# Vulnerabilities published in 2026


- [CVE-2026-25267](https://insights.sbomify.com/CVE-2026-25267/): Missing Authorization in Core (high 7.8)
- [CVE-2026-25266](https://insights.sbomify.com/CVE-2026-25266/): Exposed dangerous function in windows host (medium 5.5)
- [CVE-2026-25265](https://insights.sbomify.com/CVE-2026-25265/): Creation of Temporary File with Insecure Permissions in Qualcomm Software Center (high 8.8)
- [CVE-2026-25264](https://insights.sbomify.com/CVE-2026-25264/): Uncontrolled Search Path Element in Qualcomm Software Center (high 8.8)
- [CVE-2026-25263](https://insights.sbomify.com/CVE-2026-25263/): Out of Bounds write in Linux Camera (medium 6.6)
- [CVE-2026-25262](https://insights.sbomify.com/CVE-2026-25262/): Write-what-where Condition in Primary Bootloader (medium 6.9)
- [CVE-2026-25261](https://insights.sbomify.com/CVE-2026-25261/): Untrusted Pointer Dereference in Camera (medium 6.7)
- [CVE-2026-25260](https://insights.sbomify.com/CVE-2026-25260/): Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service (high 7.8)
- [CVE-2026-2526](https://insights.sbomify.com/CVE-2026-2526/): Wavlink WL-WN579A3 wireless.cgi multi_ssid command injection (medium 5.3)
- [CVE-2026-25259](https://insights.sbomify.com/CVE-2026-25259/): Out-of-bounds Write in DSP Service (high 7.8)
- [CVE-2026-25258](https://insights.sbomify.com/CVE-2026-25258/): Out-of-bounds Read in DSP Service (high 7.8)
- [CVE-2026-25255](https://insights.sbomify.com/CVE-2026-25255/): Exposed function in Qualcomm Package Manager and Qualcomm Software Center. (high 8.8)
- [CVE-2026-25254](https://insights.sbomify.com/CVE-2026-25254/): Improper authorization in Qualcomm Software Center (critical 9.8)
- [CVE-2026-25253](https://insights.sbomify.com/CVE-2026-25253/): OpenClaw/Clawdbot has 1-Click RCE via Authentication Token Exfiltration From gatewayUrl (high 8.8)
- [CVE-2026-25250](https://insights.sbomify.com/CVE-2026-25250/): Security feature bypass in EazyFix (medium 6.0)
- [CVE-2026-2525](https://insights.sbomify.com/CVE-2026-2525/): Free5GC PFCP UDP Endpoint denial of service (medium 6.9)
- [CVE-2026-25244](https://insights.sbomify.com/CVE-2026-25244/): WebdriverIO has Command Injection in the BrowserStack Service (critical 9.8)
- [CVE-2026-25243](https://insights.sbomify.com/CVE-2026-25243/): redis-server RESTORE invalid memory access may allow remote code execution (high 7.7)
- [CVE-2026-25242](https://insights.sbomify.com/CVE-2026-25242/): Gogs allows unauthenticated file uploads (medium 6.9)
- [CVE-2026-25241](https://insights.sbomify.com/CVE-2026-25241/): PEAR is Vulnerable to SQL Injection in /get/<package>/<version> Endpoint (critical 9.3)
- [CVE-2026-25240](https://insights.sbomify.com/CVE-2026-25240/): PEAR is Vulnerable to SQL Injection in user::maintains() Role IN() Filter (medium 6.9)
- [CVE-2026-2524](https://insights.sbomify.com/CVE-2026-2524/): Open5GS MME mme_s11_handle_create_session_response denial of service (medium 6.9)
- [CVE-2026-25239](https://insights.sbomify.com/CVE-2026-25239/): PEAR is Vulnerable to SQL Injection in apidoc_queue Insert via Unescaped Filename (high 8.2)
- [CVE-2026-25238](https://insights.sbomify.com/CVE-2026-25238/): PEAR is Vulnerable to SQL Injection in Bug Subscription Deletion via Weak Email Validation (critical 9.2)
- [CVE-2026-25237](https://insights.sbomify.com/CVE-2026-25237/): PEAR is Vulnerable to PHP Code Execution via preg_replace /e in Bug Update Emails (critical 9.2)
- [CVE-2026-25236](https://insights.sbomify.com/CVE-2026-25236/): PEAR is Vulnerable to SQL Injection in Damblan_Karma IN() Query via Literal Substitution (medium 6.9)
- [CVE-2026-25235](https://insights.sbomify.com/CVE-2026-25235/): PEAR Has a Predictable Verification Hash in Election Account Requests (high 8.2)
- [CVE-2026-25234](https://insights.sbomify.com/CVE-2026-25234/): PEAR is Vulnerable to SQL Injection in Category Deletion (medium 5.3)
- [CVE-2026-25233](https://insights.sbomify.com/CVE-2026-25233/): PEAR Has a Roadmap Authorization Bypass via Operator Precedence Bug (high 7.1)
- [CVE-2026-25232](https://insights.sbomify.com/CVE-2026-25232/): Gogs has a Protected Branch Deletion Bypass in Web Interface (high 7.1)
- [CVE-2026-25231](https://insights.sbomify.com/CVE-2026-25231/): FileRise affected by an Unauthenticated File Read Due to Insufficient Access Control (high 7.5)
- [CVE-2026-25230](https://insights.sbomify.com/CVE-2026-25230/): FileRise affected by HTML Injection using color property in file tags (medium 4.6)
- [CVE-2026-2523](https://insights.sbomify.com/CVE-2026-2523/): Open5GS SMF gn-handler.c smf_gn_handle_create_pdp_context_request assertion (medium 6.9)
- [CVE-2026-25229](https://insights.sbomify.com/CVE-2026-25229/): Gogs Authorization Bypass Allows Cross-Repository Label Modification (medium 5.3)
- [CVE-2026-25228](https://insights.sbomify.com/CVE-2026-25228/): SignalK Server has Path Traversal leading to information disclosure (medium 5.0)
- [CVE-2026-25227](https://insights.sbomify.com/CVE-2026-25227/): authentik affected by Remote Code Execution via Context Key Injection in PropertyMapping Test Endpoint (critical 9.1)
- [CVE-2026-25224](https://insights.sbomify.com/CVE-2026-25224/): Fastify Vulnerable to DoS via Unbounded Memory Allocation in sendWebStream (low 3.7)
- [CVE-2026-25223](https://insights.sbomify.com/CVE-2026-25223/): Fastify's Content-Type header tab character allows body validation bypass (high 7.5)
- [CVE-2026-25222](https://insights.sbomify.com/CVE-2026-25222/): PolarLearn Affected by User Enumeration via Argon2 Timing Attack on Sign-In Endpoint (medium 6.3)
- [CVE-2026-25221](https://insights.sbomify.com/CVE-2026-25221/): PolarLearn has Multiple Login CSRFs via Missing OAuth state Parameter (GitHub & Google) (low 2.3)
- [CVE-2026-25220](https://insights.sbomify.com/CVE-2026-25220/): OpenEMR Messages "Show All" Not Restricted to Admins (medium 5.7)
- [CVE-2026-2522](https://insights.sbomify.com/CVE-2026-2522/): Open5GS MME esm-build.c memory corruption (medium 6.9)
- [CVE-2026-25219](https://insights.sbomify.com/CVE-2026-25219/): Apache Airlfow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view access (medium 6.5)
- [CVE-2026-25212](https://insights.sbomify.com/CVE-2026-25212/): Privilege escalation in percona:monitoring and management (critical 9.9)
- [CVE-2026-25211](https://insights.sbomify.com/CVE-2026-25211/): Llama Stack exposes secret in initialization log (low 3.2)
- [CVE-2026-25210](https://insights.sbomify.com/CVE-2026-25210/): Integer overflow in libexpat (medium 6.9)
- [CVE-2026-2521](https://insights.sbomify.com/CVE-2026-2521/): Open5GS SGW-C sgwc_s5c_handle_create_session_response memory corruption (medium 6.9)
- [CVE-2026-25209](https://insights.sbomify.com/CVE-2026-25209/): Memory corruption in Escargot (medium 6.5)
- [CVE-2026-25208](https://insights.sbomify.com/CVE-2026-25208/): Integer overflow in Escargot (high 8.1)
- [CVE-2026-25207](https://insights.sbomify.com/CVE-2026-25207/): Memory corruption in Escargot (high 7.4)
- [CVE-2026-25206](https://insights.sbomify.com/CVE-2026-25206/): Memory corruption in Escargot (medium 6.7)
- [CVE-2026-25205](https://insights.sbomify.com/CVE-2026-25205/): Memory corruption in Escargot (high 7.4)
- [CVE-2026-25204](https://insights.sbomify.com/CVE-2026-25204/): Deserialization in Escargot (medium 6.2)
- [CVE-2026-25203](https://insights.sbomify.com/CVE-2026-25203/): Misconfiguration in MagicINFO 9 Server (high 7.8)
- [CVE-2026-25202](https://insights.sbomify.com/CVE-2026-25202/): Hardcoded credentials in MagicINFO 9 Server (critical 9.8)
- [CVE-2026-25201](https://insights.sbomify.com/CVE-2026-25201/): File upload in MagicINFO 9 Server (high 8.8)
- [CVE-2026-25200](https://insights.sbomify.com/CVE-2026-25200/): File upload in MagicINFO 9 Server (critical 9.8)
- [CVE-2026-2520](https://insights.sbomify.com/CVE-2026-2520/): Missing authorization in Online Scheduling and Appointment Booking System – Bookly (medium 5.4)
- [CVE-2026-25199](https://insights.sbomify.com/CVE-2026-25199/): Apache CloudStack: Proxmox Extension Allows Unauthorized Cross-Tenant Instance Access (critical 9.1)
- [CVE-2026-25198](https://insights.sbomify.com/CVE-2026-25198/): web2py has an Open Redirect Vulnerability (medium 5.1)
- [CVE-2026-25197](https://insights.sbomify.com/CVE-2026-25197/): Gardyn Cloud API Authorization Bypass Through User-Controlled Key (critical 9.3)
- [CVE-2026-25196](https://insights.sbomify.com/CVE-2026-25196/): Copeland XWEB and XWEB Pro OS Command Injection (high 8.0)
- [CVE-2026-25195](https://insights.sbomify.com/CVE-2026-25195/): Copeland XWEB and XWEB Pro OS Command Injection (high 8.0)
- [CVE-2026-25194](https://insights.sbomify.com/CVE-2026-25194/): Memory corruption in Intel(R) Slim Bootloader may allow a denial of service. System software adversary with a privileged user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. (low 1.8)
- [CVE-2026-25193](https://insights.sbomify.com/CVE-2026-25193/): Information disclosure in Active Directory Sync (high 8.1)
- [CVE-2026-25192](https://insights.sbomify.com/CVE-2026-25192/): CTEK Chargeportal Missing Authentication for Critical Function (critical 9.3)
- [CVE-2026-25191](https://insights.sbomify.com/CVE-2026-25191/): Other in FinalCode Ver.5 series (high 8.4)
- [CVE-2026-25190](https://insights.sbomify.com/CVE-2026-25190/): Windows GDI Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-2519](https://insights.sbomify.com/CVE-2026-2519/): Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips' (medium 5.3)
- [CVE-2026-25189](https://insights.sbomify.com/CVE-2026-25189/): Windows DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25188](https://insights.sbomify.com/CVE-2026-25188/): Windows Telephony Service Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-25187](https://insights.sbomify.com/CVE-2026-25187/): Winlogon Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25186](https://insights.sbomify.com/CVE-2026-25186/): Windows Accessibility Infrastructure (ATBroker.exe) Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-25185](https://insights.sbomify.com/CVE-2026-25185/): Windows Shell Link Processing Spoofing Vulnerability (medium 5.3)
- [CVE-2026-25184](https://insights.sbomify.com/CVE-2026-25184/): Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-25181](https://insights.sbomify.com/CVE-2026-25181/): GDI+ Information Disclosure Vulnerability (high 7.5)
- [CVE-2026-25180](https://insights.sbomify.com/CVE-2026-25180/): Windows Graphics Component Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-2518](https://insights.sbomify.com/CVE-2026-2518/): FastX <= 1.0.2 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation and Activation (medium 4.3)
- [CVE-2026-25179](https://insights.sbomify.com/CVE-2026-25179/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-25178](https://insights.sbomify.com/CVE-2026-25178/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-25177](https://insights.sbomify.com/CVE-2026-25177/): Active Directory Domain Services Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-25176](https://insights.sbomify.com/CVE-2026-25176/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25175](https://insights.sbomify.com/CVE-2026-25175/): Windows NTFS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25174](https://insights.sbomify.com/CVE-2026-25174/): Windows Extensible File Allocation Table Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25173](https://insights.sbomify.com/CVE-2026-25173/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-25172](https://insights.sbomify.com/CVE-2026-25172/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-25171](https://insights.sbomify.com/CVE-2026-25171/): Windows Authentication Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-25170](https://insights.sbomify.com/CVE-2026-25170/): Windows Hyper-V Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-2517](https://insights.sbomify.com/CVE-2026-2517/): Open5GS SMF types.c ogs_gtp2_parse_tft denial of service (medium 6.9)
- [CVE-2026-25169](https://insights.sbomify.com/CVE-2026-25169/): Windows Graphics Component Denial of Service Vulnerability (medium 6.2)
- [CVE-2026-25168](https://insights.sbomify.com/CVE-2026-25168/): Windows Graphics Component Denial of Service Vulnerability (medium 6.2)
- [CVE-2026-25167](https://insights.sbomify.com/CVE-2026-25167/): Microsoft Brokering File System Elevation of Privilege Vulnerability (high 7.4)
- [CVE-2026-25166](https://insights.sbomify.com/CVE-2026-25166/): Windows System Image Manager Assessment and Deployment Kit (ADK) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-25165](https://insights.sbomify.com/CVE-2026-25165/): Performance Counters for Windows Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-25164](https://insights.sbomify.com/CVE-2026-25164/): OpenEMR's Document and Insurance REST Endpoints Skip ACL (high 8.1)
- [CVE-2026-25161](https://insights.sbomify.com/CVE-2026-25161/): Alist vulnerable to Path Traversal in multiple file operation handlers (high 8.8)
- [CVE-2026-25160](https://insights.sbomify.com/CVE-2026-25160/): Alist has Insecure TLS Config (critical 9.1)
- [CVE-2026-2516](https://insights.sbomify.com/CVE-2026-2516/): Unidocs ezPDF DRM Reader/ezPDF Reader SHFOLDER.dll uncontrolled search path (high 7.3)
- [CVE-2026-25157](https://insights.sbomify.com/CVE-2026-25157/): OpenClaw/Clawdbot has OS Command Injection via Project Root Path in sshNodeCommand (high 7.8)
- [CVE-2026-25156](https://insights.sbomify.com/CVE-2026-25156/): HotCRP vulnerable to stored XSS via comment attachments (high 7.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/772/