# Vulnerabilities published in 2026


- [CVE-2026-32194](https://insights.sbomify.com/CVE-2026-32194/): Microsoft Bing Images Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-32193](https://insights.sbomify.com/CVE-2026-32193/): Azure Kubernetes Service (AKS) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-32192](https://insights.sbomify.com/CVE-2026-32192/): Azure Monitor Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32191](https://insights.sbomify.com/CVE-2026-32191/): Microsoft Bing Images Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-32190](https://insights.sbomify.com/CVE-2026-32190/): Microsoft Office Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-3219](https://insights.sbomify.com/CVE-2026-3219/): pip doesn't reject concatenated ZIP and tar archives (medium 4.6)
- [CVE-2026-32189](https://insights.sbomify.com/CVE-2026-32189/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-32188](https://insights.sbomify.com/CVE-2026-32188/): Microsoft Excel Information Disclosure Vulnerability (high 7.1)
- [CVE-2026-32186](https://insights.sbomify.com/CVE-2026-32186/): Microsoft Bing Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-32185](https://insights.sbomify.com/CVE-2026-32185/): Microsoft Teams Spoofing Vulnerability (medium 5.5)
- [CVE-2026-32184](https://insights.sbomify.com/CVE-2026-32184/): Microsoft High Performance Compute (HPC) Pack Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32183](https://insights.sbomify.com/CVE-2026-32183/): Windows Snipping Tool Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-32181](https://insights.sbomify.com/CVE-2026-32181/): Connected User Experiences and Telemetry Service Denial of Service Vulnerability (medium 5.5)
- [CVE-2026-3218](https://insights.sbomify.com/CVE-2026-3218/): Responsive Favicons - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-019 (medium 4.8)
- [CVE-2026-32178](https://insights.sbomify.com/CVE-2026-32178/): .NET Spoofing Vulnerability (high 7.5)
- [CVE-2026-32177](https://insights.sbomify.com/CVE-2026-32177/): .NET Elevation of Privilege Vulnerability (high 7.3)
- [CVE-2026-32176](https://insights.sbomify.com/CVE-2026-32176/): SQL Server Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-32175](https://insights.sbomify.com/CVE-2026-32175/): .NET Core Tampering Vulnerability (medium 4.3)
- [CVE-2026-32174](https://insights.sbomify.com/CVE-2026-32174/): Azure Bot Service Elevation of Privilege Vulnerability (high 7.7)
- [CVE-2026-32173](https://insights.sbomify.com/CVE-2026-32173/): Azure SRE Agent Information Disclosure Vulnerability (high 8.6)
- [CVE-2026-32172](https://insights.sbomify.com/CVE-2026-32172/): Microsoft Power Apps Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-32171](https://insights.sbomify.com/CVE-2026-32171/): Azure Logic Apps Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-32170](https://insights.sbomify.com/CVE-2026-32170/): Windows Rich Text Edit Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-3217](https://insights.sbomify.com/CVE-2026-3217/): SAML SSO - Service Provider - Critical - Cross-site scripting - SA-CONTRIB-2026-018 (medium 6.1)
- [CVE-2026-32169](https://insights.sbomify.com/CVE-2026-32169/): Azure Cloud Shell Elevation of Privilege Vulnerability (critical 10.0)
- [CVE-2026-32168](https://insights.sbomify.com/CVE-2026-32168/): Azure Monitor Agent Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32167](https://insights.sbomify.com/CVE-2026-32167/): SQL Server Elevation of Privilege Vulnerability (medium 6.7)
- [CVE-2026-32165](https://insights.sbomify.com/CVE-2026-32165/): Windows User Interface Core Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32164](https://insights.sbomify.com/CVE-2026-32164/): Windows User Interface Core Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32163](https://insights.sbomify.com/CVE-2026-32163/): Windows User Interface Core Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32162](https://insights.sbomify.com/CVE-2026-32162/): Windows COM Elevation of Privilege Vulnerability (high 8.4)
- [CVE-2026-32161](https://insights.sbomify.com/CVE-2026-32161/): Windows Native WiFi Miniport Driver Remote Code Execution Vulnerability (high 7.5)
- [CVE-2026-32160](https://insights.sbomify.com/CVE-2026-32160/): Windows Push Notifications Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-3216](https://insights.sbomify.com/CVE-2026-3216/): Drupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017 (medium 5.0)
- [CVE-2026-32159](https://insights.sbomify.com/CVE-2026-32159/): Windows Push Notifications Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32158](https://insights.sbomify.com/CVE-2026-32158/): Windows Push Notifications Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32157](https://insights.sbomify.com/CVE-2026-32157/): Remote Desktop Client Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-32156](https://insights.sbomify.com/CVE-2026-32156/): Windows UPnP Device Host Remote Code Execution Vulnerability (high 7.4)
- [CVE-2026-32155](https://insights.sbomify.com/CVE-2026-32155/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32154](https://insights.sbomify.com/CVE-2026-32154/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32153](https://insights.sbomify.com/CVE-2026-32153/): Windows Speech Runtime Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32152](https://insights.sbomify.com/CVE-2026-32152/): Desktop Window Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-32151](https://insights.sbomify.com/CVE-2026-32151/): Windows Shell Information Disclosure Vulnerability (medium 6.5)
- [CVE-2026-32150](https://insights.sbomify.com/CVE-2026-32150/): Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-3215](https://insights.sbomify.com/CVE-2026-3215/): Islandora - Moderately critical - Arbitrary file upload, Cross-site scripting - SA-CONTRIB-2026-016 (medium 5.4)
- [CVE-2026-32149](https://insights.sbomify.com/CVE-2026-32149/): Windows Hyper-V Remote Code Execution Vulnerability (high 7.3)
- [CVE-2026-32148](https://insights.sbomify.com/CVE-2026-32148/): Lockfile checksums not verified in Hex allows dependency integrity bypass (high 8.9)
- [CVE-2026-32147](https://insights.sbomify.com/CVE-2026-32147/): SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT (medium 5.3)
- [CVE-2026-32146](https://insights.sbomify.com/CVE-2026-32146/): Improper Path Validation in Git Dependency Handling Allows Arbitrary File System Modification (high 8.3)
- [CVE-2026-32145](https://insights.sbomify.com/CVE-2026-32145/): Multipart form body parser bypasses body size limits in wisp (high 8.7)
- [CVE-2026-32144](https://insights.sbomify.com/CVE-2026-32144/): OCSP designated-responder authorization bypass via missing signature verification (high 7.6)
- [CVE-2026-32143](https://insights.sbomify.com/CVE-2026-32143/): Discourse: Admin-only report can be exported by moderators (medium 5.3)
- [CVE-2026-32142](https://insights.sbomify.com/CVE-2026-32142/): shopware/commercial: `/api/_info/config` route exposes information about licenses (medium 5.3)
- [CVE-2026-32141](https://insights.sbomify.com/CVE-2026-32141/): flatted: Unbounded recursion DoS in parse() revive phase (high 7.5)
- [CVE-2026-32140](https://insights.sbomify.com/CVE-2026-32140/): Dataease: Redshift JDBC RCE Bypass (critical 9.3)
- [CVE-2026-3214](https://insights.sbomify.com/CVE-2026-3214/): CAPTCHA - Moderately critical - Access bypass - SA-CONTRIB-2026-015 (medium 6.5)
- [CVE-2026-32139](https://insights.sbomify.com/CVE-2026-32139/): Dataease: Unfiltered active SVG content leads to Stored XSS (medium 5.3)
- [CVE-2026-32138](https://insights.sbomify.com/CVE-2026-32138/): NEXULEAN API Key Leak (high 8.2)
- [CVE-2026-32137](https://insights.sbomify.com/CVE-2026-32137/): DataEase SQL Injection Vulnerability (critical 9.3)
- [CVE-2026-32136](https://insights.sbomify.com/CVE-2026-32136/): AdGuard Home: HTTP/2 Cleartext (h2c) Upgrade Authentication Bypass (critical 9.8)
- [CVE-2026-32135](https://insights.sbomify.com/CVE-2026-32135/): NanoMQ has Heap Buffer Overflow in URI Parameter Parsing (high 7.7)
- [CVE-2026-32134](https://insights.sbomify.com/CVE-2026-32134/): NanoMQ: NULL Pointer Dereference Crash in tcptran_pipe_peer During Session Restore (medium 5.9)
- [CVE-2026-32133](https://insights.sbomify.com/CVE-2026-32133/): 2FAuth has Blind SSRF in image parameter allows internal network access and more (high 7.8)
- [CVE-2026-32132](https://insights.sbomify.com/CVE-2026-32132/): ZITADEL: Reactivation of Expired Passkey Registration Codes (high 7.4)
- [CVE-2026-32131](https://insights.sbomify.com/CVE-2026-32131/): ZITADEL Cross-Tenant Information Disclosure in Management API (high 7.7)
- [CVE-2026-32130](https://insights.sbomify.com/CVE-2026-32130/): ZITADEL SCIM Authentication Bypass via URL Encoding (high 7.5)
- [CVE-2026-3213](https://insights.sbomify.com/CVE-2026-3213/): Anti-Spam by CleanTalk - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-014 (medium 4.7)
- [CVE-2026-32129](https://insights.sbomify.com/CVE-2026-32129/): Poseidon V1 variable-length input collision via implicit zero-padding (high 8.7)
- [CVE-2026-32128](https://insights.sbomify.com/CVE-2026-32128/): FastGPT Python Sandbox Bypass of File-Write Restriction (medium 6.3)
- [CVE-2026-32127](https://insights.sbomify.com/CVE-2026-32127/): SQL Injection Vulnerability in ajax graphs library (OpenEMR) (high 8.8)
- [CVE-2026-32126](https://insights.sbomify.com/CVE-2026-32126/): Missing authorization in openemr (high 7.1)
- [CVE-2026-32125](https://insights.sbomify.com/CVE-2026-32125/): OpenEMR: Stored XSS in Track Anything Graphs via Unescaped Dygraph Titles/Labels (medium 5.4)
- [CVE-2026-32124](https://insights.sbomify.com/CVE-2026-32124/): OpenEMR: Dynamic Code Picker Renders Unescaped Descriptions (Stored XSS) (medium 5.4)
- [CVE-2026-32123](https://insights.sbomify.com/CVE-2026-32123/): OpenEMR: Therapy Group Sensitivity ACL No Longer Enforced (high 7.7)
- [CVE-2026-32122](https://insights.sbomify.com/CVE-2026-32122/): OpenEMR: Missing Authorization on Claim File Tracker UI and AJAX Endpoint (V2) (medium 4.3)
- [CVE-2026-32121](https://insights.sbomify.com/CVE-2026-32121/): OpenEMR: Stored DOM XSS via `.html()` in Portal Signer Modal (high 7.7)
- [CVE-2026-32120](https://insights.sbomify.com/CVE-2026-32120/): OpenEMR has IDOR in Fee Sheet Product Save (medium 6.5)
- [CVE-2026-3212](https://insights.sbomify.com/CVE-2026-3212/): Tagify - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-013 (medium 5.4)
- [CVE-2026-32119](https://insights.sbomify.com/CVE-2026-32119/): OpenEMR has Stored DOM XSS via SearchHighlight text-node reconstruction on Custom Report page (medium 4.4)
- [CVE-2026-32118](https://insights.sbomify.com/CVE-2026-32118/): OpenEMR has Stored XSS in Graphical Pain Map legend via unescaped annotation text (medium 5.4)
- [CVE-2026-32117](https://insights.sbomify.com/CVE-2026-32117/): grafanacubism-panel : Stored XSS via javascript: URL in panel zoom link (Editor → Viewer) (high 7.6)
- [CVE-2026-32116](https://insights.sbomify.com/CVE-2026-32116/): Magic Wormhole: "wormhole receive" allows arbitrary local file overwrite (high 8.2)
- [CVE-2026-32114](https://insights.sbomify.com/CVE-2026-32114/): Discourse's unscoped status lookups leak restricted metadata (medium 5.3)
- [CVE-2026-32113](https://insights.sbomify.com/CVE-2026-32113/): Discourse: Open redirect via `sso_destination_url` cookie in `enter` (medium 5.1)
- [CVE-2026-32112](https://insights.sbomify.com/CVE-2026-32112/): ha-mcp has XSS via Unescaped HTML in OAuth Consent Form (medium 6.8)
- [CVE-2026-32111](https://insights.sbomify.com/CVE-2026-32111/): ha-mcp OAuth 2.1 DCR mode enables network reconnaissance via an error oracle (medium 5.3)
- [CVE-2026-32110](https://insights.sbomify.com/CVE-2026-32110/): SiYuan has a Full-Read SSRF via /api/network/forwardProxy (high 8.3)
- [CVE-2026-3211](https://insights.sbomify.com/CVE-2026-3211/): Theme Negotiation by Rules - Moderately critical - Cross-site request forgery - SA-CONTRIB-2026-012 (medium 4.3)
- [CVE-2026-32109](https://insights.sbomify.com/CVE-2026-32109/): Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html` (low 3.7)
- [CVE-2026-32108](https://insights.sbomify.com/CVE-2026-32108/): Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access (low 2.3)
- [CVE-2026-32107](https://insights.sbomify.com/CVE-2026-32107/): xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails (high 8.8)
- [CVE-2026-32106](https://insights.sbomify.com/CVE-2026-32106/): StudioCMS: REST API Missing Rank Check Allows Admin to Create Peer Admin Accounts (medium 4.7)
- [CVE-2026-32105](https://insights.sbomify.com/CVE-2026-32105/): xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode (critical 9.3)
- [CVE-2026-32104](https://insights.sbomify.com/CVE-2026-32104/): StudioCMS: IDOR in User Notification Preferences Allows Any Authenticated User to Modify Any User's Settings (medium 5.4)
- [CVE-2026-32103](https://insights.sbomify.com/CVE-2026-32103/): StudioCMS: IDOR — Admin-to-Owner Account Takeover via Password Reset Link Generation (medium 6.8)
- [CVE-2026-32102](https://insights.sbomify.com/CVE-2026-32102/): OliveTin Unauthorized Action Output Disclosure via EventStream (high 7.1)
- [CVE-2026-32101](https://insights.sbomify.com/CVE-2026-32101/): StudioCMS S3 Storage Manager Authorization Bypass via Missing `await` on Async Auth Check (high 7.6)
- [CVE-2026-32100](https://insights.sbomify.com/CVE-2026-32100/): swag/platform-security: `/api/_info/config` route exposes information about licenses and active security fixes (medium 5.3)
- [CVE-2026-3210](https://insights.sbomify.com/CVE-2026-3210/): Material Icons - Moderately critical - Access bypass - SA-CONTRIB-2026-011 (medium 5.3)
- [CVE-2026-32099](https://insights.sbomify.com/CVE-2026-32099/): Discourse prevents hidden profile data leak via user onebox (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/722/