# Vulnerabilities published in 2026


- [CVE-2026-43845](https://insights.sbomify.com/CVE-2026-43845/): Auth bypass in ADAM-3600 (critical 9.2)
- [CVE-2026-43844](https://insights.sbomify.com/CVE-2026-43844/): Auth bypass in ADAM-3600 (critical 9.3)
- [CVE-2026-43843](https://insights.sbomify.com/CVE-2026-43843/): Integer overflow in ADAM-3600 (medium 6.9)
- [CVE-2026-43842](https://insights.sbomify.com/CVE-2026-43842/): Null dereference in ADAM-3600 (medium 6.9)
- [CVE-2026-43841](https://insights.sbomify.com/CVE-2026-43841/): Null dereference in ADAM-3600 (medium 6.9)
- [CVE-2026-43840](https://insights.sbomify.com/CVE-2026-43840/): Null dereference in ADAM-3600 (medium 6.9)
- [CVE-2026-43839](https://insights.sbomify.com/CVE-2026-43839/): Null dereference in ADAM-3600 (high 8.7)
- [CVE-2026-43838](https://insights.sbomify.com/CVE-2026-43838/): Memory corruption in ADAM-3600 (critical 9.2)
- [CVE-2026-43837](https://insights.sbomify.com/CVE-2026-43837/): Memory corruption in ADAM-3600 (high 7.5)
- [CVE-2026-43836](https://insights.sbomify.com/CVE-2026-43836/): Command injection in ADAM-3600 (critical 9.3)
- [CVE-2026-43835](https://insights.sbomify.com/CVE-2026-43835/): Security feature bypass in ADAM-3600 (high 8.6)
- [CVE-2026-43834](https://insights.sbomify.com/CVE-2026-43834/): Memory corruption in ADAM-3600 (high 7.5)
- [CVE-2026-43833](https://insights.sbomify.com/CVE-2026-43833/): Memory corruption in ADAM-3600 (high 7.5)
- [CVE-2026-43832](https://insights.sbomify.com/CVE-2026-43832/): Memory corruption in ADAM-3600 (critical 9.2)
- [CVE-2026-43831](https://insights.sbomify.com/CVE-2026-43831/): Memory corruption in ADAM-3600 (critical 9.2)
- [CVE-2026-43830](https://insights.sbomify.com/CVE-2026-43830/): Command injection in ADAM-3600 (high 8.6)
- [CVE-2026-43829](https://insights.sbomify.com/CVE-2026-43829/): Memory corruption in ADAM-3600 (critical 9.2)
- [CVE-2026-43828](https://insights.sbomify.com/CVE-2026-43828/): Apache Shiro: Shiro's native session and rememberMe cookies do not have secure flag set by default (medium 5.9)
- [CVE-2026-43827](https://insights.sbomify.com/CVE-2026-43827/): Apache Shiro: Session fixation: new session is not created after login by default (medium 5.9)
- [CVE-2026-43826](https://insights.sbomify.com/CVE-2026-43826/): Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL (medium 6.5)
- [CVE-2026-43825](https://insights.sbomify.com/CVE-2026-43825/): Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel (high 7.3)
- [CVE-2026-43824](https://insights.sbomify.com/CVE-2026-43824/): Information disclosure in Argo CD (high 7.7)
- [CVE-2026-43823](https://insights.sbomify.com/CVE-2026-43823/): Memory corruption in swift-crypto (high 7.5)
- [CVE-2026-43822](https://insights.sbomify.com/CVE-2026-43822/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43821](https://insights.sbomify.com/CVE-2026-43821/): Security feature bypass in Safari (medium 6.5)
- [CVE-2026-43820](https://insights.sbomify.com/CVE-2026-43820/): Memory corruption in swift-nio-ssl (high 7.7)
- [CVE-2026-43819](https://insights.sbomify.com/CVE-2026-43819/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-43818](https://insights.sbomify.com/CVE-2026-43818/): Integer overflow in iOS and iPadOS (high 8.8)
- [CVE-2026-43817](https://insights.sbomify.com/CVE-2026-43817/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-43816](https://insights.sbomify.com/CVE-2026-43816/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-43815](https://insights.sbomify.com/CVE-2026-43815/): Memory corruption in macOS (high 8.8)
- [CVE-2026-43814](https://insights.sbomify.com/CVE-2026-43814/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43813](https://insights.sbomify.com/CVE-2026-43813/): Security feature bypass in iOS and iPadOS (high 7.1)
- [CVE-2026-43812](https://insights.sbomify.com/CVE-2026-43812/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43811](https://insights.sbomify.com/CVE-2026-43811/): Race condition in iOS and iPadOS (medium 4.7)
- [CVE-2026-43810](https://insights.sbomify.com/CVE-2026-43810/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43809](https://insights.sbomify.com/CVE-2026-43809/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-43808](https://insights.sbomify.com/CVE-2026-43808/): Use after free in iOS and iPadOS (medium 5.5)
- [CVE-2026-43807](https://insights.sbomify.com/CVE-2026-43807/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-43806](https://insights.sbomify.com/CVE-2026-43806/): Denial of service in macOS (medium 5.5)
- [CVE-2026-43805](https://insights.sbomify.com/CVE-2026-43805/): Race condition in iOS and iPadOS (critical 9.8)
- [CVE-2026-43804](https://insights.sbomify.com/CVE-2026-43804/): Denial of service in Safari (medium 6.5)
- [CVE-2026-43803](https://insights.sbomify.com/CVE-2026-43803/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-43802](https://insights.sbomify.com/CVE-2026-43802/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-43801](https://insights.sbomify.com/CVE-2026-43801/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43800](https://insights.sbomify.com/CVE-2026-43800/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43799](https://insights.sbomify.com/CVE-2026-43799/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43798](https://insights.sbomify.com/CVE-2026-43798/): Memory corruption in swift-nio-ssh (critical 9.8)
- [CVE-2026-43797](https://insights.sbomify.com/CVE-2026-43797/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43796](https://insights.sbomify.com/CVE-2026-43796/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43795](https://insights.sbomify.com/CVE-2026-43795/): Memory corruption in Safari (medium 4.3)
- [CVE-2026-43794](https://insights.sbomify.com/CVE-2026-43794/): Memory corruption in Safari (high 8.8)
- [CVE-2026-43793](https://insights.sbomify.com/CVE-2026-43793/): Denial of service in macOS (critical 9.8)
- [CVE-2026-43792](https://insights.sbomify.com/CVE-2026-43792/): Missing authorization in Safari (medium 6.5)
- [CVE-2026-43791](https://insights.sbomify.com/CVE-2026-43791/): Path traversal in macOS (medium 6.5)
- [CVE-2026-43790](https://insights.sbomify.com/CVE-2026-43790/): Memory corruption in macOS (critical 9.1)
- [CVE-2026-4379](https://insights.sbomify.com/CVE-2026-4379/): LightPress Lightbox <= 2.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'group' Shortcode Attribute (medium 6.4)
- [CVE-2026-43789](https://insights.sbomify.com/CVE-2026-43789/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43788](https://insights.sbomify.com/CVE-2026-43788/): Integer overflow in macOS (medium 6.6)
- [CVE-2026-43787](https://insights.sbomify.com/CVE-2026-43787/): Information disclosure in macOS (medium 5.9)
- [CVE-2026-43786](https://insights.sbomify.com/CVE-2026-43786/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-43785](https://insights.sbomify.com/CVE-2026-43785/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-43783](https://insights.sbomify.com/CVE-2026-43783/): Race condition in macOS (high 7.8)
- [CVE-2026-43782](https://insights.sbomify.com/CVE-2026-43782/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-43781](https://insights.sbomify.com/CVE-2026-43781/): Race condition in macOS (medium 4.7)
- [CVE-2026-43780](https://insights.sbomify.com/CVE-2026-43780/): Integer overflow in iOS and iPadOS (high 7.8)
- [CVE-2026-4378](https://insights.sbomify.com/CVE-2026-4378/): Stored XSS in Akıllı Ticaret's E-Commerce Pack (medium 5.4)
- [CVE-2026-43779](https://insights.sbomify.com/CVE-2026-43779/): Business logic in macOS (critical 9.8)
- [CVE-2026-43778](https://insights.sbomify.com/CVE-2026-43778/): Use after free in iOS and iPadOS (critical 9.8)
- [CVE-2026-43777](https://insights.sbomify.com/CVE-2026-43777/): Denial of service in macOS (high 7.5)
- [CVE-2026-43776](https://insights.sbomify.com/CVE-2026-43776/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-43775](https://insights.sbomify.com/CVE-2026-43775/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43774](https://insights.sbomify.com/CVE-2026-43774/): Memory corruption in macOS (medium 5.5)
- [CVE-2026-43773](https://insights.sbomify.com/CVE-2026-43773/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-43772](https://insights.sbomify.com/CVE-2026-43772/): Path traversal in macOS (high 8.2)
- [CVE-2026-43771](https://insights.sbomify.com/CVE-2026-43771/): Memory corruption in macOS (high 7.1)
- [CVE-2026-43770](https://insights.sbomify.com/CVE-2026-43770/): Race condition in macOS (medium 4.7)
- [CVE-2026-4377](https://insights.sbomify.com/CVE-2026-4377/): Use of Weak Credentials in D-Link DWR-X1820 router (medium 6.0)
- [CVE-2026-43769](https://insights.sbomify.com/CVE-2026-43769/): Integer overflow in iOS and iPadOS (critical 9.8)
- [CVE-2026-43768](https://insights.sbomify.com/CVE-2026-43768/): Denial of service in macOS (medium 5.5)
- [CVE-2026-43767](https://insights.sbomify.com/CVE-2026-43767/): Memory corruption in macOS (medium 5.0)
- [CVE-2026-43766](https://insights.sbomify.com/CVE-2026-43766/): Auth bypass in macOS (medium 4.6)
- [CVE-2026-43765](https://insights.sbomify.com/CVE-2026-43765/): Path traversal in macOS (medium 5.5)
- [CVE-2026-43764](https://insights.sbomify.com/CVE-2026-43764/): Integer overflow in macOS (critical 9.8)
- [CVE-2026-43763](https://insights.sbomify.com/CVE-2026-43763/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-43762](https://insights.sbomify.com/CVE-2026-43762/): Missing authorization in iOS and iPadOS (medium 5.5)
- [CVE-2026-43761](https://insights.sbomify.com/CVE-2026-43761/): Memory corruption in macOS (medium 6.5)
- [CVE-2026-43760](https://insights.sbomify.com/CVE-2026-43760/): Missing authorization in macOS (high 8.6)
- [CVE-2026-43759](https://insights.sbomify.com/CVE-2026-43759/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43758](https://insights.sbomify.com/CVE-2026-43758/): Missing authorization in macOS (medium 5.5)
- [CVE-2026-43757](https://insights.sbomify.com/CVE-2026-43757/): Memory corruption in iOS and iPadOS (critical 9.8)
- [CVE-2026-43756](https://insights.sbomify.com/CVE-2026-43756/): Business logic in macOS (medium 5.5)
- [CVE-2026-43755](https://insights.sbomify.com/CVE-2026-43755/): Race condition in macOS (high 7.0)
- [CVE-2026-43754](https://insights.sbomify.com/CVE-2026-43754/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-43753](https://insights.sbomify.com/CVE-2026-43753/): Memory corruption in iOS and iPadOS (medium 4.6)
- [CVE-2026-43752](https://insights.sbomify.com/CVE-2026-43752/): File upload in FileMaker Server (medium 4.9)
- [CVE-2026-43750](https://insights.sbomify.com/CVE-2026-43750/): Memory corruption in macOS (critical 9.8)
- [CVE-2026-4375](https://insights.sbomify.com/CVE-2026-4375/): DoLeads Integrator <= 1.2.2 & wp2epub <= 0.65 - Unauthenticated RCE (critical 9.0)
- [CVE-2026-43749](https://insights.sbomify.com/CVE-2026-43749/): Path traversal in macOS (high 7.8)
- [CVE-2026-43748](https://insights.sbomify.com/CVE-2026-43748/): Memory corruption in iOS and iPadOS (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/637/