# Vulnerabilities published in 2026


- [CVE-2026-44832](https://insights.sbomify.com/CVE-2026-44832/): Snipe-IT: Privilege Escalation via API Permissions Assignment (high 8.7)
- [CVE-2026-44831](https://insights.sbomify.com/CVE-2026-44831/): Snipe-IT: XSS vulnerability in component notes (medium 4.8)
- [CVE-2026-44830](https://insights.sbomify.com/CVE-2026-44830/): Empty API_TOKEN disables authentication on network-reachable HTTP/SSE transport (high 8.7)
- [CVE-2026-4483](https://insights.sbomify.com/CVE-2026-4483/): Missing authorization in MxGeneralIo (high 7.0)
- [CVE-2026-44829](https://insights.sbomify.com/CVE-2026-44829/): Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename (high 8.8)
- [CVE-2026-44828](https://insights.sbomify.com/CVE-2026-44828/): Qexo initialization endpoint can reset setup state and expose stored credentials (critical 9.3)
- [CVE-2026-44827](https://insights.sbomify.com/CVE-2026-44827/): Diffusers: None.py Trust Remote Code Bypass (high 8.8)
- [CVE-2026-44826](https://insights.sbomify.com/CVE-2026-44826/): Vvveb: Vvveb CMS — Negative-quantity cart manipulation allows creation of orders with negative grand totals (high 7.5)
- [CVE-2026-44825](https://insights.sbomify.com/CVE-2026-44825/): Apache Solr: Enabling BasicAuth using bin/solr CLI configures additional insecure users (high 8.1)
- [CVE-2026-44824](https://insights.sbomify.com/CVE-2026-44824/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44823](https://insights.sbomify.com/CVE-2026-44823/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44822](https://insights.sbomify.com/CVE-2026-44822/): Microsoft Excel Information Disclosure Vulnerability (high 8.2)
- [CVE-2026-44821](https://insights.sbomify.com/CVE-2026-44821/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-44820](https://insights.sbomify.com/CVE-2026-44820/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-4482](https://insights.sbomify.com/CVE-2026-4482/): Insight Agent Private Key Information Disclosure via Inherited File Permissions (medium 6.8)
- [CVE-2026-44819](https://insights.sbomify.com/CVE-2026-44819/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44818](https://insights.sbomify.com/CVE-2026-44818/): Microsoft Excel Remote Code Execution Vulnerability (high 7.0)
- [CVE-2026-44817](https://insights.sbomify.com/CVE-2026-44817/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44815](https://insights.sbomify.com/CVE-2026-44815/): DHCP Client Service Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-44814](https://insights.sbomify.com/CVE-2026-44814/): Windows DWM Core Library Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-44813](https://insights.sbomify.com/CVE-2026-44813/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44812](https://insights.sbomify.com/CVE-2026-44812/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44811](https://insights.sbomify.com/CVE-2026-44811/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44810](https://insights.sbomify.com/CVE-2026-44810/): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (high 8.4)
- [CVE-2026-44809](https://insights.sbomify.com/CVE-2026-44809/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44808](https://insights.sbomify.com/CVE-2026-44808/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44807](https://insights.sbomify.com/CVE-2026-44807/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44806](https://insights.sbomify.com/CVE-2026-44806/): Windows Secure Channel Denial of Service Vulnerability (medium 5.3)
- [CVE-2026-44805](https://insights.sbomify.com/CVE-2026-44805/): Windows Network Controller (NC) Host Agent Denial of Service Vulnerability (medium 5.5)
- [CVE-2026-44804](https://insights.sbomify.com/CVE-2026-44804/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44803](https://insights.sbomify.com/CVE-2026-44803/): Windows Graphics Component Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-44802](https://insights.sbomify.com/CVE-2026-44802/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-44801](https://insights.sbomify.com/CVE-2026-44801/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-44800](https://insights.sbomify.com/CVE-2026-44800/): Windows Push Notifications Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-4480](https://insights.sbomify.com/CVE-2026-4480/): Samba: samba: remote code execution in printing subsystem via unescaped job description (critical 9.0)
- [CVE-2026-44799](https://insights.sbomify.com/CVE-2026-44799/): Remote Desktop Client Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-44798](https://insights.sbomify.com/CVE-2026-44798/): Nautobot: GitRepository.current_head field should not be writable through REST API (high 7.1)
- [CVE-2026-44797](https://insights.sbomify.com/CVE-2026-44797/): Nautobot: Webhook definitions could be used for server-side request forgery (SSRF) (high 8.5)
- [CVE-2026-44796](https://insights.sbomify.com/CVE-2026-44796/): Nautobot: Object bulk rename UI actions vulnerable to denial of service by crafted regular expression (REDoS) (medium 6.5)
- [CVE-2026-44795](https://insights.sbomify.com/CVE-2026-44795/): Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types (high 8.8)
- [CVE-2026-44794](https://insights.sbomify.com/CVE-2026-44794/): Nautobot: REST API permits creation of GenericForeignKey references to objects that the user should not be able to reference (medium 5.4)
- [CVE-2026-44793](https://insights.sbomify.com/CVE-2026-44793/): OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget` (high 7.0)
- [CVE-2026-44792](https://insights.sbomify.com/CVE-2026-44792/): n8n: Source Control Pull SQL Injection (high 8.9)
- [CVE-2026-44791](https://insights.sbomify.com/CVE-2026-44791/): n8n: XML Node Prototype Pollution Patch Bypass (critical 9.4)
- [CVE-2026-44790](https://insights.sbomify.com/CVE-2026-44790/): n8n: Arbitrary File Read via Git Node (critical 9.4)
- [CVE-2026-4479](https://insights.sbomify.com/CVE-2026-4479/): Cross-site scripting in WholeSale Products Dynamic Pricing Management WooCommerce (medium 4.4)
- [CVE-2026-44789](https://insights.sbomify.com/CVE-2026-44789/): n8n: HTTP Request Node Pagination Prototype Pollution to RCE (critical 9.4)
- [CVE-2026-44788](https://insights.sbomify.com/CVE-2026-44788/): SharpCompress: Directory traversal via directory entries in WriteToDirectory (zip slip variant) (medium 5.9)
- [CVE-2026-44787](https://insights.sbomify.com/CVE-2026-44787/): Discourse: Signup-time primary_group_id assignment grants whisperer access (high 8.2)
- [CVE-2026-44786](https://insights.sbomify.com/CVE-2026-44786/): Discourse: Public chat MessageBus broadcasts are not restricted to chat-eligible users (high 7.5)
- [CVE-2026-44785](https://insights.sbomify.com/CVE-2026-44785/): Discourse: Hidden reply-to post raw can be disclosed through AI explain prompts (medium 4.3)
- [CVE-2026-44784](https://insights.sbomify.com/CVE-2026-44784/): Discourse: Non-staff group owners can see email password in plaintext through group history (medium 6.5)
- [CVE-2026-44783](https://insights.sbomify.com/CVE-2026-44783/): Discourse: Replying to a whisper lets non-whisperers create staff-only whisper posts (medium 5.4)
- [CVE-2026-44782](https://insights.sbomify.com/CVE-2026-44782/): Discourse: GroupPostSerializer leaks hidden full names through reaction post association (medium 4.3)
- [CVE-2026-44780](https://insights.sbomify.com/CVE-2026-44780/): Discourse: Category queue reviewers can read raw incoming emails from queued posts (medium 4.3)
- [CVE-2026-4478](https://insights.sbomify.com/CVE-2026-4478/): Yi Technology YI Home Camera HTTP Firmware Update ipc signature verification (critical 9.2)
- [CVE-2026-44779](https://insights.sbomify.com/CVE-2026-44779/): Discourse: Bot debug endpoints disclose whisper translation audit logs (medium 4.3)
- [CVE-2026-44778](https://insights.sbomify.com/CVE-2026-44778/): Inspektor Gadget: Unprivileged container can crash USDT note parser via crafted ELF (low 2.9)
- [CVE-2026-44777](https://insights.sbomify.com/CVE-2026-44777/): jq: stack overflow in module loading on mutual `include` (medium 5.4)
- [CVE-2026-44776](https://insights.sbomify.com/CVE-2026-44776/): Kavita: IDOR in /api/Download/* (medium 5.9)
- [CVE-2026-44775](https://insights.sbomify.com/CVE-2026-44775/): Kavita: No authentication at /api/Reader/image (medium 6.9)
- [CVE-2026-44774](https://insights.sbomify.com/CVE-2026-44774/): Traefik: Gateway API TraefikService backend accepts rest@internal, allowing unauthorized exposure of the REST provider despite providers.rest.insecure=false (medium 6.4)
- [CVE-2026-44771](https://insights.sbomify.com/CVE-2026-44771/): Missing Authorization check in SAP S/4HANA (Draft operation) (medium 4.3)
- [CVE-2026-44770](https://insights.sbomify.com/CVE-2026-44770/): Missing Authorization check in SAP S/4 HANA (Create Single Payment) (medium 4.3)
- [CVE-2026-4477](https://insights.sbomify.com/CVE-2026-4477/): Yi Technology YI Home Camera WPA/WPS hard-coded key (low 2.3)
- [CVE-2026-44769](https://insights.sbomify.com/CVE-2026-44769/): SQL Injection vulnerability in SAP S/4HANA Project Management (PPM-PRO) (medium 5.5)
- [CVE-2026-44768](https://insights.sbomify.com/CVE-2026-44768/): Security misconfiguration in SAP CRM (WebClient UI) (medium 4.1)
- [CVE-2026-44767](https://insights.sbomify.com/CVE-2026-44767/): Allowlist Bypass in setThemeRoot() Enables Cross-Origin CSS Injection (medium 6.1)
- [CVE-2026-44766](https://insights.sbomify.com/CVE-2026-44766/): SQL Injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation) (medium 6.5)
- [CVE-2026-44765](https://insights.sbomify.com/CVE-2026-44765/): Missing Authorization Check in SAP Manufacturing Integration and Intelligence (high 7.3)
- [CVE-2026-44764](https://insights.sbomify.com/CVE-2026-44764/): Missing Authorization Check in SAP Manufacturing Integration and Intelligence (high 7.3)
- [CVE-2026-44763](https://insights.sbomify.com/CVE-2026-44763/): Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence (high 7.6)
- [CVE-2026-44762](https://insights.sbomify.com/CVE-2026-44762/): Security Misconfiguration in SAP Data Services Management Console (low 3.7)
- [CVE-2026-44761](https://insights.sbomify.com/CVE-2026-44761/): Insecure Sample Credentials in SAP Commerce Cloud (critical 9.1)
- [CVE-2026-44760](https://insights.sbomify.com/CVE-2026-44760/): Cross-site scripting in SAP NetWeaver Application Server ABAP (applications based on Business Server Pages) (medium 4.7)
- [CVE-2026-4476](https://insights.sbomify.com/CVE-2026-4476/): Yi Technology YI Home Camera CGI Endpoint ipc missing authentication (medium 5.3)
- [CVE-2026-44759](https://insights.sbomify.com/CVE-2026-44759/): Cross Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (medium 6.1)
- [CVE-2026-44758](https://insights.sbomify.com/CVE-2026-44758/): Code Injection vulnerability in Manufacturing Integration and Intelligence (critical 9.1)
- [CVE-2026-44757](https://insights.sbomify.com/CVE-2026-44757/): Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager (medium 4.7)
- [CVE-2026-44756](https://insights.sbomify.com/CVE-2026-44756/): Memory Corruption vulnerability in SAP Extended Passport (EPP) Processing (critical 10.0)
- [CVE-2026-44755](https://insights.sbomify.com/CVE-2026-44755/): Email Spoofing vulnerability in SAP Business Objects Business Intelligence Platform (medium 4.3)
- [CVE-2026-44754](https://insights.sbomify.com/CVE-2026-44754/): Missing caller identification check-in for ODP Data Replication APIs (medium 6.6)
- [CVE-2026-44753](https://insights.sbomify.com/CVE-2026-44753/): Information Disclosure vulnerability in SAP HANA Extended Application Services classic model (User Self Service) (low 3.7)
- [CVE-2026-44752](https://insights.sbomify.com/CVE-2026-44752/): Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java(Configuration Wizard) (high 8.2)
- [CVE-2026-44751](https://insights.sbomify.com/CVE-2026-44751/): Missing Authorization check in Application Server ABAP of SAP NetWeaver and ABAP Platform (high 7.1)
- [CVE-2026-44750](https://insights.sbomify.com/CVE-2026-44750/): Missing Authorization check in SAP MDG (Review Match Groups Application) (medium 4.3)
- [CVE-2026-4475](https://insights.sbomify.com/CVE-2026-4475/): Yi Technology YI Home Camera ipc hard-coded credentials (high 8.7)
- [CVE-2026-44749](https://insights.sbomify.com/CVE-2026-44749/): Information Disclosure vulnerability in SAP Gateway (medium 4.3)
- [CVE-2026-44748](https://insights.sbomify.com/CVE-2026-44748/): XML Signature Wrapping in SAML Authentication in SAP NetWeaver AS ABAP and ABAP Platform (critical 9.9)
- [CVE-2026-44747](https://insights.sbomify.com/CVE-2026-44747/): Memory Corruption vulnerability in SAP NetWeaver Application Server ABAP (critical 9.9)
- [CVE-2026-44746](https://insights.sbomify.com/CVE-2026-44746/): Reflected Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS Java (JDBC Test Servlet) (medium 6.1)
- [CVE-2026-44745](https://insights.sbomify.com/CVE-2026-44745/): Open Redirect vulnerability in SAP Approuter (high 8.1)
- [CVE-2026-44744](https://insights.sbomify.com/CVE-2026-44744/): SQL Injection vulnerability in SAP S/4HANA (medium 6.5)
- [CVE-2026-44743](https://insights.sbomify.com/CVE-2026-44743/): Security Misconfiguration vulnerability in SAP Business Objects (low 3.7)
- [CVE-2026-44742](https://insights.sbomify.com/CVE-2026-44742/): Postorius is vulnerable to XSS (high 7.2)
- [CVE-2026-44741](https://insights.sbomify.com/CVE-2026-44741/): Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property Parameter (high 8.8)
- [CVE-2026-44740](https://insights.sbomify.com/CVE-2026-44740/): go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion (medium 6.5)
- [CVE-2026-4474](https://insights.sbomify.com/CVE-2026-4474/): itsourcecode University Management System admin_single_student_update.php cross site scripting (medium 4.8)
- [CVE-2026-44739](https://insights.sbomify.com/CVE-2026-44739/): Pimcore: SQL Injection in Custom Reports Column Configuration (high 8.7)
- [CVE-2026-44738](https://insights.sbomify.com/CVE-2026-44738/): Grav: Twig sandbox allows editor-role users to exfiltrate all plugin secrets via Config::toArray() (high 7.7)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/628/