# Vulnerabilities published in 2026


- [CVE-2026-45683](https://insights.sbomify.com/CVE-2026-45683/): OpenTelemetry eBPF Instrumentation: Java TLS ioctl kprobe allows kernel memory disclosure (low 3.8)
- [CVE-2026-45682](https://insights.sbomify.com/CVE-2026-45682/): OpenTelemetry eBPF Instrumentation: CappedConcurrentHashMap leaks keys after removals (medium 5.1)
- [CVE-2026-45681](https://insights.sbomify.com/CVE-2026-45681/): OpenTelemetry eBPF Instrumentation: CPU-mismatch fallback uses 256-byte buffer with 8KB size (medium 5.9)
- [CVE-2026-45680](https://insights.sbomify.com/CVE-2026-45680/): OpenTelemetry eBPF Instrumentation: Unbounded BPF internal metrics replay can exhaust CPU (medium 5.9)
- [CVE-2026-4568](https://insights.sbomify.com/CVE-2026-4568/): SourceCodester Sales and Inventory System HTTP GET Request update_supplier.php sql injection (medium 5.3)
- [CVE-2026-45679](https://insights.sbomify.com/CVE-2026-45679/): OpenTelemetry eBPF Instrumentation: Redis error text is exported in span status messages (medium 6.5)
- [CVE-2026-45678](https://insights.sbomify.com/CVE-2026-45678/): OpenTelemetry eBPF Instrumentation: Postgres BIND parsing can panic on malformed payloads (high 7.5)
- [CVE-2026-45677](https://insights.sbomify.com/CVE-2026-45677/): Rocket.Chat: Lack of SAML Signature Check During Logout Could Lead To DoS (high 8.7)
- [CVE-2026-45676](https://insights.sbomify.com/CVE-2026-45676/): OpenTelemetry eBPF Instrumentation: Unsafe fastelf parsing allows malformed ELF to crash agent (medium 5.5)
- [CVE-2026-45675](https://insights.sbomify.com/CVE-2026-45675/): Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts (high 8.1)
- [CVE-2026-45674](https://insights.sbomify.com/CVE-2026-45674/): Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records (high 8.7)
- [CVE-2026-45673](https://insights.sbomify.com/CVE-2026-45673/): Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port (medium 6.8)
- [CVE-2026-45672](https://insights.sbomify.com/CVE-2026-45672/): Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed (high 8.8)
- [CVE-2026-45671](https://insights.sbomify.com/CVE-2026-45671/): Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion (high 8.0)
- [CVE-2026-45670](https://insights.sbomify.com/CVE-2026-45670/): Nuxt: Dev server exposes built source over LAN to malicious sites (incomplete fix for GHSA-4gf7-ff8x-hq99) (medium 5.9)
- [CVE-2026-4567](https://insights.sbomify.com/CVE-2026-4567/): Tenda A15 UploadCfg stack-based overflow (critical 9.3)
- [CVE-2026-45669](https://insights.sbomify.com/CVE-2026-45669/): Nuxt: Reflected XSS in `navigateTo()` external redirect (medium 5.3)
- [CVE-2026-45668](https://insights.sbomify.com/CVE-2026-45668/): Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled) (critical 9.3)
- [CVE-2026-45667](https://insights.sbomify.com/CVE-2026-45667/): Open WebUI: Unauthenticated endpoint can trigger embedding generation (cost/DoS) (medium 6.5)
- [CVE-2026-45666](https://insights.sbomify.com/CVE-2026-45666/): Open WebUI: Indirect Object Reference (IDOR) in user notes (medium 6.5)
- [CVE-2026-45665](https://insights.sbomify.com/CVE-2026-45665/): Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order (high 8.1)
- [CVE-2026-45664](https://insights.sbomify.com/CVE-2026-45664/): ImageMagick: Policy Bypass in MNG coder could (medium 5.3)
- [CVE-2026-45663](https://insights.sbomify.com/CVE-2026-45663/): Dokploy: Remote Code Execution via destinationPath in Container File Upload (critical 9.9)
- [CVE-2026-45662](https://insights.sbomify.com/CVE-2026-45662/): Dokploy: Command Injection via incomplete shell escaping in docker logout (registry deletion) (high 8.8)
- [CVE-2026-45661](https://insights.sbomify.com/CVE-2026-45661/): Dokploy: Remote Code Execution through Path Traversal (critical 9.9)
- [CVE-2026-45660](https://insights.sbomify.com/CVE-2026-45660/): Statamic: Server-Side Request Forgery via Glide (medium 5.4)
- [CVE-2026-4566](https://insights.sbomify.com/CVE-2026-4566/): Belkin F9K1122 formWISP5G stack-based overflow (high 8.7)
- [CVE-2026-45659](https://insights.sbomify.com/CVE-2026-45659/): Microsoft SharePoint Server Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2026-45658](https://insights.sbomify.com/CVE-2026-45658/): Windows BitLocker Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-45657](https://insights.sbomify.com/CVE-2026-45657/): Windows Kernel Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-45656](https://insights.sbomify.com/CVE-2026-45656/): UEFI Secure Boot Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-45655](https://insights.sbomify.com/CVE-2026-45655/): Windows BitLocker Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2026-45654](https://insights.sbomify.com/CVE-2026-45654/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-45653](https://insights.sbomify.com/CVE-2026-45653/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45650](https://insights.sbomify.com/CVE-2026-45650/): Microsoft Bing Search Spoofing Vulnerability (medium 4.3)
- [CVE-2026-4565](https://insights.sbomify.com/CVE-2026-4565/): Tenda AC21 SetNetControlList formSetQosBand buffer overflow (high 8.7)
- [CVE-2026-45649](https://insights.sbomify.com/CVE-2026-45649/): Office for Android Spoofing Vulnerability (high 7.1)
- [CVE-2026-45648](https://insights.sbomify.com/CVE-2026-45648/): Windows Active Directory Domain Services Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-45647](https://insights.sbomify.com/CVE-2026-45647/): Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability (medium 5.5)
- [CVE-2026-45646](https://insights.sbomify.com/CVE-2026-45646/): OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability (high 7.5)
- [CVE-2026-45645](https://insights.sbomify.com/CVE-2026-45645/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-45644](https://insights.sbomify.com/CVE-2026-45644/): Microsoft Live Share Canvas SDK Elevation of Privilege Vulnerability (high 8.0)
- [CVE-2026-45643](https://insights.sbomify.com/CVE-2026-45643/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-45642](https://insights.sbomify.com/CVE-2026-45642/): Microsoft Azure Attestation service and Device Health Attestation Service Spoofing Vulnerability (low 3.9)
- [CVE-2026-45641](https://insights.sbomify.com/CVE-2026-45641/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-45640](https://insights.sbomify.com/CVE-2026-45640/): Windows Bluetooth Port Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-4564](https://insights.sbomify.com/CVE-2026-4564/): yangzongzhuan RuoYi Quartz Job job code injection (medium 5.1)
- [CVE-2026-45639](https://insights.sbomify.com/CVE-2026-45639/): Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-45638](https://insights.sbomify.com/CVE-2026-45638/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45637](https://insights.sbomify.com/CVE-2026-45637/): Microsoft DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45636](https://insights.sbomify.com/CVE-2026-45636/): Windows NTFS Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-45635](https://insights.sbomify.com/CVE-2026-45635/): Windows UPnP Device Host Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-45634](https://insights.sbomify.com/CVE-2026-45634/): Windows DHCP Client Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-45633](https://insights.sbomify.com/CVE-2026-45633/): Dokploy: Command Injection in /docker-container-logs Endpoint (critical 9.9)
- [CVE-2026-45632](https://insights.sbomify.com/CVE-2026-45632/): Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution (critical 9.9)
- [CVE-2026-45631](https://insights.sbomify.com/CVE-2026-45631/): Dokploy: Pre-Auth Admin Takeover via Hardcoded Authentication Secret (critical 10.0)
- [CVE-2026-45630](https://insights.sbomify.com/CVE-2026-45630/): Dokploy: Authenticated Remote Code Execution via Command Injection in updateTraefikConfig Echo Statement (critical 9.0)
- [CVE-2026-4563](https://insights.sbomify.com/CVE-2026-4563/): MacCMS Member Order Detail User.php order_info authorization (medium 5.3)
- [CVE-2026-45629](https://insights.sbomify.com/CVE-2026-45629/): Dokploy: Authenticated Remote Code Execution via Command Injection in /listen-deployment WebSocket Endpoint (critical 9.9)
- [CVE-2026-45628](https://insights.sbomify.com/CVE-2026-45628/): Dokploy: Command Injection via Unescaped Branch Fields in Deployment Pipeline (critical 9.6)
- [CVE-2026-45627](https://insights.sbomify.com/CVE-2026-45627/): Arcane: Unauthenticated reflected XSS via SVG color parameter in /api/app-images/logo enables admin account takeover (high 8.2)
- [CVE-2026-45626](https://insights.sbomify.com/CVE-2026-45626/): Arcane: OS Command Injection in Volume Browser ListDirectory via path query parameter (medium 6.3)
- [CVE-2026-45625](https://insights.sbomify.com/CVE-2026-45625/): Arcane Backend: Missing admin authorization on git repository endpoints allows non-admin users to exfiltrate stored Git credentials and tamper with GitOps configs (critical 9.9)
- [CVE-2026-45624](https://insights.sbomify.com/CVE-2026-45624/): ImageMagick: Heap Buffer Over-Read of a 4 bytes in distort operation. (medium 5.1)
- [CVE-2026-45623](https://insights.sbomify.com/CVE-2026-45623/): PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments (high 7.5)
- [CVE-2026-45622](https://insights.sbomify.com/CVE-2026-45622/): Vvveb: Unauthenticated reflected XSS in public product return form via customer_order_id (medium 5.3)
- [CVE-2026-45620](https://insights.sbomify.com/CVE-2026-45620/): AVideo CVE-2026-43881 incomplete fix - `objects/mention.json.php:17` is an unauthenticated user enumeration (medium 5.3)
- [CVE-2026-4562](https://insights.sbomify.com/CVE-2026-4562/): MacCMS Timming API Endpoint Timming.php weak authentication (medium 6.9)
- [CVE-2026-45619](https://insights.sbomify.com/CVE-2026-45619/): AVideo CVE-2026-43884 incomplete fix - six (or more) `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD post-`603e7bf` (medium 6.5)
- [CVE-2026-45618](https://insights.sbomify.com/CVE-2026-45618/): LiquidJS is Vulnerable to Remote Code Execution (critical 10.0)
- [CVE-2026-45617](https://insights.sbomify.com/CVE-2026-45617/): LiquidJS: ReDoS via Quadratic Backtracking in `strip_html` Filter Regex (high 7.5)
- [CVE-2026-45616](https://insights.sbomify.com/CVE-2026-45616/): Vvveb: Stored XSS in Posts allows privilege escalation via post editor (medium 5.1)
- [CVE-2026-45615](https://insights.sbomify.com/CVE-2026-45615/): mouse07410/asn1c: 1-byte Heap Out-of-Bounds Read in `INTEGER_decode_oer` via Malformed OER Payload (high 8.2)
- [CVE-2026-45614](https://insights.sbomify.com/CVE-2026-45614/): OP-TEE vulnerable to ECDH private key recovery (medium 4.7)
- [CVE-2026-45613](https://insights.sbomify.com/CVE-2026-45613/): Rizin: Heap-buffer-overflow in OMF parser (low 3.3)
- [CVE-2026-45612](https://insights.sbomify.com/CVE-2026-45612/): rz-libdemangle: Out of bound read in rust demangler (medium 5.5)
- [CVE-2026-45610](https://insights.sbomify.com/CVE-2026-45610/): AVideo: 2FA toggle endpoint has no CSRF protection, letting an attacker page silently disable a logged-in victim's 2FA (medium 5.7)
- [CVE-2026-4561](https://insights.sbomify.com/CVE-2026-4561/): Cross-site scripting in MC4WP: Mailchimp for WordPress (medium 6.4)
- [CVE-2026-45609](https://insights.sbomify.com/CVE-2026-45609/): mcp-security: Unvalidated URL Fetching (SSRF) (high 7.2)
- [CVE-2026-45608](https://insights.sbomify.com/CVE-2026-45608/): Windows DHCP Client Information Disclosure Vulnerability (medium 6.8)
- [CVE-2026-45607](https://insights.sbomify.com/CVE-2026-45607/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-45606](https://insights.sbomify.com/CVE-2026-45606/): Microsoft UxTheme Library (uxtheme.dll) Denial of Service Vulnerability (medium 5.5)
- [CVE-2026-45605](https://insights.sbomify.com/CVE-2026-45605/): Windows Bluetooth Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45604](https://insights.sbomify.com/CVE-2026-45604/): Windows Managed Installer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-45603](https://insights.sbomify.com/CVE-2026-45603/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45602](https://insights.sbomify.com/CVE-2026-45602/): Windows Dynamic Host Configuration Protocol (DHCP) Tampering Vulnerability (critical 9.1)
- [CVE-2026-45601](https://insights.sbomify.com/CVE-2026-45601/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45600](https://insights.sbomify.com/CVE-2026-45600/): Windows Kernel-Mode Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45599](https://insights.sbomify.com/CVE-2026-45599/): Windows UPnP Device Host Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-45598](https://insights.sbomify.com/CVE-2026-45598/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45597](https://insights.sbomify.com/CVE-2026-45597/): Windows UI Automation Manager (uiamanager.dll) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45596](https://insights.sbomify.com/CVE-2026-45596/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-45595](https://insights.sbomify.com/CVE-2026-45595/): Windows Mark of the Web Security Feature Bypass Vulnerability (medium 5.4)
- [CVE-2026-45594](https://insights.sbomify.com/CVE-2026-45594/): Windows Application Identity (AppID) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-45593](https://insights.sbomify.com/CVE-2026-45593/): Windows SDK Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45592](https://insights.sbomify.com/CVE-2026-45592/): Windows Internet (wininet.dll) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-45591](https://insights.sbomify.com/CVE-2026-45591/): ASP.NET Core Denial of Service Vulnerability (high 7.5)
- [CVE-2026-4559](https://insights.sbomify.com/CVE-2026-4559/): Cross-site scripting in Image Photo Gallery Final Tiles Grid (medium 6.4)
- [CVE-2026-45588](https://insights.sbomify.com/CVE-2026-45588/): Secure Boot Security Feature Bypass Vulnerability (high 7.9)
- [CVE-2026-45586](https://insights.sbomify.com/CVE-2026-45586/): Windows Collaborative Translation Framework (CTFMON) Elevation of Privilege Vulnerability (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/620/