# Vulnerabilities published in 2026


- [CVE-2026-27792](https://insights.sbomify.com/CVE-2026-27792/): Seerr missing authentication on pushSubscription endpoints (medium 5.4)
- [CVE-2026-27790](https://insights.sbomify.com/CVE-2026-27790/): Denial of service in T-20 Readers (low 2.7)
- [CVE-2026-2779](https://insights.sbomify.com/CVE-2026-2779/): Incorrect boundary conditions in the Networking: JAR component (critical 9.8)
- [CVE-2026-27788](https://insights.sbomify.com/CVE-2026-27788/): Privilege escalation in ServerView Agents for Windows (high 8.5)
- [CVE-2026-27787](https://insights.sbomify.com/CVE-2026-27787/): Cross-site scripting in MATCHA SNS (medium 5.1)
- [CVE-2026-27785](https://insights.sbomify.com/CVE-2026-27785/): Milesight Cameras Use of Hard-coded Credentials (high 7.7)
- [CVE-2026-27784](https://insights.sbomify.com/CVE-2026-27784/): NGINX ngx_http_mp4_module vulnerability (high 8.5)
- [CVE-2026-27783](https://insights.sbomify.com/CVE-2026-27783/): Gitea issue-template APIs bypass repository unit authorization (medium 4.3)
- [CVE-2026-27781](https://insights.sbomify.com/CVE-2026-27781/): kernel_liteos_a has an integer overflow vulnerability (low 3.3)
- [CVE-2026-27780](https://insights.sbomify.com/CVE-2026-27780/): Gitea pre-receive hook can miss branch-protection checks after scanner errors (critical 9.8)
- [CVE-2026-2778](https://insights.sbomify.com/CVE-2026-2778/): Sandbox escape due to incorrect boundary conditions in the DOM: Core & HTML component (critical 10.0)
- [CVE-2026-27779](https://insights.sbomify.com/CVE-2026-27779/): Gitea forwarded-proto handling allows public URL spoofing (high 7.5)
- [CVE-2026-27778](https://insights.sbomify.com/CVE-2026-27778/): ePower epower.ie Improper Restriction of Excessive Authentication Attempts (high 8.7)
- [CVE-2026-27777](https://insights.sbomify.com/CVE-2026-27777/): Mobiliti e-mobi.hu Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-27776](https://insights.sbomify.com/CVE-2026-27776/): Deserialization in intra-mart Accel Platform (high 8.6)
- [CVE-2026-27775](https://insights.sbomify.com/CVE-2026-27775/): Gitea pre-receive hook permission cache allows full repository write access (high 8.8)
- [CVE-2026-27774](https://insights.sbomify.com/CVE-2026-27774/): Privilege escalation in Acronis True Image (medium 6.7)
- [CVE-2026-27773](https://insights.sbomify.com/CVE-2026-27773/): SWITCH EV swtchenergy.com Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-27772](https://insights.sbomify.com/CVE-2026-27772/): EV Energy ev.energy Missing Authentication for Critical Function (critical 9.3)
- [CVE-2026-27771](https://insights.sbomify.com/CVE-2026-27771/): Gitea Composer package source links use insufficient permission checks (high 8.2)
- [CVE-2026-27770](https://insights.sbomify.com/CVE-2026-27770/): ePower epower.ie Insufficiently Protected Credentials (medium 6.9)
- [CVE-2026-2777](https://insights.sbomify.com/CVE-2026-2777/): Privilege escalation in the Messaging System component (critical 9.8)
- [CVE-2026-27769](https://insights.sbomify.com/CVE-2026-27769/): Connected Workspaces: Malicious remote server can manipulate arbitrary user's status (low 2.7)
- [CVE-2026-27768](https://insights.sbomify.com/CVE-2026-27768/): SQL injection in Genetec Security Center (medium 6.6)
- [CVE-2026-27767](https://insights.sbomify.com/CVE-2026-27767/): SWITCH EV swtchenergy.com Missing Authentication for Critical Function (critical 9.3)
- [CVE-2026-27766](https://insights.sbomify.com/CVE-2026-27766/): multimedia_audio_framework has a Race Condition vulnerability (medium 5.5)
- [CVE-2026-27765](https://insights.sbomify.com/CVE-2026-27765/): Denial of service in vLLM Hardware Plugin for Intel(R) Gaudi(R) software (medium 6.8)
- [CVE-2026-27764](https://insights.sbomify.com/CVE-2026-27764/): Mobiliti e-mobi.hu Insufficient Session Expiration (medium 6.9)
- [CVE-2026-27761](https://insights.sbomify.com/CVE-2026-27761/): Gitea repository feeds bypass API token scope enforcement (medium 4.3)
- [CVE-2026-27760](https://insights.sbomify.com/CVE-2026-27760/): OpenCATS PHP Code Injection via installer AJAX endpoint (critical 9.2)
- [CVE-2026-2776](https://insights.sbomify.com/CVE-2026-2776/): Sandbox escape due to incorrect boundary conditions in the Telemetry component in External Software (critical 10.0)
- [CVE-2026-27759](https://insights.sbomify.com/CVE-2026-27759/): Featured Image from Content < 1.7 Authenticated SSRF via save_post (medium 5.3)
- [CVE-2026-27758](https://insights.sbomify.com/CVE-2026-27758/): SODOLA SL902-SWTGW124AS <= 200.1.20 Missing CSRF Protections (medium 5.1)
- [CVE-2026-27757](https://insights.sbomify.com/CVE-2026-27757/): SODOLA SL902-SWTGW124AS <= 200.1.20 Unverified Password Change (high 7.1)
- [CVE-2026-27756](https://insights.sbomify.com/CVE-2026-27756/): SODOLA SL902-SWTGW124AS <= 200.1.20 Reflected XSS in Management Interface (medium 5.1)
- [CVE-2026-27755](https://insights.sbomify.com/CVE-2026-27755/): SODOLA SL902-SWTGW124AS <= 200.1.20 Predictable Session ID (critical 9.3)
- [CVE-2026-27754](https://insights.sbomify.com/CVE-2026-27754/): SODOLA SL902-SWTGW124AS <= 200.1.20 MD5 Session Token Generation (medium 6.9)
- [CVE-2026-27753](https://insights.sbomify.com/CVE-2026-27753/): SODOLA SL902-SWTGW124AS <= 200.1.20 Improper Login Rate Limiting (medium 6.9)
- [CVE-2026-27752](https://insights.sbomify.com/CVE-2026-27752/): SODOLA SL902-SWTGW124AS <= 200.1.20 Cleartext Credential Transmission (high 8.2)
- [CVE-2026-27751](https://insights.sbomify.com/CVE-2026-27751/): SODOLA SL902-SWTGW124AS <= 200.1.20 Use of Default Credentials (critical 9.3)
- [CVE-2026-27750](https://insights.sbomify.com/CVE-2026-27750/): Avira Internet Security Optimizer TOCTOU (high 7.8)
- [CVE-2026-2775](https://insights.sbomify.com/CVE-2026-2775/): Mitigation bypass in the DOM: HTML Parser component (critical 9.8)
- [CVE-2026-27749](https://insights.sbomify.com/CVE-2026-27749/): Avira Internet Security System Speedup Insecure Deserialization (high 7.8)
- [CVE-2026-27748](https://insights.sbomify.com/CVE-2026-27748/): Avira Internet Security Arbitrary File Deletion via Improper Link Resolution (high 7.8)
- [CVE-2026-27747](https://insights.sbomify.com/CVE-2026-27747/): SPIP interface_traduction_objets < 2.2.2 Authenticated SQL Injection (high 7.1)
- [CVE-2026-27746](https://insights.sbomify.com/CVE-2026-27746/): SPIP jeux < 4.1.1 Reflected XSS via index Parameters (medium 5.1)
- [CVE-2026-27745](https://insights.sbomify.com/CVE-2026-27745/): SPIP interface_traduction_objets < 2.2.2 Authenticated RCE (high 8.7)
- [CVE-2026-27744](https://insights.sbomify.com/CVE-2026-27744/): SPIP tickets < 4.3.3 Unauthenticated RCE (critical 9.3)
- [CVE-2026-27743](https://insights.sbomify.com/CVE-2026-27743/): SPIP referer_spam < 1.3.0 Unauthenticated SQL Injection (critical 9.3)
- [CVE-2026-27742](https://insights.sbomify.com/CVE-2026-27742/): Bludit <= 3.16.2 Stored XSS in Post Content (medium 5.1)
- [CVE-2026-27741](https://insights.sbomify.com/CVE-2026-27741/): Bludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints (medium 5.1)
- [CVE-2026-27740](https://insights.sbomify.com/CVE-2026-27740/): Discourse has Stored XSS in AI Triage Automation (medium 5.1)
- [CVE-2026-2774](https://insights.sbomify.com/CVE-2026-2774/): Integer overflow in the Audio/Video component (high 8.8)
- [CVE-2026-27739](https://insights.sbomify.com/CVE-2026-27739/): Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline (critical 9.2)
- [CVE-2026-27738](https://insights.sbomify.com/CVE-2026-27738/): Angular SSR has an Open Redirect via X-Forwarded-Prefix (medium 6.9)
- [CVE-2026-27737](https://insights.sbomify.com/CVE-2026-27737/): BigBlueButton has Stored XSS in bbb-playback replay (medium 6.5)
- [CVE-2026-27736](https://insights.sbomify.com/CVE-2026-27736/): BigBlueButton has Open Redirect vulnerability in ApiController (medium 6.1)
- [CVE-2026-27735](https://insights.sbomify.com/CVE-2026-27735/): mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries (medium 6.4)
- [CVE-2026-27734](https://insights.sbomify.com/CVE-2026-27734/): Beszel Vulnerable to Docker API Path Traversal via Unsanitized Container ID (medium 6.5)
- [CVE-2026-27732](https://insights.sbomify.com/CVE-2026-27732/): AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php (high 8.6)
- [CVE-2026-27730](https://insights.sbomify.com/CVE-2026-27730/): esm.sh has SSRF localhost/private-network bypass in `/http(s)` module route (high 8.6)
- [CVE-2026-2773](https://insights.sbomify.com/CVE-2026-2773/): Incorrect boundary conditions in the Web Audio component (critical 9.8)
- [CVE-2026-27729](https://insights.sbomify.com/CVE-2026-27729/): Astro has memory exhaustion DoS due to missing request body size limit in Server Actions (medium 5.9)
- [CVE-2026-27728](https://insights.sbomify.com/CVE-2026-27728/): OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec() (critical 10.0)
- [CVE-2026-27727](https://insights.sbomify.com/CVE-2026-27727/): mchange-commons-java: Remote Code Execution via JNDI Reference Resolution (high 8.9)
- [CVE-2026-27723](https://insights.sbomify.com/CVE-2026-27723/): OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects (medium 4.3)
- [CVE-2026-2772](https://insights.sbomify.com/CVE-2026-2772/): Use-after-free in the Audio/Video: Playback component (high 8.8)
- [CVE-2026-27711](https://insights.sbomify.com/CVE-2026-27711/): NanaZip UFS Archive Parser Memory Corruption via Unvalidated Directory Record Length (medium 5.1)
- [CVE-2026-27710](https://insights.sbomify.com/CVE-2026-27710/): NanaZip .NET Single-File Parser Integer Underflow Leads to Unbounded Allocation (DoS) (medium 5.1)
- [CVE-2026-2771](https://insights.sbomify.com/CVE-2026-2771/): Undefined behavior in the DOM: Core & HTML component (critical 9.8)
- [CVE-2026-27709](https://insights.sbomify.com/CVE-2026-27709/): NanaZip .NET Single-File Manifest Parser Vulnerable to Out-of-Bounds Read via Unchecked RelativePathLength (medium 5.1)
- [CVE-2026-27708](https://insights.sbomify.com/CVE-2026-27708/): FOSSBilling: IDOR in Servicecustom Client API allows cross-client data access (high 7.1)
- [CVE-2026-27707](https://insights.sbomify.com/CVE-2026-27707/): Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint (high 7.3)
- [CVE-2026-27706](https://insights.sbomify.com/CVE-2026-27706/): Plane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Feature (high 7.7)
- [CVE-2026-27705](https://insights.sbomify.com/CVE-2026-27705/): Plane Vulnerable to Cross-Workspace/Cross-Project Asset Modification via IDOR in ProjectAssetEndpoint.patch (medium 4.9)
- [CVE-2026-27704](https://insights.sbomify.com/CVE-2026-27704/): Dart SDK and Flutter SDK have Zip slip in Dart Pub package extraction (medium 6.6)
- [CVE-2026-27703](https://insights.sbomify.com/CVE-2026-27703/): RIOT has an Out-of-Bounds Write in nanoCoAP Handler (high 7.5)
- [CVE-2026-27702](https://insights.sbomify.com/CVE-2026-27702/): Budibase Vulnerable to Remote Code Execution via Unsafe eval() in View Filter Map Function (Budibase Cloud) (critical 9.9)
- [CVE-2026-27701](https://insights.sbomify.com/CVE-2026-27701/): LiveCodes vulnerable to JavaScript Injection via untrusted PR title in i18n-update-pull workflow (high 8.8)
- [CVE-2026-27700](https://insights.sbomify.com/CVE-2026-27700/): Hono is Vulnerable to Authentication Bypass by IP Spoofing in AWS Lambda ALB conninfo (high 8.2)
- [CVE-2026-2770](https://insights.sbomify.com/CVE-2026-2770/): Use-after-free in the DOM: Bindings (WebIDL) component (high 8.8)
- [CVE-2026-27699](https://insights.sbomify.com/CVE-2026-27699/): Basic FTP has Path Traversal Vulnerability in its downloadToDir() method (critical 9.1)
- [CVE-2026-27697](https://insights.sbomify.com/CVE-2026-27697/): baserCMS: SQL injection vulnerability in blog post (medium 6.9)
- [CVE-2026-27696](https://insights.sbomify.com/CVE-2026-27696/): changedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs (high 8.6)
- [CVE-2026-27695](https://insights.sbomify.com/CVE-2026-27695/): zae-limiter: DynamoDB hot partition throttling enables per-entity Denial of Service (medium 4.3)
- [CVE-2026-27694](https://insights.sbomify.com/CVE-2026-27694/): traccar allows stored HTML injection in notification emails (medium 5.4)
- [CVE-2026-27693](https://insights.sbomify.com/CVE-2026-27693/): traccar allows XML injection in KML and GPX exports (medium 5.4)
- [CVE-2026-27692](https://insights.sbomify.com/CVE-2026-27692/): iccDEV has HBO in CIccTagTextDescription::Release() (high 7.1)
- [CVE-2026-27691](https://insights.sbomify.com/CVE-2026-27691/): iccDEV has SIO in parse3DTable() at iccFromCube.cpp Line 218 (medium 6.2)
- [CVE-2026-27690](https://insights.sbomify.com/CVE-2026-27690/): HTTP Request Smuggling in SAP Approuter (critical 9.1)
- [CVE-2026-2769](https://insights.sbomify.com/CVE-2026-2769/): Use-after-free in the Storage: IndexedDB component (high 8.8)
- [CVE-2026-27689](https://insights.sbomify.com/CVE-2026-27689/): Denial of service (DOS) in SAP Supply Chain Management (high 7.7)
- [CVE-2026-27688](https://insights.sbomify.com/CVE-2026-27688/): Missing Authorization check in SAP NetWeaver Application Server for ABAP (medium 5.0)
- [CVE-2026-27687](https://insights.sbomify.com/CVE-2026-27687/): Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (medium 5.8)
- [CVE-2026-27686](https://insights.sbomify.com/CVE-2026-27686/): Missing Authorization check in SAP Business Warehouse (Service API) (medium 5.9)
- [CVE-2026-27685](https://insights.sbomify.com/CVE-2026-27685/): Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration (critical 9.1)
- [CVE-2026-27684](https://insights.sbomify.com/CVE-2026-27684/): SQL Injection Vulnerability in SAP NetWeaver (Feedback Notification) (medium 6.4)
- [CVE-2026-27683](https://insights.sbomify.com/CVE-2026-27683/): Reflected cross site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform (medium 4.1)
- [CVE-2026-27682](https://insights.sbomify.com/CVE-2026-27682/): Cross-site scripting in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages) (medium 4.7)
- [CVE-2026-27681](https://insights.sbomify.com/CVE-2026-27681/): SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse (critical 9.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/752/