# Vulnerabilities published in 2026


- [CVE-2026-34926](https://insights.sbomify.com/CVE-2026-34926/): Trend Micro Apex One (On-Premise) Directory Traversal (medium 6.7, exploited in the wild)
- [CVE-2026-3492](https://insights.sbomify.com/CVE-2026-3492/): Gravity Forms <= 2.9.28.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Form Title (medium 6.4)
- [CVE-2026-34917](https://insights.sbomify.com/CVE-2026-34917/): Auth bypass in Adserver (medium 4.3)
- [CVE-2026-34916](https://insights.sbomify.com/CVE-2026-34916/): Code injection in Revive Adserver (high 8.8)
- [CVE-2026-34915](https://insights.sbomify.com/CVE-2026-34915/): SQL injection in Adserver (medium 6.1)
- [CVE-2026-34914](https://insights.sbomify.com/CVE-2026-34914/): SQL injection in Adserver (high 8.3)
- [CVE-2026-34913](https://insights.sbomify.com/CVE-2026-34913/): Missing authorization in Adserver (medium 4.3)
- [CVE-2026-34912](https://insights.sbomify.com/CVE-2026-34912/): Missing authorization in Adserver (medium 4.3)
- [CVE-2026-34911](https://insights.sbomify.com/CVE-2026-34911/): Path traversal in EFG (high 7.7)
- [CVE-2026-34910](https://insights.sbomify.com/CVE-2026-34910/): Ubiquiti UniFi OS Improper Input Validation (critical 10.0, exploited in the wild)
- [CVE-2026-34909](https://insights.sbomify.com/CVE-2026-34909/): Ubiquiti UniFi OS Path Traversal (critical 10.0, exploited in the wild)
- [CVE-2026-34908](https://insights.sbomify.com/CVE-2026-34908/): Ubiquiti UniFi OS Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2026-34907](https://insights.sbomify.com/CVE-2026-34907/): Reflected Cross-Site Scripting (XSS) in Wirtualna Uczelnia (medium 5.1)
- [CVE-2026-34906](https://insights.sbomify.com/CVE-2026-34906/): Server-Side Template Injection (SSTI) in Wirtualna Uczelnia (critical 9.3)
- [CVE-2026-34905](https://insights.sbomify.com/CVE-2026-34905/): Apache Answer: Unlisted Questions Accessible via Direct API Access (medium 6.5)
- [CVE-2026-34904](https://insights.sbomify.com/CVE-2026-34904/): WordPress Simple Social Media Share Buttons plugin <= 6.2.0 - Cross Site Request Forgery (CSRF) vulnerability (high 7.5)
- [CVE-2026-34903](https://insights.sbomify.com/CVE-2026-34903/): WordPress Ocean Extra plugin <= 2.5.3 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2026-34902](https://insights.sbomify.com/CVE-2026-34902/): WordPress WooCommerce Product Table Lite plugin <= 4.6.3 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-34901](https://insights.sbomify.com/CVE-2026-34901/): WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability (critical 9.8)
- [CVE-2026-34900](https://insights.sbomify.com/CVE-2026-34900/): WordPress GiveWP plugin <= 4.14.2 - Reflected Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-3490](https://insights.sbomify.com/CVE-2026-3490/): picklescan - Universal Blocklist Bypass via pkgutil.resolve_name (critical 10.0)
- [CVE-2026-34899](https://insights.sbomify.com/CVE-2026-34899/): WordPress LTL Freight Quotes – Worldwide Express Edition plugin <= 5.2.1 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-34898](https://insights.sbomify.com/CVE-2026-34898/): WordPress Event Tickets Manager for WooCommerce plugin <= 1.5.3 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-34897](https://insights.sbomify.com/CVE-2026-34897/): WordPress Media LIbrary Assistant plugin <= 3.34 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-34896](https://insights.sbomify.com/CVE-2026-34896/): Cross-site request forgery in Under Construction, Coming Soon & Maintenance Mode (high 7.5)
- [CVE-2026-34895](https://insights.sbomify.com/CVE-2026-34895/): WordPress Softlab Core plugin < 1.2.11 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-34894](https://insights.sbomify.com/CVE-2026-34894/): WordPress Integrio Core plugin < 1.2.8 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-34893](https://insights.sbomify.com/CVE-2026-34893/): WordPress Thegov Core plugin < 2.0.23 - Local File Inclusion vulnerability (high 8.1)
- [CVE-2026-34892](https://insights.sbomify.com/CVE-2026-34892/): WordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-34891](https://insights.sbomify.com/CVE-2026-34891/): WordPress IDPay Payment Gateway for Woocommerce plugin <= 2.2.5 - Sensitive Data Exposure vulnerability (high 7.5)
- [CVE-2026-34890](https://insights.sbomify.com/CVE-2026-34890/): WordPress MSTW League Manager plugin <= 2.10 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-3489](https://insights.sbomify.com/CVE-2026-3489/): DirectoryPress – Business Directory And Classified Ad Listing <= 3.6.26 - Unauthenticated SQL Injection via 'packages' (high 7.5)
- [CVE-2026-34889](https://insights.sbomify.com/CVE-2026-34889/): WordPress Ultimate Addons for WPBakery Page Builder plugin < 3.21.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-34888](https://insights.sbomify.com/CVE-2026-34888/): WordPress Bricksforge plugin <= 3.1.8.4 - Sensitive Data Exposure vulnerability (high 7.5)
- [CVE-2026-34887](https://insights.sbomify.com/CVE-2026-34887/): WordPress Kubio AI Page Builder plugin <= 2.7.0 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-34886](https://insights.sbomify.com/CVE-2026-34886/): WordPress Simple Membership plugin <= 4.7.1 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-34885](https://insights.sbomify.com/CVE-2026-34885/): WordPress Media LIbrary Assistant plugin <= 3.34 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-34884](https://insights.sbomify.com/CVE-2026-34884/): Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server (critical 9.8)
- [CVE-2026-34883](https://insights.sbomify.com/CVE-2026-34883/): An issue was discovered in the Portrait Dell Color Management application before 3.7.0 for Dell monitors. (medium 5.3)
- [CVE-2026-34881](https://insights.sbomify.com/CVE-2026-34881/): OpenStack Glance is affected by Server-Side Request Forgery (SSRF) (medium 5.0)
- [CVE-2026-3488](https://insights.sbomify.com/CVE-2026-3488/): Missing authorization in WP Statistics – Simple, privacy-friendly Google Analytics alternative (medium 6.5)
- [CVE-2026-34877](https://insights.sbomify.com/CVE-2026-34877/): Memory corruption in arm:mbed tls (critical 9.8)
- [CVE-2026-34876](https://insights.sbomify.com/CVE-2026-34876/): Memory corruption in trustedfirmware:mbed tls (high 7.5)
- [CVE-2026-34875](https://insights.sbomify.com/CVE-2026-34875/): Memory corruption in trustedfirmware:mbed tls (critical 9.8)
- [CVE-2026-34874](https://insights.sbomify.com/CVE-2026-34874/): Null dereference in trustedfirmware:mbed tls (high 7.5)
- [CVE-2026-34873](https://insights.sbomify.com/CVE-2026-34873/): Auth bypass in trustedfirmware:mbed tls (critical 9.1)
- [CVE-2026-34872](https://insights.sbomify.com/CVE-2026-34872/): Weak cryptography in arm:mbed tls (critical 9.1)
- [CVE-2026-34871](https://insights.sbomify.com/CVE-2026-34871/): Weak cryptography in arm:mbed tls (medium 6.7)
- [CVE-2026-3487](https://insights.sbomify.com/CVE-2026-3487/): itsourcecode College Management System class-result.php sql injection (medium 5.1)
- [CVE-2026-34867](https://insights.sbomify.com/CVE-2026-34867/): Memory corruption in HarmonyOS (medium 5.6)
- [CVE-2026-34866](https://insights.sbomify.com/CVE-2026-34866/): Memory corruption in HarmonyOS (medium 5.1)
- [CVE-2026-34865](https://insights.sbomify.com/CVE-2026-34865/): Memory corruption in HarmonyOS (critical 10.0)
- [CVE-2026-34864](https://insights.sbomify.com/CVE-2026-34864/): Memory corruption in HarmonyOS (medium 6.8)
- [CVE-2026-34863](https://insights.sbomify.com/CVE-2026-34863/): Memory corruption in HarmonyOS (medium 6.7)
- [CVE-2026-34862](https://insights.sbomify.com/CVE-2026-34862/): Race condition in HarmonyOS (medium 6.3)
- [CVE-2026-34861](https://insights.sbomify.com/CVE-2026-34861/): Race condition in HarmonyOS (medium 6.3)
- [CVE-2026-34860](https://insights.sbomify.com/CVE-2026-34860/): Missing authorization in HarmonyOS (medium 4.1)
- [CVE-2026-3486](https://insights.sbomify.com/CVE-2026-3486/): itsourcecode College Management System student-fee.php sql injection (medium 5.1)
- [CVE-2026-34859](https://insights.sbomify.com/CVE-2026-34859/): Use after free in EMUI (medium 5.9)
- [CVE-2026-34858](https://insights.sbomify.com/CVE-2026-34858/): Use after free in HarmonyOS (medium 4.1)
- [CVE-2026-34857](https://insights.sbomify.com/CVE-2026-34857/): Use after free in HarmonyOS (medium 4.7)
- [CVE-2026-34856](https://insights.sbomify.com/CVE-2026-34856/): Use after free in HarmonyOS (high 7.3)
- [CVE-2026-34855](https://insights.sbomify.com/CVE-2026-34855/): Memory corruption in EMUI (medium 5.7)
- [CVE-2026-34854](https://insights.sbomify.com/CVE-2026-34854/): Use after free in EMUI (medium 5.7)
- [CVE-2026-34853](https://insights.sbomify.com/CVE-2026-34853/): Security feature bypass in EMUI (high 7.7)
- [CVE-2026-34852](https://insights.sbomify.com/CVE-2026-34852/): Denial of service in HarmonyOS (medium 6.1)
- [CVE-2026-34851](https://insights.sbomify.com/CVE-2026-34851/): Race condition in HarmonyOS (low 2.2)
- [CVE-2026-34850](https://insights.sbomify.com/CVE-2026-34850/): Race condition in HarmonyOS (low 1.9)
- [CVE-2026-3485](https://insights.sbomify.com/CVE-2026-3485/): D-Link DIR-868L SSDP Service sub_1BF84 os command injection (critical 9.3)
- [CVE-2026-34849](https://insights.sbomify.com/CVE-2026-34849/): Use after free in HarmonyOS (low 2.5)
- [CVE-2026-34848](https://insights.sbomify.com/CVE-2026-34848/): hoppscotch: Stored XSS in team member overflow tooltip via display name (medium 5.4)
- [CVE-2026-34847](https://insights.sbomify.com/CVE-2026-34847/): hoppscotch: Open redirect via `/enter?redirect=` (medium 4.7)
- [CVE-2026-34841](https://insights.sbomify.com/CVE-2026-34841/): Axios npm Supply Chain Incident Impacting @usebruno/cli (critical 9.8)
- [CVE-2026-34840](https://insights.sbomify.com/CVE-2026-34840/): OneUptime SSO: Multi-Assertion Identity Injection via Decoupled Signature Verification (high 8.1)
- [CVE-2026-3484](https://insights.sbomify.com/CVE-2026-3484/): PhialsBasement nmap-mcp-server Nmap CLI index.ts child_process.exec command injection (medium 5.3)
- [CVE-2026-34839](https://insights.sbomify.com/CVE-2026-34839/): Glances Vulnerable to Cross-Origin Information Disclosure via Unauthenticated REST API (/api/4) due to Permissive CORS (high 7.7)
- [CVE-2026-34838](https://insights.sbomify.com/CVE-2026-34838/): Group-Office: Authenticated Remote Code Execution via PHP Insecure Deserialization in `AbstractSettingsCollection` (critical 10.0)
- [CVE-2026-34837](https://insights.sbomify.com/CVE-2026-34837/): Zammad is miissing authorization in AI assistance controller for context data used in text tools (medium 5.3)
- [CVE-2026-34836](https://insights.sbomify.com/CVE-2026-34836/): Combodo iTop: Improper access control in ajax.render.php and ajax.document.php (medium 6.5)
- [CVE-2026-34835](https://insights.sbomify.com/CVE-2026-34835/): Rack: `Rack::Request` accepts invalid Host characters, enabling host allowlist bypass. (medium 4.8)
- [CVE-2026-34834](https://insights.sbomify.com/CVE-2026-34834/): Bulwark Webmail: Authentication Bypass in verifyIdentity() due to missing cookie validation (high 8.7)
- [CVE-2026-34833](https://insights.sbomify.com/CVE-2026-34833/): Bulwark Webmail: Information Exposure: password returned in /api/auth/session (high 8.7)
- [CVE-2026-34832](https://insights.sbomify.com/CVE-2026-34832/): Scoold: Cross-Account Feedback Deletion (IDOR) (medium 6.5)
- [CVE-2026-34831](https://insights.sbomify.com/CVE-2026-34831/): Rack: Content-Length mismatch in Rack::Files error responses (medium 4.8)
- [CVE-2026-34830](https://insights.sbomify.com/CVE-2026-34830/): Rack: Rack::Sendfile regex injection via HTTP_X_ACCEL_MAPPING header allows arbitrary file reads through nginx (medium 5.9)
- [CVE-2026-3483](https://insights.sbomify.com/CVE-2026-3483/): Privilege escalation in Desktop and Server Management (high 7.8)
- [CVE-2026-34829](https://insights.sbomify.com/CVE-2026-34829/): Rack: Denial of Service via Unbounded Multipart File Upload Without Content-Length (high 7.5)
- [CVE-2026-34828](https://insights.sbomify.com/CVE-2026-34828/): listmonk: Active sessions remain valid after password reset and password change (high 7.1)
- [CVE-2026-34827](https://insights.sbomify.com/CVE-2026-34827/): Rack: Algorithmic-Complexity DoS in Rack::Multipart::Parser (high 7.5)
- [CVE-2026-34826](https://insights.sbomify.com/CVE-2026-34826/): Rack: Unbounded Range Count in get_byte_ranges Enables DoS (medium 5.3)
- [CVE-2026-34825](https://insights.sbomify.com/CVE-2026-34825/): NocoBase Has SQL Injection via template variable substitution in workflow SQL node (high 8.5)
- [CVE-2026-34824](https://insights.sbomify.com/CVE-2026-34824/): Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service (high 7.5)
- [CVE-2026-34823](https://insights.sbomify.com/CVE-2026-34823/): Endian Firewall /manage/password/web/ remark Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-34822](https://insights.sbomify.com/CVE-2026-34822/): Endian Firewall /manage/ca/certificate/ new_cert_name Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-34821](https://insights.sbomify.com/CVE-2026-34821/): Endian Firewall /manage/vpnauthentication/user/ remark Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-34820](https://insights.sbomify.com/CVE-2026-34820/): Endian Firewall /manage/ipsec/ remark Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-3482](https://insights.sbomify.com/CVE-2026-3482/): IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass (medium 5.3)
- [CVE-2026-34819](https://insights.sbomify.com/CVE-2026-34819/): Endian Firewall /cgi-bin/openvpnclient.cgi REMARK Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-34818](https://insights.sbomify.com/CVE-2026-34818/): Endian Firewall /manage/dnsmasq/localdomains/ remark Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-34817](https://insights.sbomify.com/CVE-2026-34817/): Endian Firewall /cgi-bin/smtprouting.cgi ADDRESS BCC Stored Cross-Site Scripting (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/695/