NanaZip: Heap out-of-bounds read in NanaZip AVB property descriptor parser via unsigned integer underflow (medium 5.4)
- [CVE-2026-47221](https://insights.sbomify.com/CVE-2026-47221/): Envoy: Null pointer deref in internal redirects (medium 5.9)
- [CVE-2026-47220](https://insights.sbomify.com/CVE-2026-47220/): Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format (high 7.5)
- [CVE-2026-4722](https://insights.sbomify.com/CVE-2026-4722/): Privilege escalation in the IPC component (high 8.8)
- [CVE-2026-47219](https://insights.sbomify.com/CVE-2026-47219/): find-my-way is Vulnerable to DDoS with HTTP2 (high 7.5)
- [CVE-2026-47218](https://insights.sbomify.com/CVE-2026-47218/): runwasi: Forged Wasmtime precompiled OCI layer bypasses runwasi WASI sandbox (critical 9.3)
- [CVE-2026-47216](https://insights.sbomify.com/CVE-2026-47216/): Typesense: Unauthenticated Denial of Service in the Typesense /multi_search Endpoint (high 8.7)
- [CVE-2026-47215](https://insights.sbomify.com/CVE-2026-47215/): Singularity: Incorrect path matching for 'limit container paths' directive (medium 4.8)
- [CVE-2026-47214](https://insights.sbomify.com/CVE-2026-47214/): Docling: Unsafe URI and Path Handling in HTML Backend (high 7.1)
- [CVE-2026-47213](https://insights.sbomify.com/CVE-2026-47213/): BoxLite: Timeout Bypass Vulnerability (medium 6.5)
- [CVE-2026-47212](https://insights.sbomify.com/CVE-2026-47212/): Symfony: Twilio SMS Notifier allows unauthenticated webhook injection due to missing X-Twilio-Signature verification (medium 6.9)
- [CVE-2026-47211](https://insights.sbomify.com/CVE-2026-47211/): Ouroboros: Remote Code Execution via Untrusted Project-Directory .env (high 8.4)
- [CVE-2026-47210](https://insights.sbomify.com/CVE-2026-47210/): vm2 sandbox escape via JSPI-backed Promise `.finally()` species bypass (critical 9.8)
- [CVE-2026-4721](https://insights.sbomify.com/CVE-2026-4721/): Memory corruption in Firefox (critical 9.8)
- [CVE-2026-47209](https://insights.sbomify.com/CVE-2026-47209/): vm2: Bridge Proxy set trap ignores receiver parameter, enabling host object property injection via prototype chain (high 8.6)
- [CVE-2026-47208](https://insights.sbomify.com/CVE-2026-47208/): vm2: Sandbox Breakout Using Promise Species (critical 10.0)
- [CVE-2026-47207](https://insights.sbomify.com/CVE-2026-47207/): Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message (medium 6.5)
- [CVE-2026-47206](https://insights.sbomify.com/CVE-2026-47206/): Dragonfly: RESP Protocol Injection via Lua redis.error_reply() in EvalSerializer (low 2.3)
- [CVE-2026-47205](https://insights.sbomify.com/CVE-2026-47205/): Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides (medium 5.9)
- [CVE-2026-47204](https://insights.sbomify.com/CVE-2026-47204/): Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes (medium 6.5)
- [CVE-2026-47203](https://insights.sbomify.com/CVE-2026-47203/): Authelia Missing Username Canonicalization in Basic Auth (LDAP) (low 2.9)
- [CVE-2026-47202](https://insights.sbomify.com/CVE-2026-47202/): Kavita: Pre-Auth Account Takeover (critical 9.3)
- [CVE-2026-47201](https://insights.sbomify.com/CVE-2026-47201/): authentik: XML Signature Wrapping in SAML Source ACS allows authentication as arbitrary federated user (high 8.5)
- [CVE-2026-47200](https://insights.sbomify.com/CVE-2026-47200/): Nuxt: Route middleware not enforced when rendering `.server.vue` pages via `/__nuxt_island/page_*` (medium 6.3)
- [CVE-2026-4720](https://insights.sbomify.com/CVE-2026-4720/): Memory safety bugs fixed in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149 (critical 9.8)
- [CVE-2026-47199](https://insights.sbomify.com/CVE-2026-47199/): Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE (low 2.3)
- [CVE-2026-47198](https://insights.sbomify.com/CVE-2026-47198/): Paymenter: URL parameter injection bypasses paid plan limits at checkout (high 8.5)
- [CVE-2026-47197](https://insights.sbomify.com/CVE-2026-47197/): Quest Bot: Discord moderation role hierarchy bypass in ban, kick, mute, unmute, warn, and nickname commands (high 7.2)
- [CVE-2026-47196](https://insights.sbomify.com/CVE-2026-47196/): Quest Bot: Empty automod rule causes every guild message to be deleted (high 8.4)
- [CVE-2026-47195](https://insights.sbomify.com/CVE-2026-47195/): Quest Bot: Per-channel permission overwrite bypass in purge and slowmode commands. (high 7.1)
- [CVE-2026-47194](https://insights.sbomify.com/CVE-2026-47194/): Frappe: Host header poisoning can redirect magic login links to an attacker-controlled domain (high 8.6)
- [CVE-2026-47193](https://insights.sbomify.com/CVE-2026-47193/): OpenProject: Journal diff endpoint bypasses object, journal, and field visibility checks (high 7.5)
- [CVE-2026-47192](https://insights.sbomify.com/CVE-2026-47192/): kas's late signature validation may allow unnoticed repository manipulations (low 2.1)
- [CVE-2026-47191](https://insights.sbomify.com/CVE-2026-47191/): kas checks out SHA-like git branches as valid commits (low 2.1)
- [CVE-2026-47190](https://insights.sbomify.com/CVE-2026-47190/): IPAM controller service account granted unnecessary full access to Secrets (medium 4.4)
- [CVE-2026-4719](https://insights.sbomify.com/CVE-2026-4719/): Incorrect boundary conditions in the Graphics: Text component (high 7.5)
- [CVE-2026-47189](https://insights.sbomify.com/CVE-2026-47189/): Quest Bot: AutoMod removal can delete rules from another guild by global rule ID (high 8.3)
- [CVE-2026-47188](https://insights.sbomify.com/CVE-2026-47188/): Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions. (low 2.3)
- [CVE-2026-47187](https://insights.sbomify.com/CVE-2026-47187/): SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write (critical 9.3)
- [CVE-2026-47185](https://insights.sbomify.com/CVE-2026-47185/): Frappe Has Broken Access Control in its Workspace Save API (medium 5.1)
- [CVE-2026-47184](https://insights.sbomify.com/CVE-2026-47184/): Zeroconf: Unbounded DNS record cache allows LAN-local memory exhaustion via multicast flood (medium 6.5)
- [CVE-2026-47183](https://insights.sbomify.com/CVE-2026-47183/): zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion (medium 6.5)
- [CVE-2026-47182](https://insights.sbomify.com/CVE-2026-47182/): Frappe: Broken Access Control on Private Files (medium 5.3)
- [CVE-2026-47181](https://insights.sbomify.com/CVE-2026-47181/): PenguinMod-BackendApi: NoSQL Injection in Password Reset Endpoint Allows Account Takeover (high 8.7)
- [CVE-2026-47180](https://insights.sbomify.com/CVE-2026-47180/): Zeroconf: Unbounded recursion in DNS compression-pointer decoder allows LAN-local denial of service (medium 6.5)
- [CVE-2026-4718](https://insights.sbomify.com/CVE-2026-4718/): Undefined behavior in the WebRTC: Signaling component (high 8.1)
- [CVE-2026-47179](https://insights.sbomify.com/CVE-2026-47179/): Arcane: Authenticated Arbitrary Host File Read via Docker Compose Include Directives in Arcane (high 7.7)
- [CVE-2026-47178](https://insights.sbomify.com/CVE-2026-47178/): libheif has Heap Out Of Bounds Write in unci subsystem (medium 6.1)
- [CVE-2026-47177](https://insights.sbomify.com/CVE-2026-47177/): Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility channel (medium 5.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/604/