# Vulnerabilities published in 2026


- [CVE-2026-41354](https://insights.sbomify.com/CVE-2026-41354/): OpenClaw < 2026.4.2 - Insufficient Scope in Zalo Webhook Replay Dedupe Keys (medium 6.3)
- [CVE-2026-41353](https://insights.sbomify.com/CVE-2026-41353/): OpenClaw < 2026.3.22 - allowProfiles Bypass via Profile Mutation and Runtime Selection (high 7.6)
- [CVE-2026-41352](https://insights.sbomify.com/CVE-2026-41352/): OpenClaw < 2026.3.31 - Remote Code Execution via Node Scope Gate Bypass (high 7.7)
- [CVE-2026-41351](https://insights.sbomify.com/CVE-2026-41351/): OpenClaw < 2026.3.31 - Webhook Replay Detection Bypass via Base64 Signature Re-encoding (medium 6.3)
- [CVE-2026-41350](https://insights.sbomify.com/CVE-2026-41350/): OpenClaw < 2026.3.31 - Session Visibility Bypass via session_status in Unsandboxed Invocations (medium 5.3)
- [CVE-2026-4135](https://insights.sbomify.com/CVE-2026-4135/): Privilege escalation in Software Fix (medium 5.2)
- [CVE-2026-41349](https://insights.sbomify.com/CVE-2026-41349/): OpenClaw < 2026.3.28 - Agentic Consent Bypass via config.patch (high 8.7)
- [CVE-2026-41348](https://insights.sbomify.com/CVE-2026-41348/): OpenClaw < 2026.3.31 - Group DM Channel Allowlist Bypass via Discord Slash Commands (low 2.3)
- [CVE-2026-41347](https://insights.sbomify.com/CVE-2026-41347/): OpenClaw < 2026.3.31 - Cross-Site Request Forgery via Missing Browser-Origin Validation in HTTP Operator Endpoints (low 2.3)
- [CVE-2026-41346](https://insights.sbomify.com/CVE-2026-41346/): OpenClaw 2026.2.26 < 2026.3.31 - Denial of Service via Improper Pending Pairing Request Cap Enforcement (medium 6.3)
- [CVE-2026-41345](https://insights.sbomify.com/CVE-2026-41345/): OpenClaw < 2026.3.31 - Authorization Header Leak via Cross-Origin Redirect in Media Download (medium 6.0)
- [CVE-2026-41344](https://insights.sbomify.com/CVE-2026-41344/): OpenClaw < 2026.3.28 - Privilege Escalation via chat.send /verbose Parameter (medium 5.3)
- [CVE-2026-41343](https://insights.sbomify.com/CVE-2026-41343/): OpenClaw < 2026.3.31 - Denial of Service via LINE Webhook Handler Pre-Auth Concurrency (medium 6.9)
- [CVE-2026-41342](https://insights.sbomify.com/CVE-2026-41342/): OpenClaw < 2026.3.28 - Unauthenticated Discovery Endpoint Credential Exfiltration via Remote Onboarding (high 7.4)
- [CVE-2026-41341](https://insights.sbomify.com/CVE-2026-41341/): OpenClaw < 2026.3.31 - Component Interaction Misclassification in Discord Extension (low 2.3)
- [CVE-2026-41340](https://insights.sbomify.com/CVE-2026-41340/): OpenClaw < 2026.3.31 - Authentication Boundary Bypass via Telegram Legacy allowFrom Migration (medium 6.3)
- [CVE-2026-4134](https://insights.sbomify.com/CVE-2026-4134/): Privilege escalation in Software Fix (high 7.0)
- [CVE-2026-41339](https://insights.sbomify.com/CVE-2026-41339/): OpenClaw < 2026.4.2 - Information Disclosure via Gateway Connect Snapshot (medium 5.3)
- [CVE-2026-41338](https://insights.sbomify.com/CVE-2026-41338/): OpenClaw < 2026.3.31 - Time-of-Check-Time-of-Use (TOCTOU) Vulnerability in Sandbox File Operations (medium 4.3)
- [CVE-2026-41337](https://insights.sbomify.com/CVE-2026-41337/): OpenClaw < 2026.3.31 - Callback Origin Mutation in Plivo Voice-call Replay (medium 6.3)
- [CVE-2026-41336](https://insights.sbomify.com/CVE-2026-41336/): OpenClaw < 2026.3.31 - Arbitrary Hook Code Execution via OPENCLAW_BUNDLED_HOOKS_DIR Environment Variable Override (high 8.5)
- [CVE-2026-41335](https://insights.sbomify.com/CVE-2026-41335/): OpenClaw < 2026.3.31 - Information Disclosure via Control UI Bootstrap JSON (medium 6.9)
- [CVE-2026-41334](https://insights.sbomify.com/CVE-2026-41334/): OpenClaw < 2026.3.31 - Decompression Bomb Denial of Service via Image Pixel-Limit Guard Bypass (high 7.1)
- [CVE-2026-41333](https://insights.sbomify.com/CVE-2026-41333/): OpenClaw < 2026.3.31 - Authentication Rate Limiting Bypass via Fake DeviceToken (medium 6.3)
- [CVE-2026-41332](https://insights.sbomify.com/CVE-2026-41332/): OpenClaw < 2026.3.28 - Code Execution via Missing Environment Variable Blocklist (medium 5.8)
- [CVE-2026-41331](https://insights.sbomify.com/CVE-2026-41331/): OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription (medium 6.9)
- [CVE-2026-41330](https://insights.sbomify.com/CVE-2026-41330/): OpenClaw < 2026.3.31 - Environment Variable Override via Host Exec Policy (low 2.0)
- [CVE-2026-4133](https://insights.sbomify.com/CVE-2026-4133/): TextP2P Texting Widget <= 1.7 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-41329](https://insights.sbomify.com/CVE-2026-41329/): OpenClaw < 2026.3.31 - Sandbox Bypass via Heartbeat Context Inheritance and senderIsOwner Escalation (critical 9.0)
- [CVE-2026-41328](https://insights.sbomify.com/CVE-2026-41328/): Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in NQuad Lang Field (critical 9.1)
- [CVE-2026-41327](https://insights.sbomify.com/CVE-2026-41327/): Dgraph: Pre-Auth Full Database Exfiltration via DQL Injection in Upsert Condition Field (critical 9.1)
- [CVE-2026-41326](https://insights.sbomify.com/CVE-2026-41326/): Kata Containers: CopyFile Policy Subversion via Symlinks (high 8.2)
- [CVE-2026-41325](https://insights.sbomify.com/CVE-2026-41325/): Kirby is vulnerable to authorization bypass during page, file and user creation via blueprint injection (high 7.1)
- [CVE-2026-41324](https://insights.sbomify.com/CVE-2026-41324/): basic-ftp vulnerable to denial of service via unbounded memory consumption in Client.list() (high 7.5)
- [CVE-2026-41323](https://insights.sbomify.com/CVE-2026-41323/): Kyverno: ServiceAccount token leaked to external servers via apiCall service URL (high 8.1)
- [CVE-2026-41322](https://insights.sbomify.com/CVE-2026-41322/): @astrojs/node: Cache Poisoning due to incorrect error handling when if-match header is malformed (medium 5.3)
- [CVE-2026-41321](https://insights.sbomify.com/CVE-2026-41321/): @astrojs/cloudflare: SSRF via redirect following in Cloudflare image-binding-transform endpoint (low 2.2)
- [CVE-2026-41320](https://insights.sbomify.com/CVE-2026-41320/): Frappe HR has possibility of SQL Injection due to improper field sanitization (medium 6.5)
- [CVE-2026-4132](https://insights.sbomify.com/CVE-2026-4132/): Code injection in HTTP Headers (high 7.2)
- [CVE-2026-41319](https://insights.sbomify.com/CVE-2026-41319/): MailKit has STARTTLS Response Injection via unflushed stream buffer that enables SASL mechanism downgrade (medium 6.5)
- [CVE-2026-41318](https://insights.sbomify.com/CVE-2026-41318/): Cross-site scripting in anything-llm (medium 5.4)
- [CVE-2026-41317](https://insights.sbomify.com/CVE-2026-41317/): Frappe Press has an unsafe HTTP method / CSRF-adjacent issue on API secret generation (medium 6.6)
- [CVE-2026-41316](https://insights.sbomify.com/CVE-2026-41316/): ERB has an @_init deserialization guard bypass via def_module / def_method / def_class (high 8.1)
- [CVE-2026-41315](https://insights.sbomify.com/CVE-2026-41315/): Missing authorization in mdserver-web (critical 9.3)
- [CVE-2026-41314](https://insights.sbomify.com/CVE-2026-41314/): pypdf: Manipulated FlateDecode image dimensions can exhaust RAM (medium 4.8)
- [CVE-2026-41313](https://insights.sbomify.com/CVE-2026-41313/): pypdf: Possible long runtimes for wrong size values in incremental mode (medium 4.8)
- [CVE-2026-41312](https://insights.sbomify.com/CVE-2026-41312/): pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM (medium 4.8)
- [CVE-2026-41311](https://insights.sbomify.com/CVE-2026-41311/): LiquidJS is vulnerable to Denial of Service via circular block reference in layout (high 7.5)
- [CVE-2026-41310](https://insights.sbomify.com/CVE-2026-41310/): OpenTelemetry .NET Zipkin exporter has unbounded remote endpoint cache leading to memory growth (medium 5.3)
- [CVE-2026-4131](https://insights.sbomify.com/CVE-2026-4131/): Cross-site request forgery in WP Responsive Popup + Optin (medium 6.1)
- [CVE-2026-41309](https://insights.sbomify.com/CVE-2026-41309/): Open Source Social Network (OSSN) Vulnerable to Resource Exhaustion via Malicious Image Processing (high 8.2)
- [CVE-2026-41308](https://insights.sbomify.com/CVE-2026-41308/): Password Pusher: JSON API `/p.json` file upload alias bypasses file-push authentication (medium 6.5)
- [CVE-2026-41305](https://insights.sbomify.com/CVE-2026-41305/): PostCSS has XSS via Unescaped </style> in its CSS Stringify Output (medium 6.1)
- [CVE-2026-41304](https://insights.sbomify.com/CVE-2026-41304/): WWBN AVideo vulnerable to RCE caused by clonesite plugin (high 8.9)
- [CVE-2026-41303](https://insights.sbomify.com/CVE-2026-41303/): OpenClaw < 2026.3.28 - Authorization Bypass in Discord Text Approval Commands (high 8.7)
- [CVE-2026-41302](https://insights.sbomify.com/CVE-2026-41302/): OpenClaw < 2026.3.31 - Server-Side Request Forgery via Unguarded fetch() in Marketplace Plugin Download (medium 4.8)
- [CVE-2026-41301](https://insights.sbomify.com/CVE-2026-41301/): OpenClaw 2026.3.22 < 2026.3.31 - Forged Nostr DM Pairing State Creation via Signature Verification Bypass (medium 6.9)
- [CVE-2026-41300](https://insights.sbomify.com/CVE-2026-41300/): OpenClaw < 2026.3.31 - Preservation of Attacker-Discovered Endpoints in Remote Onboarding (medium 6.9)
- [CVE-2026-4130](https://insights.sbomify.com/CVE-2026-4130/): Storage of Sensitive Information in Cleartext in NI SystemLink (high 8.4)
- [CVE-2026-41299](https://insights.sbomify.com/CVE-2026-41299/): OpenClaw < 2026.3.28 - Client Identity Spoofing in chat.send Gateway Provenance Guard (high 7.1)
- [CVE-2026-41298](https://insights.sbomify.com/CVE-2026-41298/): OpenClaw < 2026.4.2 - Authorization Bypass in Session Termination Endpoint (medium 5.3)
- [CVE-2026-41297](https://insights.sbomify.com/CVE-2026-41297/): OpenClaw < 2026.3.31 - Server-Side Request Forgery via Marketplace Plugin Download Redirect (medium 4.8)
- [CVE-2026-41296](https://insights.sbomify.com/CVE-2026-41296/): OpenClaw < 2026.3.31 - Sandbox Escape via TOCTOU Race in Remote FS Bridge readFile (high 8.8)
- [CVE-2026-41295](https://insights.sbomify.com/CVE-2026-41295/): OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup (high 8.5)
- [CVE-2026-41294](https://insights.sbomify.com/CVE-2026-41294/): OpenClaw < 2026.3.28 - Environment Variable Injection via CWD .env File (high 8.5)
- [CVE-2026-41293](https://insights.sbomify.com/CVE-2026-41293/): Apache Tomcat: HTTP/2 request headers not validated (critical 9.8)
- [CVE-2026-41292](https://insights.sbomify.com/CVE-2026-41292/): Long list of incoming EDNS options degrades performance (medium 6.6)
- [CVE-2026-4129](https://insights.sbomify.com/CVE-2026-4129/): Improper Access Controls in NI SystemLink (high 8.6)
- [CVE-2026-41288](https://insights.sbomify.com/CVE-2026-41288/): WatchGuard Agent on Windows Privilege Escalation Vulnerability (high 7.3)
- [CVE-2026-41287](https://insights.sbomify.com/CVE-2026-41287/): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant A (high 7.1)
- [CVE-2026-41286](https://insights.sbomify.com/CVE-2026-41286/): Stack-based Buffer Overflow in WatchGuard Agent Discovery Service on Windows Causes Denial of Service - Variant B (high 7.1)
- [CVE-2026-41285](https://insights.sbomify.com/CVE-2026-41285/): Denial of service in OpenBSD (medium 4.3)
- [CVE-2026-41284](https://insights.sbomify.com/CVE-2026-41284/): Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling (high 7.5)
- [CVE-2026-41283](https://insights.sbomify.com/CVE-2026-41283/): OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed (critical 9.9)
- [CVE-2026-41282](https://insights.sbomify.com/CVE-2026-41282/): Code injection in Nuclei (medium 4.0)
- [CVE-2026-41281](https://insights.sbomify.com/CVE-2026-41281/): Information disclosure in あんしんフィルター for au (medium 6.3)
- [CVE-2026-41280](https://insights.sbomify.com/CVE-2026-41280/): Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects (medium 4.9)
- [CVE-2026-4128](https://insights.sbomify.com/CVE-2026-4128/): Missing authorization in TP Restore Categories And Taxonomies (medium 4.3)
- [CVE-2026-41279](https://insights.sbomify.com/CVE-2026-41279/): Flowise: Unauthenticated TTS endpoint accepts arbitrary credential IDs — enables API credit abuse via stored credentials (high 8.2)
- [CVE-2026-41278](https://insights.sbomify.com/CVE-2026-41278/): Flowise: Public chatflow endpoints return unsanitized flowData including plaintext API keys, passwords, and credential IDs (high 8.7)
- [CVE-2026-41277](https://insights.sbomify.com/CVE-2026-41277/): Flowise: Mass Assignment in DocumentStore Create Endpoint Leads to Cross-Workspace Object Takeover (IDOR) (high 7.6)
- [CVE-2026-41276](https://insights.sbomify.com/CVE-2026-41276/): Flowise: AccountService resetPassword Authentication Bypass Vulnerability (high 7.7)
- [CVE-2026-41275](https://insights.sbomify.com/CVE-2026-41275/): Flowise: Password Reset Link Sent Over Unsecured HTTP (high 7.5)
- [CVE-2026-41274](https://insights.sbomify.com/CVE-2026-41274/): Flowise: Cypher Injection in GraphCypherQAChain (critical 9.3)
- [CVE-2026-41273](https://insights.sbomify.com/CVE-2026-41273/): Flowise: Unauthenticated OAuth 2.0 Access Token Disclosure via Public Chatflow (high 7.7)
- [CVE-2026-41272](https://insights.sbomify.com/CVE-2026-41272/): Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure) (high 7.1)
- [CVE-2026-41271](https://insights.sbomify.com/CVE-2026-41271/): Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains (high 7.1)
- [CVE-2026-41270](https://insights.sbomify.com/CVE-2026-41270/): Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox (high 7.1)
- [CVE-2026-4127](https://insights.sbomify.com/CVE-2026-4127/): Missing authorization in Speedup Optimization (medium 4.3)
- [CVE-2026-41269](https://insights.sbomify.com/CVE-2026-41269/): Flowise: File Upload Validation Bypass in createAttachment (high 7.1)
- [CVE-2026-41268](https://insights.sbomify.com/CVE-2026-41268/): Flowise: Flowise Parameter Override Bypass Remote Command Execution (high 7.7)
- [CVE-2026-41267](https://insights.sbomify.com/CVE-2026-41267/): Flowise: Improper Mass Assignment in Account Registration Enables Unauthorized Organization Association (high 8.1)
- [CVE-2026-41266](https://insights.sbomify.com/CVE-2026-41266/): Flowise: Sensitive Data Leak in public-chatbotConfig (high 7.7)
- [CVE-2026-41265](https://insights.sbomify.com/CVE-2026-41265/): Flowise: Airtable_Agent Code Injection Remote Code Execution Vulnerability (critical 9.2)
- [CVE-2026-41264](https://insights.sbomify.com/CVE-2026-41264/): Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability (critical 9.2)
- [CVE-2026-41263](https://insights.sbomify.com/CVE-2026-41263/): Traefik: BasicAuth middleware: timing side-channel vulnerability (medium 6.3)
- [CVE-2026-41262](https://insights.sbomify.com/CVE-2026-41262/): Fleet: Cross-Team Policy Data Exposure via Global Policy Read Endpoint (medium 4.3)
- [CVE-2026-4126](https://insights.sbomify.com/CVE-2026-4126/): Table Manager <= 1.0.0 - Authenticated (Contributor+) Sensitive Information Exposure via 'table' Shortcode Attribute (medium 4.3)
- [CVE-2026-41259](https://insights.sbomify.com/CVE-2026-41259/): Mastodon: Insufficient verification of email addresses (high 8.2)
- [CVE-2026-41258](https://insights.sbomify.com/CVE-2026-41258/): OpenMRS: Stored Velocity SSTI to RCE via ConceptReferenceRange (critical 9.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/660/