# Vulnerabilities published in 2026


- [CVE-2026-38344](https://insights.sbomify.com/CVE-2026-38344/): A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to caus (high 7.5)
- [CVE-2026-38343](https://insights.sbomify.com/CVE-2026-38343/): An integer overflow in the libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (Do (medium 6.5)
- [CVE-2026-38332](https://insights.sbomify.com/CVE-2026-38332/): Memory corruption in TinyEXIF (low 2.9)
- [CVE-2026-3833](https://insights.sbomify.com/CVE-2026-3833/): Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison (medium 6.5)
- [CVE-2026-38329](https://insights.sbomify.com/CVE-2026-38329/): Bludit CMS before version 3.18.4 allows Remote Code Execution (RCE) via the API Plugin. (critical 9.8)
- [CVE-2026-3832](https://insights.sbomify.com/CVE-2026-3832/): Gnutls: gnutls: security bypass allows acceptance of revoked server certificates via crafted ocsp response (low 3.7)
- [CVE-2026-3831](https://insights.sbomify.com/CVE-2026-3831/): Missing authorization in Database for Contact Form 7, WPforms, Elementor forms (medium 4.3)
- [CVE-2026-3830](https://insights.sbomify.com/CVE-2026-3830/): Product Filter for WooCommerce by WBW < 3.1.3 - Unauthenticated SQLi (high 8.6)
- [CVE-2026-3829](https://insights.sbomify.com/CVE-2026-3829/): Missing authorization in WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan (medium 5.4)
- [CVE-2026-3828](https://insights.sbomify.com/CVE-2026-3828/): Command injection in DS-3E1310P-SI (high 7.2)
- [CVE-2026-3826](https://insights.sbomify.com/CVE-2026-3826/): WellChoose｜IFTOP - Local File Inclusion (critical 9.3)
- [CVE-2026-3825](https://insights.sbomify.com/CVE-2026-3825/): WellChoose｜IFTOP - Reflected Cross-site Scripting (medium 5.1)
- [CVE-2026-3824](https://insights.sbomify.com/CVE-2026-3824/): WellChoose｜IFTOP - Open redirect (medium 5.1)
- [CVE-2026-3823](https://insights.sbomify.com/CVE-2026-3823/): Atop Technologies｜EHG2408 series switch - Stack-based Buffer Overflow (critical 9.3)
- [CVE-2026-3822](https://insights.sbomify.com/CVE-2026-3822/): Taipower｜Taipower APP(Android) - Improper Certificate Validation (high 8.3)
- [CVE-2026-3821](https://insights.sbomify.com/CVE-2026-3821/): Supermicro SMASH service contain an Arbitrary code execution issue (high 8.8)
- [CVE-2026-3820](https://insights.sbomify.com/CVE-2026-3820/): Supermicro BMC's SMTP service contains a command injection vulnerability (high 7.2)
- [CVE-2026-3819](https://insights.sbomify.com/CVE-2026-3819/): SourceCodester Resort Reservation System Reservation Management page cross site scripting (medium 5.1)
- [CVE-2026-3818](https://insights.sbomify.com/CVE-2026-3818/): Tiandy Easy7 CMS Windows GetDBData.jsp sql injection (medium 6.9)
- [CVE-2026-3817](https://insights.sbomify.com/CVE-2026-3817/): SourceCodester Patients Waiting Area Queue Management System patient-search.php improper authorization (medium 6.9)
- [CVE-2026-38165](https://insights.sbomify.com/CVE-2026-38165/): A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows at (critical 9.8)
- [CVE-2026-3816](https://insights.sbomify.com/CVE-2026-3816/): OWASP DefectDojo SonarQubeParser/MSDefenderParser parser.py input_zip.read denial of service (medium 5.3)
- [CVE-2026-38158](https://insights.sbomify.com/CVE-2026-38158/): A SQL injection vulnerability in the /ureport/datasource/previewData component of ureport v2.2.9 allows attackers to access sensitive databa (critical 9.8)
- [CVE-2026-3815](https://insights.sbomify.com/CVE-2026-3815/): UTT HiPER 810G formApMail strcpy buffer overflow (high 8.7)
- [CVE-2026-38142](https://insights.sbomify.com/CVE-2026-38142/): An unauthenticated command injection vulnerability in the /goform/fast_setting_internet_set endpoint of Tenda AC18 v15.03.05.05 allows attac (medium 6.5)
- [CVE-2026-3814](https://insights.sbomify.com/CVE-2026-3814/): UTT HiPER 810G getOneApConfTempEntry strcpy buffer overflow (high 8.7)
- [CVE-2026-3813](https://insights.sbomify.com/CVE-2026-3813/): opencc JFlow WF_CCForm.java Calculate injection (medium 5.3)
- [CVE-2026-3812](https://insights.sbomify.com/CVE-2026-3812/): itsourcecode Payroll Management System manage_employee_allowances.php cross site scripting (medium 5.3)
- [CVE-2026-3811](https://insights.sbomify.com/CVE-2026-3811/): Tenda FH1202 P2pListFilter fromP2pListFilter stack-based overflow (high 8.7)
- [CVE-2026-3810](https://insights.sbomify.com/CVE-2026-3810/): Tenda FH1202 DhcpListClient fromDhcpListClient stack-based overflow (high 8.7)
- [CVE-2026-38093](https://insights.sbomify.com/CVE-2026-38093/): file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10, is vulnerable to path traversal (CWE-22) in its Android implementation. (low 3.3)
- [CVE-2026-3809](https://insights.sbomify.com/CVE-2026-3809/): Tenda FH1202 NatSaticSetting fromNatStaticSetting stack-based overflow (high 8.7)
- [CVE-2026-3808](https://insights.sbomify.com/CVE-2026-3808/): Tenda FH1202 webtypelibrary formWebTypeLibrary stack-based overflow (high 8.7)
- [CVE-2026-38076](https://insights.sbomify.com/CVE-2026-38076/): An integer overflow in the jbig2_arith_iaid_ctx_new() function of Artifex commit cc37d0 allows attackers to cause a Denial of Service (DoS) via a crafted input. (high 7.5)
- [CVE-2026-3807](https://insights.sbomify.com/CVE-2026-3807/): Tenda FH1202 AdvSetWrlsafeset formWrlsafeset stack-based overflow (high 8.7)
- [CVE-2026-38065](https://insights.sbomify.com/CVE-2026-38065/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_ims_on_with_apn via the ims_apn parameter. (critical 9.8)
- [CVE-2026-38064](https://insights.sbomify.com/CVE-2026-38064/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_dial_call via the dialNumber parameter. (critical 9.8)
- [CVE-2026-38063](https://insights.sbomify.com/CVE-2026-38063/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_radio_on_with_ia_apn via the ia parameter. (critical 9.8)
- [CVE-2026-38062](https://insights.sbomify.com/CVE-2026-38062/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_rat_mode via the ratMode parameter. (critical 9.8)
- [CVE-2026-38061](https://insights.sbomify.com/CVE-2026-38061/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_set_volume via the volume parameter. (critical 9.8)
- [CVE-2026-38060](https://insights.sbomify.com/CVE-2026-38060/): Tenda 5G03 V05.03.02.04 (Version 1.0) is vulnerable to Command injection in the function action_unlock_sim via the pin parameter. (critical 9.8)
- [CVE-2026-3806](https://insights.sbomify.com/CVE-2026-3806/): SourceCodester/janobe Resort Reservation System room_rates.php sql injection (medium 5.3)
- [CVE-2026-38059](https://insights.sbomify.com/CVE-2026-38059/): ST Engineering iDirect iQ-Series Terminals Missing authentication for critical function (high 8.7)
- [CVE-2026-38058](https://insights.sbomify.com/CVE-2026-38058/): ST Engineering iDirect iQ-Series Terminals Exposure of Sensitive System Information to an Unauthorized Control Sphere (high 8.6)
- [CVE-2026-38057](https://insights.sbomify.com/CVE-2026-38057/): ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery (high 7.0)
- [CVE-2026-38056](https://insights.sbomify.com/CVE-2026-38056/): ST Engineering iDirect iQ-Series Terminals Missing Authorization (critical 9.4)
- [CVE-2026-3805](https://insights.sbomify.com/CVE-2026-3805/): use after free in SMB connection reuse (high 7.5)
- [CVE-2026-3804](https://insights.sbomify.com/CVE-2026-3804/): Tenda i3 WifiMacFilterSet formWifiMacFilterSet stack-based overflow (high 8.7)
- [CVE-2026-3803](https://insights.sbomify.com/CVE-2026-3803/): Tenda i3 WifiMacFilterGet formWifiMacFilterGet stack-based overflow (high 8.7)
- [CVE-2026-3802](https://insights.sbomify.com/CVE-2026-3802/): Tenda i3 exeCommand formexeCommand stack-based overflow (high 8.7)
- [CVE-2026-3801](https://insights.sbomify.com/CVE-2026-3801/): Tenda i3 setAutoPing formSetAutoPing stack-based overflow (high 8.7)
- [CVE-2026-3800](https://insights.sbomify.com/CVE-2026-3800/): SourceCodester/janobe Resort Reservation System controller.php doInsert unrestricted upload (medium 5.3)
- [CVE-2026-3799](https://insights.sbomify.com/CVE-2026-3799/): Tenda i3 setcfm formSetCfm stack-based overflow (high 8.7)
- [CVE-2026-37982](https://insights.sbomify.com/CVE-2026-37982/): Keycloak: org.keycloak.authentication: keycloak: unauthorized account takeover via webauthn token replay (medium 6.8)
- [CVE-2026-37981](https://insights.sbomify.com/CVE-2026-37981/): Keycloak Account Resources user lookup contains broken access control (medium 4.3)
- [CVE-2026-37980](https://insights.sbomify.com/CVE-2026-37980/): Keycloak: Arbitrary code execution via Stored Cross-Site Scripting (XSS) in organization selection login page (medium 6.9)
- [CVE-2026-3798](https://insights.sbomify.com/CVE-2026-3798/): Comfast CF-AC100 Request Path mbox-config sub_44AC14 command injection (medium 5.1)
- [CVE-2026-37979](https://insights.sbomify.com/CVE-2026-37979/): Keycloak: keycloak: information disclosure via oidc token introspection endpoint audience bypass (medium 6.5)
- [CVE-2026-37978](https://insights.sbomify.com/CVE-2026-37978/): Keycloak: org.keycloak.services: keycloak: information disclosure via evaluate-scopes admin api (medium 4.9)
- [CVE-2026-37977](https://insights.sbomify.com/CVE-2026-37977/): Keycloak vulnerable to information disclosure via CORS header injection due to unvalidated JWT azp claim (low 3.7)
- [CVE-2026-3797](https://insights.sbomify.com/CVE-2026-3797/): Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload (medium 5.3)
- [CVE-2026-3796](https://insights.sbomify.com/CVE-2026-3796/): Qi-ANXIN QAX Virus Removal Mini Filter Driver QKSecureIO_Imp.sys ZwTerminateProcess access control (medium 4.8)
- [CVE-2026-3795](https://insights.sbomify.com/CVE-2026-3795/): doramart DoraCMS v1.js createFileBypath path traversal (medium 5.3)
- [CVE-2026-3794](https://insights.sbomify.com/CVE-2026-3794/): doramart DoraCMS Email API send improper authentication (medium 6.9)
- [CVE-2026-3793](https://insights.sbomify.com/CVE-2026-3793/): SourceCodester Sales and Inventory System GET Parameter sales_invoice1.php sql injection (medium 5.3)
- [CVE-2026-3792](https://insights.sbomify.com/CVE-2026-3792/): SourceCodester Sales and Inventory System GET Parameter purchase_invoice.php sql injection (medium 5.3)
- [CVE-2026-3791](https://insights.sbomify.com/CVE-2026-3791/): SourceCodester Sales and Inventory System Search dashboard.php sql injection (medium 5.3)
- [CVE-2026-3790](https://insights.sbomify.com/CVE-2026-3790/): SourceCodester Sales and Inventory System POST Parameter check_supplier_details.php sql injection (medium 5.3)
- [CVE-2026-3789](https://insights.sbomify.com/CVE-2026-3789/): Bytedesk SpringAIGiteeRestController SpringAIGiteeRestService.java getModels server-side request forgery (medium 5.3)
- [CVE-2026-3788](https://insights.sbomify.com/CVE-2026-3788/): Bytedesk SpringAIOpenrouterRestController SpringAIOpenrouterRestService.java getModels server-side request forgery (medium 5.3)
- [CVE-2026-3787](https://insights.sbomify.com/CVE-2026-3787/): UltraVNC Windows Service cryptbase.dll uncontrolled search path (high 7.3)
- [CVE-2026-3786](https://insights.sbomify.com/CVE-2026-3786/): EasyCMS Request Parameter RbacuserAction.class.php sql injection (medium 5.3)
- [CVE-2026-3785](https://insights.sbomify.com/CVE-2026-3785/): EasyCMS Request Parameter RbacnodeAction.class.php sql injection (medium 5.3)
- [CVE-2026-3784](https://insights.sbomify.com/CVE-2026-3784/): wrong proxy connection reuse with credentials (medium 6.5)
- [CVE-2026-3783](https://insights.sbomify.com/CVE-2026-3783/): token leak with redirect and netrc (medium 5.3)
- [CVE-2026-3781](https://insights.sbomify.com/CVE-2026-3781/): Attendance Manager <= 0.6.2 - Authenticated (Subscriber+) SQL Injection via 'attmgr_off' Parameter (medium 5.4)
- [CVE-2026-3780](https://insights.sbomify.com/CVE-2026-3780/): Foxit PDF Editor/Reader Installer Uncontrolled Search Path Privilege Escalation (high 7.3)
- [CVE-2026-3779](https://insights.sbomify.com/CVE-2026-3779/): Foxit PDF Editor/Reader List Box Calculate Array Use-After-Free Vulnerability (high 7.8)
- [CVE-2026-3778](https://insights.sbomify.com/CVE-2026-3778/): Stack exhaustion caused by cyclic references in Foxit PDF Editor/Reader (medium 6.2)
- [CVE-2026-3777](https://insights.sbomify.com/CVE-2026-3777/): Use after free of view cache in Foxit PDF Editor/Reader (medium 5.5)
- [CVE-2026-3776](https://insights.sbomify.com/CVE-2026-3776/): Null pointer dereference in Foxit PDF Editor/Reader when accessing stamp annotation (medium 5.5)
- [CVE-2026-37751](https://insights.sbomify.com/CVE-2026-37751/): An OS command injection vulnerability in the killSessionSync function (lib/agent-runtime.ts) of 23blocks-OS ai-maestro v0.24.17 allows attac (critical 9.8)
- [CVE-2026-37750](https://insights.sbomify.com/CVE-2026-37750/): A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to ex (medium 6.1)
- [CVE-2026-3775](https://insights.sbomify.com/CVE-2026-3775/): Foxit PDF Editor/Reader Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (high 7.8)
- [CVE-2026-37749](https://insights.sbomify.com/CVE-2026-37749/): A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authen (critical 9.8)
- [CVE-2026-37748](https://insights.sbomify.com/CVE-2026-37748/): File upload in sanjay1313:visitor management system (high 7.2)
- [CVE-2026-3774](https://insights.sbomify.com/CVE-2026-3774/): Self-Modifications Affecting Altered Printing and Redaction in Foxit PDF Editor (medium 4.7)
- [CVE-2026-37737](https://insights.sbomify.com/CVE-2026-37737/): sanic-cors contains an improper regular expression in the try_match() function (medium 6.5)
- [CVE-2026-37736](https://insights.sbomify.com/CVE-2026-37736/): An issue in the JsonSanitizer.sanitize() component of OWASP json-sanitizer v1.2.3 allows attackers to cause a Denial of Service (DoS) via a crafted input. (high 7.5)
- [CVE-2026-3773](https://insights.sbomify.com/CVE-2026-3773/): Accessibility Suite by Ability, Inc <= 4.20 - Authenticated (Subscriber+) SQL Injection via 'scan_id' Parameter (medium 6.5)
- [CVE-2026-3772](https://insights.sbomify.com/CVE-2026-3772/): WP Editor <= 1.2.9.2 - Cross-Site Request Forgery to Remote Code Execution via Plugin and Theme File Editor (high 8.8)
- [CVE-2026-37719](https://insights.sbomify.com/CVE-2026-37719/): An issue in dormakaba evolo Service (all versions) allows a remote attacker to execute arbitrary code as SYSTEM via a .NET component. (critical 9.8)
- [CVE-2026-37713](https://insights.sbomify.com/CVE-2026-37713/): An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/ (high 7.3)
- [CVE-2026-37712](https://insights.sbomify.com/CVE-2026-37712/): An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/ (high 7.3)
- [CVE-2026-37711](https://insights.sbomify.com/CVE-2026-37711/): An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/ (high 7.3)
- [CVE-2026-37710](https://insights.sbomify.com/CVE-2026-37710/): Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL (medium 6.1)
- [CVE-2026-3771](https://insights.sbomify.com/CVE-2026-3771/): SourceCodester/janobe Resort Reservation System accomodation.php sql injection (medium 5.3)
- [CVE-2026-37709](https://insights.sbomify.com/CVE-2026-37709/): Snipe-IT has insecure permissions in file uploads (critical 9.8)
- [CVE-2026-37700](https://insights.sbomify.com/CVE-2026-37700/): Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file (medium 4.1)
- [CVE-2026-3770](https://insights.sbomify.com/CVE-2026-3770/): SourceCodester Computer Laboratory Management System cross-site request forgery (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/682/