# Vulnerabilities published in 2026


- [CVE-2026-40165](https://insights.sbomify.com/CVE-2026-40165/): authentik: SAML NameID XML Comment Injection Enables Authentication Bypass via Identifier Truncation (high 8.7)
- [CVE-2026-40164](https://insights.sbomify.com/CVE-2026-40164/): jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed (high 7.5)
- [CVE-2026-40163](https://insights.sbomify.com/CVE-2026-40163/): Saltcorn has an Unauthenticated Path Traversal in sync endpoints allows arbitrary file write and directory read (high 8.2)
- [CVE-2026-40162](https://insights.sbomify.com/CVE-2026-40162/): Bugsink affected by authenticated arbitrary file write in artifactbundle/assemble (high 7.1)
- [CVE-2026-40161](https://insights.sbomify.com/CVE-2026-40161/): Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL (high 7.7)
- [CVE-2026-40160](https://insights.sbomify.com/CVE-2026-40160/): PraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback (high 7.1)
- [CVE-2026-4016](https://insights.sbomify.com/CVE-2026-4016/): GPAC SVG Parser load_svg.c svgin_process out-of-bounds write (medium 4.8)
- [CVE-2026-40159](https://insights.sbomify.com/CVE-2026-40159/): PraisonAI Exposes Sensitive Environment Variable via Untrusted MCP Subprocess Execution (medium 5.5)
- [CVE-2026-40158](https://insights.sbomify.com/CVE-2026-40158/): PraisonAI has Improper Control of Generation of Code ('Code Injection') and Protection Mechanism Failure in praisonai (high 8.6)
- [CVE-2026-40157](https://insights.sbomify.com/CVE-2026-40157/): PraisonAI affected by arbitrary file write via path traversal in `praisonai recipe unpack` (critical 9.4)
- [CVE-2026-40156](https://insights.sbomify.com/CVE-2026-40156/): PraisonAI Affected by Implicit Execution of Arbitrary Code via Automatic `tools.py` Loading (high 7.8)
- [CVE-2026-40155](https://insights.sbomify.com/CVE-2026-40155/): Auth0 Next.js SDK has Improper Proxy Cache Lookup (medium 5.4)
- [CVE-2026-40154](https://insights.sbomify.com/CVE-2026-40154/): PraisonAI Affected by Untrusted Remote Template Code Execution (critical 9.3)
- [CVE-2026-40153](https://insights.sbomify.com/CVE-2026-40153/): PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool (high 7.4)
- [CVE-2026-40152](https://insights.sbomify.com/CVE-2026-40152/): PraisonAIAgents has a Path Traversal via Unvalidated Glob Pattern in list_files Bypasses Workspace Boundary (medium 5.3)
- [CVE-2026-40151](https://insights.sbomify.com/CVE-2026-40151/): PraisonAI Affected by Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS (medium 5.3)
- [CVE-2026-40150](https://insights.sbomify.com/CVE-2026-40150/): PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool (high 7.7)
- [CVE-2026-4015](https://insights.sbomify.com/CVE-2026-4015/): GPAC TeXML File load_text.c txtin_process_texml stack-based overflow (medium 4.8)
- [CVE-2026-40149](https://insights.sbomify.com/CVE-2026-40149/): PraisonAI has an Unauthenticated Allow-List Manipulation Bypasses Agent Tool Approval Safety Controls (high 7.9)
- [CVE-2026-40148](https://insights.sbomify.com/CVE-2026-40148/): PraisonAI Affected by Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits (medium 6.5)
- [CVE-2026-40145](https://insights.sbomify.com/CVE-2026-40145/): Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility (high 7.1)
- [CVE-2026-40144](https://insights.sbomify.com/CVE-2026-40144/): Memory corruption vulnerability in Endpoint Privilege Management (Windows deployments) (high 7.3)
- [CVE-2026-40141](https://insights.sbomify.com/CVE-2026-40141/): High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access (high 8.5)
- [CVE-2026-40140](https://insights.sbomify.com/CVE-2026-40140/): High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (high 8.7)
- [CVE-2026-4014](https://insights.sbomify.com/CVE-2026-4014/): itsourcecode Cafe Reservation System Registration signup.php sql injection (medium 6.9)
- [CVE-2026-40139](https://insights.sbomify.com/CVE-2026-40139/): Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (critical 9.2)
- [CVE-2026-40138](https://insights.sbomify.com/CVE-2026-40138/): Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access (critical 9.2)
- [CVE-2026-40137](https://insights.sbomify.com/CVE-2026-40137/): Cross-Site Scripting (XSS) vulnerability in Business Server Pages Application (TAF_APPLAUNCHER) (medium 6.1)
- [CVE-2026-40136](https://insights.sbomify.com/CVE-2026-40136/): Denial of service (DoS) in SAP Financial Consolidation (medium 4.3)
- [CVE-2026-40135](https://insights.sbomify.com/CVE-2026-40135/): OS Command Injection vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform (medium 6.5)
- [CVE-2026-40134](https://insights.sbomify.com/CVE-2026-40134/): Missing Authorization Check in SAP Incentive and Commission Management (medium 4.3)
- [CVE-2026-40133](https://insights.sbomify.com/CVE-2026-40133/): Missing Authorization check in SAP S/4HANA Condition Maintenance (medium 6.3)
- [CVE-2026-40132](https://insights.sbomify.com/CVE-2026-40132/): Missing Authorization Check in SAP Strategic Enterprise Management (BSP application Balanced Scorecard Wizard) (medium 5.4)
- [CVE-2026-40131](https://insights.sbomify.com/CVE-2026-40131/): SQL Injection vulnerability in SAP HANA Deployment Infrastructure (HDI) deploy library (low 3.4)
- [CVE-2026-40130](https://insights.sbomify.com/CVE-2026-40130/): Memory Corruption vulnerability in SAPSPrint Service (medium 5.3)
- [CVE-2026-4013](https://insights.sbomify.com/CVE-2026-4013/): SourceCodester Web-based Pharmacy Product Management System add_admin.php improper authorization (medium 5.3)
- [CVE-2026-40129](https://insights.sbomify.com/CVE-2026-40129/): Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform (medium 4.3)
- [CVE-2026-40128](https://insights.sbomify.com/CVE-2026-40128/): Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container) (critical 9.0)
- [CVE-2026-40127](https://insights.sbomify.com/CVE-2026-40127/): Authorization Bypass Through User-Controlled Key in OutSystems Lifetime (medium 5.3)
- [CVE-2026-40126](https://insights.sbomify.com/CVE-2026-40126/): DOM-based Cross-Site Scripting in OutSystems Service Center (medium 4.8)
- [CVE-2026-4012](https://insights.sbomify.com/CVE-2026-4012/): rxi fe fe.c read_ out-of-bounds (medium 4.8)
- [CVE-2026-40118](https://insights.sbomify.com/CVE-2026-40118/): Information disclosure in UDP Console (medium 5.1)
- [CVE-2026-40117](https://insights.sbomify.com/CVE-2026-40117/): PraisonAIAgents Affected by Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate (medium 6.2)
- [CVE-2026-40116](https://insights.sbomify.com/CVE-2026-40116/): PraisonAI's Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits (high 7.5)
- [CVE-2026-40115](https://insights.sbomify.com/CVE-2026-40115/): PraisonAI has an Unrestricted Upload Size in WSGI Recipe Registry Server Enables Memory Exhaustion DoS (medium 6.2)
- [CVE-2026-40114](https://insights.sbomify.com/CVE-2026-40114/): PraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API (high 7.2)
- [CVE-2026-40113](https://insights.sbomify.com/CVE-2026-40113/): PraisonAI has an Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars (high 8.4)
- [CVE-2026-40112](https://insights.sbomify.com/CVE-2026-40112/): PraisonAI has Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency) (medium 5.4)
- [CVE-2026-40111](https://insights.sbomify.com/CVE-2026-40111/): PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py) (critical 9.3)
- [CVE-2026-40110](https://insights.sbomify.com/CVE-2026-40110/): jupyter-server CORS origin validation bypass via unanchored regex in allow_origin_pat (high 7.6)
- [CVE-2026-4011](https://insights.sbomify.com/CVE-2026-4011/): Power Charts <= 0.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'id' Shortcode Attribute (medium 6.4)
- [CVE-2026-40109](https://insights.sbomify.com/CVE-2026-40109/): Flux notification-controller GCR Receiver missing email validation allows unauthorized reconciliation triggering (low 3.1)
- [CVE-2026-40108](https://insights.sbomify.com/CVE-2026-40108/): GLPI Vulnerable to Stored XSS in ITIL Costs (high 7.1)
- [CVE-2026-40107](https://insights.sbomify.com/CVE-2026-40107/): SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering (high 8.7)
- [CVE-2026-40106](https://insights.sbomify.com/CVE-2026-40106/): Wazuh: Heap-based Buffer Overflow in syscheck Registry Wildcard Expansion (LPE / DoS) (medium 4.7)
- [CVE-2026-40105](https://insights.sbomify.com/CVE-2026-40105/): XWiki has Reflected Cross-Site Scripting (XSS) in its page history compare functionality (medium 6.5)
- [CVE-2026-40104](https://insights.sbomify.com/CVE-2026-40104/): XWiki's REST APIs can list all pages/spaces, leading to unavailability (medium 6.9)
- [CVE-2026-40103](https://insights.sbomify.com/CVE-2026-40103/): Vikunja's Scoped API tokens with projects.background permission can delete project backgrounds (medium 4.3)
- [CVE-2026-40102](https://insights.sbomify.com/CVE-2026-40102/): Plane: ORM Field Reference Injection via `segment` Parameter in Saved Analytics (medium 6.5)
- [CVE-2026-40100](https://insights.sbomify.com/CVE-2026-40100/): FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default (medium 5.3)
- [CVE-2026-4010](https://insights.sbomify.com/CVE-2026-4010/): ThakeeNathees pocketlang pkByteBufferAddString memory corruption (medium 4.8)
- [CVE-2026-40099](https://insights.sbomify.com/CVE-2026-40099/): Kirby's page creation API bypasses the changeStatus permission check via unfiltered isDraft parameter (medium 5.3)
- [CVE-2026-40098](https://insights.sbomify.com/CVE-2026-40098/): OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure (medium 5.3)
- [CVE-2026-40097](https://insights.sbomify.com/CVE-2026-40097/): Step CA affected by an index out of bounds panic in TPM attestation EKU validation (low 3.7)
- [CVE-2026-40096](https://insights.sbomify.com/CVE-2026-40096/): immich: Open Redirect via Shared Album name (medium 5.1)
- [CVE-2026-40094](https://insights.sbomify.com/CVE-2026-40094/): nimiq-blockchain: network-libp2p untrusted peer can crash address book via empty peer contact addresses (medium 4.3)
- [CVE-2026-40093](https://insights.sbomify.com/CVE-2026-40093/): nimiq-blockchain is missing a wall-clock upper bound on block timestamps (high 8.1)
- [CVE-2026-40092](https://insights.sbomify.com/CVE-2026-40092/): nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT (high 7.5)
- [CVE-2026-40091](https://insights.sbomify.com/CVE-2026-40091/): SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs (medium 6.0)
- [CVE-2026-40090](https://insights.sbomify.com/CVE-2026-40090/): Zarf has a Path Traversal via Malicious Package Metadata.Name — Arbitrary File Write (high 7.1)
- [CVE-2026-4009](https://insights.sbomify.com/CVE-2026-4009/): jarikomppa soloud WAV File dr_wav.h drwav_read_pcm_frames_s16__msadpcm out-of-bounds (medium 4.8)
- [CVE-2026-40089](https://insights.sbomify.com/CVE-2026-40089/): Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client (critical 9.9)
- [CVE-2026-40088](https://insights.sbomify.com/CVE-2026-40088/): Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in praisonai (critical 9.7)
- [CVE-2026-40087](https://insights.sbomify.com/CVE-2026-40087/): LangChain has incomplete f-string validation in prompt templates (medium 5.3)
- [CVE-2026-40086](https://insights.sbomify.com/CVE-2026-40086/): Rembg has a Path Traversal via Custom Model Loading (medium 5.3)
- [CVE-2026-40084](https://insights.sbomify.com/CVE-2026-40084/): Cacti: Arbitrary File Read via Path Traversal in Report `format_file` Parameter (medium 6.5)
- [CVE-2026-40083](https://insights.sbomify.com/CVE-2026-40083/): Cacti: SQL Injection in managers.php (high 7.2)
- [CVE-2026-40082](https://insights.sbomify.com/CVE-2026-40082/): Cacti: Session Fixation via missing session_regenerate_id() after login (medium 5.4)
- [CVE-2026-40080](https://insights.sbomify.com/CVE-2026-40080/): Cacti: Open Redirect via HTTP_REFERER substring check in auth_login_redirect (medium 6.1)
- [CVE-2026-4008](https://insights.sbomify.com/CVE-2026-4008/): Tenda W3 POST Parameter wifiSSIDset stack-based overflow (high 8.7)
- [CVE-2026-40079](https://insights.sbomify.com/CVE-2026-40079/): Cacti: Command Injection via escape_command() no-op in RRDtool execution (high 8.6)
- [CVE-2026-40077](https://insights.sbomify.com/CVE-2026-40077/): Beszel has an IDOR in hub API endpoints that read system ID from URL parameter (low 3.5)
- [CVE-2026-40076](https://insights.sbomify.com/CVE-2026-40076/): OpenMRS Core arbitrary file write and code execution via Zip Slip in module upload (critical 9.4)
- [CVE-2026-40075](https://insights.sbomify.com/CVE-2026-40075/): OpenMRS Core arbitrary file read via path traversal in ModuleResourcesServlet (high 8.2)
- [CVE-2026-40074](https://insights.sbomify.com/CVE-2026-40074/): SvelteKit's invalidated redirect in handle hook causes Denial-of-Service (medium 6.3)
- [CVE-2026-40073](https://insights.sbomify.com/CVE-2026-40073/): SvelteKit has a BODY_SIZE_LIMIT bypass in @sveltejs/adapter-node (high 8.2)
- [CVE-2026-40072](https://insights.sbomify.com/CVE-2026-40072/): web3.py affected by SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling (low 1.7)
- [CVE-2026-40071](https://insights.sbomify.com/CVE-2026-40071/): pyLoad WebUI JSON permission mismatch lets ADD/DELETE users invoke MODIFY-only actions (medium 5.4)
- [CVE-2026-40070](https://insights.sbomify.com/CVE-2026-40070/): bsv-sdk and bsv-wallet persist unverified certifier signatures in acquire_certificate (direct and issuance paths) (high 8.1)
- [CVE-2026-4007](https://insights.sbomify.com/CVE-2026-4007/): Tenda W3 POST Parameter wifiSSIDget stack-based overflow (high 8.7)
- [CVE-2026-40069](https://insights.sbomify.com/CVE-2026-40069/): bsv-sdk ARC broadcaster treats INVALID/MALFORMED/ORPHAN responses as successful broadcasts (high 7.5)
- [CVE-2026-40068](https://insights.sbomify.com/CVE-2026-40068/): Claude Code arbitrary code execution via git worktree commondir trust dialog bypass (high 7.7)
- [CVE-2026-40067](https://insights.sbomify.com/CVE-2026-40067/): BIG-IP APM Vulnerability (high 8.7)
- [CVE-2026-40066](https://insights.sbomify.com/CVE-2026-40066/): Anviz Products Download of Code Without Integrity Check (high 8.8)
- [CVE-2026-40063](https://insights.sbomify.com/CVE-2026-40063/): Information disclosure in Frangoteam (medium 5.3)
- [CVE-2026-40062](https://insights.sbomify.com/CVE-2026-40062/): Path traversal in Ziostation2 (high 8.7)
- [CVE-2026-40061](https://insights.sbomify.com/CVE-2026-40061/): iControl REST and tmsh vulnerability (high 8.5)
- [CVE-2026-40060](https://insights.sbomify.com/CVE-2026-40060/): BIG-IP Advanced WAF and ASM vulnerability (high 8.7)
- [CVE-2026-4006](https://insights.sbomify.com/CVE-2026-4006/): Draft List <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'display_name' Parameter (medium 6.4)
- [CVE-2026-40058](https://insights.sbomify.com/CVE-2026-40058/): Vulnerability Affecting Office Macro Removal in CrowdStrike Falcon Sensor for Windows (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/671/