# Vulnerabilities published in 2026


- [CVE-2026-44737](https://insights.sbomify.com/CVE-2026-44737/): Grav: Stored XSS via page title (data[header][title]) in admin panel (medium 6.2)
- [CVE-2026-44736](https://insights.sbomify.com/CVE-2026-44736/): OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects (medium 6.5)
- [CVE-2026-44735](https://insights.sbomify.com/CVE-2026-44735/): OpenProject: Shares API Information Disclosure (medium 6.5)
- [CVE-2026-44734](https://insights.sbomify.com/CVE-2026-44734/): Missing authorization in openproject (medium 6.5)
- [CVE-2026-44733](https://insights.sbomify.com/CVE-2026-44733/): Business logic in openproject (medium 5.9)
- [CVE-2026-44732](https://insights.sbomify.com/CVE-2026-44732/): Missing authorization in openproject (medium 4.3)
- [CVE-2026-44731](https://insights.sbomify.com/CVE-2026-44731/): Information disclosure in openproject (medium 4.3)
- [CVE-2026-44730](https://insights.sbomify.com/CVE-2026-44730/): OpenCTI: Privilege escalation via graphQL API is abusable by organization admins, due to incorrect ACL on userEdit relationAdd (high 7.2)
- [CVE-2026-4473](https://insights.sbomify.com/CVE-2026-4473/): itsourcecode Online Doctor Appointment System appointment_action.php sql injection (medium 5.1)
- [CVE-2026-44729](https://insights.sbomify.com/CVE-2026-44729/): Twenty: Stored Cross-Site Scripting via Unsanitized File Serving (Missing Content-Type/Content-Disposition Headers) (high 8.7)
- [CVE-2026-44728](https://insights.sbomify.com/CVE-2026-44728/): @babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input (high 8.2)
- [CVE-2026-44727](https://insights.sbomify.com/CVE-2026-44727/): Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP (critical 9.3)
- [CVE-2026-44726](https://insights.sbomify.com/CVE-2026-44726/): Deno: TLS retry copies stale upgrade hook, risking plaintext traffic (high 7.4)
- [CVE-2026-44725](https://insights.sbomify.com/CVE-2026-44725/): EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution (medium 6.6)
- [CVE-2026-44724](https://insights.sbomify.com/CVE-2026-44724/): Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name (high 7.8)
- [CVE-2026-44723](https://insights.sbomify.com/CVE-2026-44723/): Command injection in vowpal wabbit (medium 5.0)
- [CVE-2026-44722](https://insights.sbomify.com/CVE-2026-44722/): pyzipper: Encryption bypass for small files encrypted with pyzipper (medium 6.2)
- [CVE-2026-44721](https://insights.sbomify.com/CVE-2026-44721/): Open WebUI: Stored XSS via Model Description (high 7.3)
- [CVE-2026-44720](https://insights.sbomify.com/CVE-2026-44720/): OpenLearnX: Critical Authentication Bypass via JWT Signature Verification Disabled Leading to Account Takeover (medium 6.9)
- [CVE-2026-4472](https://insights.sbomify.com/CVE-2026-4472/): itsourcecode Online Frozen Foods Ordering System admin_edit_supplier.php sql injection (medium 5.3)
- [CVE-2026-44719](https://insights.sbomify.com/CVE-2026-44719/): Mathesar: Missing collaborator checks allowed access to database-scoped Mathesar metadata (medium 5.3)
- [CVE-2026-44718](https://insights.sbomify.com/CVE-2026-44718/): Mathesar: Missing collaborator checks allowed access to saved explorations in other databases (medium 5.3)
- [CVE-2026-44717](https://insights.sbomify.com/CVE-2026-44717/): MCP Calculate Server: Prompt Injection to RCE (critical 9.8)
- [CVE-2026-44716](https://insights.sbomify.com/CVE-2026-44716/): Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator (high 7.5)
- [CVE-2026-44715](https://insights.sbomify.com/CVE-2026-44715/): OpenMRS has Broken Access Control in HL7 Configuration (high 8.7)
- [CVE-2026-44714](https://insights.sbomify.com/CVE-2026-44714/): bitcoinj: ScriptExecution P2PKH/P2WPKH Verification Bypass (high 7.5)
- [CVE-2026-44713](https://insights.sbomify.com/CVE-2026-44713/): pam_usb: Command injection via $TMUX environment variable leads to RCE as root (high 8.8)
- [CVE-2026-44712](https://insights.sbomify.com/CVE-2026-44712/): pam_usb: Shell injection via device UUID and username in pamusb-conf and pamusb-agent (high 8.2)
- [CVE-2026-44711](https://insights.sbomify.com/CVE-2026-44711/): pam_usb: Symlink attacks on pad directory and pad files enable authentication bypass and root file corruption (high 7.9)
- [CVE-2026-44710](https://insights.sbomify.com/CVE-2026-44710/): pam_usb: NULL pointer dereference from UDisks device fields causes PAM crash and login denial-of-service (medium 4.6)
- [CVE-2026-4471](https://insights.sbomify.com/CVE-2026-4471/): itsourcecode Online Frozen Foods Ordering System admin_edit_employee.php sql injection (medium 5.1)
- [CVE-2026-44709](https://insights.sbomify.com/CVE-2026-44709/): pam_usb: PINENTRY_FALLBACK_APP environment variable allows arbitrary command execution (high 7.8)
- [CVE-2026-44708](https://insights.sbomify.com/CVE-2026-44708/): Mistune Math Plugin XSS Escape Bypass (medium 6.1)
- [CVE-2026-44707](https://insights.sbomify.com/CVE-2026-44707/): Chatwoot: Pre-Account Takeover via OAuth on Unconfirmed Accounts (medium 6.8)
- [CVE-2026-44706](https://insights.sbomify.com/CVE-2026-44706/): Chatwoot: SQL Injection in Conversation/Contact Filter API via Custom Attribute Values (high 8.5)
- [CVE-2026-44705](https://insights.sbomify.com/CVE-2026-44705/): tmp: Path Traversal via unsanitized prefix/postfix enables directory escape (high 7.7)
- [CVE-2026-44700](https://insights.sbomify.com/CVE-2026-44700/): Elixir WebRTC: Missing DTLS peer fingerprint validation in ex_webrtc client-role handshake (high 8.7)
- [CVE-2026-4470](https://insights.sbomify.com/CVE-2026-4470/): itsourcecode Online Frozen Foods Ordering System admin_edit_menu.php sql injection (medium 5.1)
- [CVE-2026-44699](https://insights.sbomify.com/CVE-2026-44699/): LibJWT: Algorithm confusion allows JWT forgery with RSA JWK as empty-key HMAC (critical 9.1)
- [CVE-2026-44698](https://insights.sbomify.com/CVE-2026-44698/): Home Assistant: Cross-origin iframe access token exfiltration via WebView JS bridge callback injection (high 8.3)
- [CVE-2026-44697](https://insights.sbomify.com/CVE-2026-44697/): Klever-Go MultiDataInterceptor: remote OOM via crafted compressed P2P payload (high 8.6)
- [CVE-2026-44696](https://insights.sbomify.com/CVE-2026-44696/): OpenProject: Stored CSS injection via Sanitize::Config::RELAXED[:css] enables phishing overlays and data exfiltration (medium 5.7)
- [CVE-2026-44695](https://insights.sbomify.com/CVE-2026-44695/): Outline: Slack OAuth state can link a victim Outline account to an attacker Slack identity (medium 5.8)
- [CVE-2026-44694](https://insights.sbomify.com/CVE-2026-44694/): n8n-MCP: Authenticated SSRF in n8n-mcp webhook and API client paths (high 7.2)
- [CVE-2026-44693](https://insights.sbomify.com/CVE-2026-44693/): Pi-hole FTL: Unauthenticated Session Hijacking via Race Condition on Global Session Buffer (high 8.8)
- [CVE-2026-44692](https://insights.sbomify.com/CVE-2026-44692/): Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint (high 7.7)
- [CVE-2026-44691](https://insights.sbomify.com/CVE-2026-44691/): [Eclipse Theia] Arbitrary Command Execution via Untrusted Workspace Task Definitions (high 8.4)
- [CVE-2026-44690](https://insights.sbomify.com/CVE-2026-44690/): Cross-zone wildcard cache poisoning via RRSIG.labels manipulation (high 7.5)
- [CVE-2026-4469](https://insights.sbomify.com/CVE-2026-4469/): itsourcecode Online Frozen Foods Ordering System admin_edit_menu_action.php sql injection (medium 5.1)
- [CVE-2026-44688](https://insights.sbomify.com/CVE-2026-44688/): [Eclipse Theia] Indirect Prompt Injection via Adversarial Workspace File and Directory Names in AI Chat (high 8.4)
- [CVE-2026-44687](https://insights.sbomify.com/CVE-2026-44687/): Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN (low 3.7)
- [CVE-2026-44682](https://insights.sbomify.com/CVE-2026-44682/): Privilege escalation in Acronis DeviceLock DLP (high 7.3)
- [CVE-2026-44681](https://insights.sbomify.com/CVE-2026-44681/): Authlib: Open Redirect in Authlib OIDC Implicit/Hybrid Authorization (medium 6.1)
- [CVE-2026-44680](https://insights.sbomify.com/CVE-2026-44680/): MikroORM: SQL injection via runtime-controlled identifiers and JSON-path keys (high 7.6)
- [CVE-2026-4468](https://insights.sbomify.com/CVE-2026-4468/): Comfast CF-AC100 mbox-config command injection (medium 5.1)
- [CVE-2026-44679](https://insights.sbomify.com/CVE-2026-44679/): Tuist: Forgot password flow lacks throttling for reset email delivery (medium 6.9)
- [CVE-2026-44678](https://insights.sbomify.com/CVE-2026-44678/): Tuist: IDOR in preview deletion API allows cross-tenant deletion of any preview by UUID (high 7.1)
- [CVE-2026-44673](https://insights.sbomify.com/CVE-2026-44673/): libyang: lyb_read_string() integer overflow → heap buffer overflow (high 7.5)
- [CVE-2026-44672](https://insights.sbomify.com/CVE-2026-44672/): mapfish-print: Remote Code Injection (RCE) in Dynamic table (critical 9.3)
- [CVE-2026-44671](https://insights.sbomify.com/CVE-2026-44671/): ZITADEL: LDAP Filter Injection in Login Flow (high 7.5)
- [CVE-2026-44670](https://insights.sbomify.com/CVE-2026-44670/): SiYuan: Stored XSS via Attribute View name to Electron renderer RCE in SiYuan (critical 9.4)
- [CVE-2026-4467](https://insights.sbomify.com/CVE-2026-4467/): Comfast CF-AC100 mbox-config command injection (medium 5.1)
- [CVE-2026-44669](https://insights.sbomify.com/CVE-2026-44669/): Faction: Stored XSS in Assessment Attachment Filename Preview Rendering (high 8.7)
- [CVE-2026-44668](https://insights.sbomify.com/CVE-2026-44668/): Faction: Unauthenticated Read, Modify, and Delete of Boilerplate Templates (critical 9.8)
- [CVE-2026-44667](https://insights.sbomify.com/CVE-2026-44667/): Faction: Stored XSS in Remediation Verification Attachment Filename Preview Rendering (high 8.7)
- [CVE-2026-44666](https://insights.sbomify.com/CVE-2026-44666/): HRConvert2: Missing Sanitization enables Unauthenticated Remote Command Execution (critical 9.3)
- [CVE-2026-44665](https://insights.sbomify.com/CVE-2026-44665/): fast-xml-builder: Attribute values with unwanted quotes can bypass malicious or unwanted attributes (medium 6.1)
- [CVE-2026-44664](https://insights.sbomify.com/CVE-2026-44664/): fast-xml-builder: Comment Value bypass regex (medium 6.1)
- [CVE-2026-44663](https://insights.sbomify.com/CVE-2026-44663/): OpenEXR: Integer overflow in the HTJ2K decoder leads to heap-buffer-overflow (medium 6.1)
- [CVE-2026-44662](https://insights.sbomify.com/CVE-2026-44662/): rust-openssl: Heap buffer overflow when encrypting with AES key-wrap-with-padding (medium 5.1)
- [CVE-2026-44661](https://insights.sbomify.com/CVE-2026-44661/): python-utcp: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol (medium 4.7)
- [CVE-2026-44660](https://insights.sbomify.com/CVE-2026-44660/): UltraJSON: Memory Leak in ujson.dump() on Write Failure (high 8.7)
- [CVE-2026-4466](https://insights.sbomify.com/CVE-2026-4466/): Comfast CF-AC100 mbox-config command injection (medium 5.1)
- [CVE-2026-44659](https://insights.sbomify.com/CVE-2026-44659/): Zen Browser Mac - Address Bar Spoofing via Long Subdomain (medium 4.7)
- [CVE-2026-44658](https://insights.sbomify.com/CVE-2026-44658/): Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restricted Before Trusted Tab Creation (low 2.4)
- [CVE-2026-44657](https://insights.sbomify.com/CVE-2026-44657/): MantisBT: Stored XSS in File Download (high 7.5)
- [CVE-2026-44656](https://insights.sbomify.com/CVE-2026-44656/): Vim: OS Command Injection via 'path' completion (medium 4.6)
- [CVE-2026-44655](https://insights.sbomify.com/CVE-2026-44655/): MantisBT: Stored XSS on Move Attachments Admin Page (high 8.6)
- [CVE-2026-44654](https://insights.sbomify.com/CVE-2026-44654/): LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents (medium 5.7)
- [CVE-2026-44653](https://insights.sbomify.com/CVE-2026-44653/): LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets (medium 6.5)
- [CVE-2026-44652](https://insights.sbomify.com/CVE-2026-44652/): SillyTavern: SSRF vulnerability in the CORS proxy middleware (medium 6.9)
- [CVE-2026-44651](https://insights.sbomify.com/CVE-2026-44651/): SillyTavern: Reflected XSS vulnerability in the CORS proxy middleware (medium 6.9)
- [CVE-2026-44650](https://insights.sbomify.com/CVE-2026-44650/): SillyTavern: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (critical 9.1)
- [CVE-2026-4465](https://insights.sbomify.com/CVE-2026-4465/): D-Link DIR-513 formSysCmd os command injection (medium 5.3)
- [CVE-2026-44649](https://insights.sbomify.com/CVE-2026-44649/): SillyTavern: Authentication Bypass via SSO Header Injection (critical 9.8)
- [CVE-2026-44648](https://insights.sbomify.com/CVE-2026-44648/): SillyTavern: Existing sessions are not invalidated after password change, allowing session reuse and account takeover (high 7.5)
- [CVE-2026-44647](https://insights.sbomify.com/CVE-2026-44647/): OneDev: Path Traversal (read capability via Git LFS pointer resolution) (high 7.1)
- [CVE-2026-44646](https://insights.sbomify.com/CVE-2026-44646/): LiquidJS: `{% render %}` tag silently bypasses per-render `ownPropertyOnly:true` via `Context.spawn()` (medium 5.3)
- [CVE-2026-44645](https://insights.sbomify.com/CVE-2026-44645/): LiquidJS has a renderLimit DoS guard bypass via empty `{% for %}` body (medium 6.5)
- [CVE-2026-44644](https://insights.sbomify.com/CVE-2026-44644/): LiquidJS's strip_html filter bypass via newline characters in HTML tags enables XSS (medium 6.1)
- [CVE-2026-44643](https://insights.sbomify.com/CVE-2026-44643/): Angular Expressions - Remote Code Execution using filters (critical 9.3)
- [CVE-2026-44642](https://insights.sbomify.com/CVE-2026-44642/): Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+) (high 8.1)
- [CVE-2026-44641](https://insights.sbomify.com/CVE-2026-44641/): Microsoft APM: plugin.json component paths escape plugin root and copy arbitrary host files during install (high 7.1)
- [CVE-2026-44640](https://insights.sbomify.com/CVE-2026-44640/): NanoMQ: QUIC Dialer Close Type Confusion (medium 4.5)
- [CVE-2026-4464](https://insights.sbomify.com/CVE-2026-4464/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-44639](https://insights.sbomify.com/CVE-2026-44639/): NanoMQ: O(N²) Denial of Service in MQTT v5 Property Parsing (low 3.7)
- [CVE-2026-44638](https://insights.sbomify.com/CVE-2026-44638/): libsixel: NULL pointer dereference (low 2.5)
- [CVE-2026-44637](https://insights.sbomify.com/CVE-2026-44637/): libsixel: integer overflow in parser (high 7.1)
- [CVE-2026-44636](https://insights.sbomify.com/CVE-2026-44636/): libsixel: integer overflow in encoder (high 7.4)
- [CVE-2026-44635](https://insights.sbomify.com/CVE-2026-44635/): Kysely: JSON-path traversal injection via unsanitized path-leg metacharacters in `JSONPathBuilder.key()` / `.at()` (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/629/