# Vulnerabilities published in 2026


- [CVE-2026-27273](https://insights.sbomify.com/CVE-2026-27273/): Substance3D - Stager | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-27272](https://insights.sbomify.com/CVE-2026-27272/): Illustrator | Out-of-bounds Write (CWE-787) (high 7.8)
- [CVE-2026-27271](https://insights.sbomify.com/CVE-2026-27271/): Illustrator | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-27270](https://insights.sbomify.com/CVE-2026-27270/): Illustrator | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2026-27269](https://insights.sbomify.com/CVE-2026-27269/): Premiere Pro | Out-of-bounds Read (CWE-125) (high 7.8)
- [CVE-2026-27268](https://insights.sbomify.com/CVE-2026-27268/): Illustrator | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2026-27267](https://insights.sbomify.com/CVE-2026-27267/): Illustrator | Stack-based Buffer Overflow (CWE-121) (high 7.8)
- [CVE-2026-27266](https://insights.sbomify.com/CVE-2026-27266/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27265](https://insights.sbomify.com/CVE-2026-27265/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27262](https://insights.sbomify.com/CVE-2026-27262/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-2726](https://insights.sbomify.com/CVE-2026-2726/): Incorrect Authorization in GitLab (medium 4.3)
- [CVE-2026-27258](https://insights.sbomify.com/CVE-2026-27258/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27257](https://insights.sbomify.com/CVE-2026-27257/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27256](https://insights.sbomify.com/CVE-2026-27256/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27255](https://insights.sbomify.com/CVE-2026-27255/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27254](https://insights.sbomify.com/CVE-2026-27254/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27253](https://insights.sbomify.com/CVE-2026-27253/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27252](https://insights.sbomify.com/CVE-2026-27252/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27251](https://insights.sbomify.com/CVE-2026-27251/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27250](https://insights.sbomify.com/CVE-2026-27250/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-2725](https://insights.sbomify.com/CVE-2026-2725/): Improper Authorization in Gerrit allowing Code Review Bypass via "Submitted Together" (medium 6.0)
- [CVE-2026-27249](https://insights.sbomify.com/CVE-2026-27249/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27248](https://insights.sbomify.com/CVE-2026-27248/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27247](https://insights.sbomify.com/CVE-2026-27247/): Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27246](https://insights.sbomify.com/CVE-2026-27246/): Adobe Connect | Cross-site Scripting (DOM-based XSS) (CWE-79) (critical 9.3)
- [CVE-2026-27245](https://insights.sbomify.com/CVE-2026-27245/): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (critical 9.3)
- [CVE-2026-27244](https://insights.sbomify.com/CVE-2026-27244/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27243](https://insights.sbomify.com/CVE-2026-27243/): Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79) (critical 9.3)
- [CVE-2026-27242](https://insights.sbomify.com/CVE-2026-27242/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27241](https://insights.sbomify.com/CVE-2026-27241/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27240](https://insights.sbomify.com/CVE-2026-27240/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-2724](https://insights.sbomify.com/CVE-2026-2724/): Unlimited Elements For Elementor <= 2.0.5 - Unauthenticated Stored Cross-Site Scripting via Form Entry Fields (high 7.2)
- [CVE-2026-27239](https://insights.sbomify.com/CVE-2026-27239/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27238](https://insights.sbomify.com/CVE-2026-27238/): InDesign Desktop | Heap-based Buffer Overflow (CWE-122) (high 7.8)
- [CVE-2026-27237](https://insights.sbomify.com/CVE-2026-27237/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27236](https://insights.sbomify.com/CVE-2026-27236/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27235](https://insights.sbomify.com/CVE-2026-27235/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27234](https://insights.sbomify.com/CVE-2026-27234/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27233](https://insights.sbomify.com/CVE-2026-27233/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27232](https://insights.sbomify.com/CVE-2026-27232/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27231](https://insights.sbomify.com/CVE-2026-27231/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27230](https://insights.sbomify.com/CVE-2026-27230/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-2723](https://insights.sbomify.com/CVE-2026-2723/): Post Snippits <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Update (medium 6.1)
- [CVE-2026-27229](https://insights.sbomify.com/CVE-2026-27229/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27228](https://insights.sbomify.com/CVE-2026-27228/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27227](https://insights.sbomify.com/CVE-2026-27227/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27226](https://insights.sbomify.com/CVE-2026-27226/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27225](https://insights.sbomify.com/CVE-2026-27225/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27224](https://insights.sbomify.com/CVE-2026-27224/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27223](https://insights.sbomify.com/CVE-2026-27223/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27222](https://insights.sbomify.com/CVE-2026-27222/): Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) (medium 5.4)
- [CVE-2026-27221](https://insights.sbomify.com/CVE-2026-27221/): Acrobat Reader | Improper Certificate Validation (CWE-295) (medium 5.5)
- [CVE-2026-27220](https://insights.sbomify.com/CVE-2026-27220/): Acrobat Reader | Use After Free (CWE-416) (high 7.8)
- [CVE-2026-2722](https://insights.sbomify.com/CVE-2026-2722/): Stock Ticker <= 3.26.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Template (medium 4.8)
- [CVE-2026-27219](https://insights.sbomify.com/CVE-2026-27219/): Substance3D - Painter | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2026-27218](https://insights.sbomify.com/CVE-2026-27218/): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2026-27217](https://insights.sbomify.com/CVE-2026-27217/): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2026-27216](https://insights.sbomify.com/CVE-2026-27216/): Substance3D - Painter | Out-of-bounds Read (CWE-125) (medium 5.5)
- [CVE-2026-27215](https://insights.sbomify.com/CVE-2026-27215/): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2026-27214](https://insights.sbomify.com/CVE-2026-27214/): Substance3D - Painter | NULL Pointer Dereference (CWE-476) (medium 5.5)
- [CVE-2026-27212](https://insights.sbomify.com/CVE-2026-27212/): Swiper has a Prototype Pollution Vulnerability (critical 9.4)
- [CVE-2026-27211](https://insights.sbomify.com/CVE-2026-27211/): Cloud Hypervisor: Host File Exfiltration via QCOW Backing File Abuse (critical 9.1)
- [CVE-2026-27210](https://insights.sbomify.com/CVE-2026-27210/): Pannellum has a XSS vulnerability in hot spot attributes (medium 5.3)
- [CVE-2026-2721](https://insights.sbomify.com/CVE-2026-2721/): MailArchiver <= 4.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings (medium 4.8)
- [CVE-2026-27208](https://insights.sbomify.com/CVE-2026-27208/): api-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution (critical 9.2)
- [CVE-2026-27206](https://insights.sbomify.com/CVE-2026-27206/): Zumba Json Serializer has a potential PHP Object Injection via Unrestricted @type in unserialize() (high 8.1)
- [CVE-2026-27205](https://insights.sbomify.com/CVE-2026-27205/): Flask session does not add `Vary: Cookie` header when accessed in some ways (low 2.3)
- [CVE-2026-27204](https://insights.sbomify.com/CVE-2026-27204/): Wasmtime WASI implementations are vulnerable to guest-controlled resource exhaustion (medium 6.9)
- [CVE-2026-27203](https://insights.sbomify.com/CVE-2026-27203/): eBay API MCP Server Affected by Environment Variable Injection (high 8.3)
- [CVE-2026-27202](https://insights.sbomify.com/CVE-2026-27202/): GetSimple CMS: Uploaded Files (feature) Arbitrary File Read Vulnerability (high 8.8)
- [CVE-2026-2720](https://insights.sbomify.com/CVE-2026-2720/): Hr Press Lite <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Employee Information Exposure (medium 6.5)
- [CVE-2026-27199](https://insights.sbomify.com/CVE-2026-27199/): Werkzeug safe_join() allows Windows special device names (medium 6.3)
- [CVE-2026-27198](https://insights.sbomify.com/CVE-2026-27198/): Formwork Improperly Manages Privileges During User Creation (high 8.8)
- [CVE-2026-27197](https://insights.sbomify.com/CVE-2026-27197/): Sentry: Improper Authentication on SAML SSO process allows user identity linking (critical 9.1)
- [CVE-2026-27196](https://insights.sbomify.com/CVE-2026-27196/): Statamic affected by privilege escalation via stored Cross-site Scripting (high 8.1)
- [CVE-2026-27195](https://insights.sbomify.com/CVE-2026-27195/): Wasmtime is vulnerable to panic when dropping a `[Typed]Func::call_async` future (medium 6.9)
- [CVE-2026-27194](https://insights.sbomify.com/CVE-2026-27194/): D-Tale affected by Remote Code Execution through the /save-column-filter endpoint (high 8.1)
- [CVE-2026-27193](https://insights.sbomify.com/CVE-2026-27193/): Feathers exposes internal headers via unencrypted session cookie (high 8.2)
- [CVE-2026-27192](https://insights.sbomify.com/CVE-2026-27192/): Feathers has an origin validation bypass via prefix matching (high 7.6)
- [CVE-2026-27191](https://insights.sbomify.com/CVE-2026-27191/): Feathers: Open Redirect in OAuth callback enables account takeover (high 7.4)
- [CVE-2026-27190](https://insights.sbomify.com/CVE-2026-27190/): Deno has a Command Injection via Incomplete shell metacharacter blocklist in node:child_process (high 8.1)
- [CVE-2026-2719](https://insights.sbomify.com/CVE-2026-2719/): Private WP suite <= 0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Exceptions' Setting (medium 4.4)
- [CVE-2026-27189](https://insights.sbomify.com/CVE-2026-27189/): OpenSift: Race-prone local persistence could cause state corruption/loss (medium 6.6)
- [CVE-2026-27183](https://insights.sbomify.com/CVE-2026-27183/): OpenClaw < 2026.3.7 - Shell Approval Gating Bypass via Dispatch Wrapper Depth Mismatch (low 2.1)
- [CVE-2026-27182](https://insights.sbomify.com/CVE-2026-27182/): Saturn Remote Mouse Server UDP Command Injection RCE (high 8.6)
- [CVE-2026-27181](https://insights.sbomify.com/CVE-2026-27181/): MajorDoMo Unauthenticated Module Uninstall via Market Endpoint (high 8.7)
- [CVE-2026-27180](https://insights.sbomify.com/CVE-2026-27180/): MajorDoMo Supply Chain Remote Code Execution via Update URL Poisoning (critical 9.3)
- [CVE-2026-2718](https://insights.sbomify.com/CVE-2026-2718/): Dealia <= 1.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Gutenberg Block Attributes (medium 6.4)
- [CVE-2026-27179](https://insights.sbomify.com/CVE-2026-27179/): MajorDoMo Unauthenticated SQL Injection in Commands Module (high 8.8)
- [CVE-2026-27178](https://insights.sbomify.com/CVE-2026-27178/): MajorDoMo Stored Cross-Site Scripting via Method Parameters to Shoutbox (medium 5.3)
- [CVE-2026-27177](https://insights.sbomify.com/CVE-2026-27177/): MajorDoMo Stored Cross-Site Scripting via Property Set Endpoint (medium 5.3)
- [CVE-2026-27176](https://insights.sbomify.com/CVE-2026-27176/): MajorDoMo Reflected Cross-Site Scripting in command.php (medium 5.1)
- [CVE-2026-27175](https://insights.sbomify.com/CVE-2026-27175/): MajorDoMo Command Injection in rc/index.php via Race Condition (critical 9.2)
- [CVE-2026-27174](https://insights.sbomify.com/CVE-2026-27174/): MajorDoMo Unauthenticated Remote Code Execution via Admin Console Eval (critical 9.3)
- [CVE-2026-27173](https://insights.sbomify.com/CVE-2026-27173/): Apache Airflow CNCF Kubernetes provider: JWT Token Exposure in KubernetesExecutor Command-Line Arguments (high 8.7)
- [CVE-2026-27172](https://insights.sbomify.com/CVE-2026-27172/): Apache Camel-Consul component vulnerable to Deserialization of Untrusted Data (high 8.8)
- [CVE-2026-27171](https://insights.sbomify.com/CVE-2026-27171/): Denial of service in zlib (low 2.9)
- [CVE-2026-27170](https://insights.sbomify.com/CVE-2026-27170/): OpenSift: SSRF risk in URL ingestion endpoint (high 7.1)
- [CVE-2026-2717](https://insights.sbomify.com/CVE-2026-2717/): HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values (medium 5.5)
- [CVE-2026-27169](https://insights.sbomify.com/CVE-2026-27169/): OpenSift: Persistent XSS Chat Tool Rendering (high 8.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/757/