# Vulnerabilities published in 2026


- [CVE-2026-23786](https://insights.sbomify.com/CVE-2026-23786/): Race condition in Exynos 1280 firmware (low 2.8)
- [CVE-2026-23782](https://insights.sbomify.com/CVE-2026-23782/): Missing authorization in bmc:control-m\/managed file transfer (high 7.5)
- [CVE-2026-23781](https://insights.sbomify.com/CVE-2026-23781/): Hardcoded credentials in bmc:control-m\/managed file transfer (critical 9.8)
- [CVE-2026-23780](https://insights.sbomify.com/CVE-2026-23780/): SQL injection in bmc:control-m\/managed file transfer (high 8.8)
- [CVE-2026-2378](https://insights.sbomify.com/CVE-2026-2378/): Address bar spoofing risk in ArcSearch on Android (high 7.4)
- [CVE-2026-23779](https://insights.sbomify.com/CVE-2026-23779/): Command injection in PowerProtect Data Domain (medium 6.7)
- [CVE-2026-23778](https://insights.sbomify.com/CVE-2026-23778/): Command injection in PowerProtect Data Domain (high 7.2)
- [CVE-2026-23777](https://insights.sbomify.com/CVE-2026-23777/): Information disclosure in PowerProtect Data Domain (medium 4.3)
- [CVE-2026-23776](https://insights.sbomify.com/CVE-2026-23776/): Security feature bypass in PowerProtect Data Domain (high 7.2)
- [CVE-2026-23775](https://insights.sbomify.com/CVE-2026-23775/): Information disclosure in PowerProtect Data Domain appliances (high 7.6)
- [CVE-2026-23774](https://insights.sbomify.com/CVE-2026-23774/): Command injection in PowerProtect Data Domain (high 7.2)
- [CVE-2026-23773](https://insights.sbomify.com/CVE-2026-23773/): Server-side request forgery in Disk Library for mainframe DLm2700 (medium 4.3)
- [CVE-2026-23772](https://insights.sbomify.com/CVE-2026-23772/): Privilege escalation in Storage Manager (high 7.3)
- [CVE-2026-2377](https://insights.sbomify.com/CVE-2026-2377/): Mirror-registry: quay: quay: server-side request forgery via log export functionality (medium 6.5)
- [CVE-2026-23769](https://insights.sbomify.com/CVE-2026-23769/): Cross-site scripting in lucy-xss-filter (medium 6.5)
- [CVE-2026-23768](https://insights.sbomify.com/CVE-2026-23768/): Server-side request forgery in lucy-xss-filter (medium 6.1)
- [CVE-2026-23767](https://insights.sbomify.com/CVE-2026-23767/): Missing authorization in ESC/POS (critical 9.8)
- [CVE-2026-23764](https://insights.sbomify.com/CVE-2026-23764/): VB-Audio Voicemeeter & Matrix Drivers DoS via Corrupted IoAllocateMdl Length (medium 6.8)
- [CVE-2026-23763](https://insights.sbomify.com/CVE-2026-23763/): VB-Audio Matrix Drivers Local Privilege Escalation via Kernel Memory Exposure (high 8.5)
- [CVE-2026-23762](https://insights.sbomify.com/CVE-2026-23762/): VB-Audio Voicemeeter & Matrix Drivers DoS via MmMapLockedPagesSpecifyCache (medium 6.9)
- [CVE-2026-23761](https://insights.sbomify.com/CVE-2026-23761/): VB-Audio Voicemeeter & Matrix Drivers DoS via Improper FILE_OBJECT FsContext Initialization (medium 6.9)
- [CVE-2026-23760](https://insights.sbomify.com/CVE-2026-23760/): SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel (critical 9.3, exploited in the wild)
- [CVE-2026-2376](https://insights.sbomify.com/CVE-2026-2376/): Mirror-registry: quay: quay: server-side request forgery via open redirect vulnerability in web interface (medium 4.9)
- [CVE-2026-23759](https://insights.sbomify.com/CVE-2026-23759/): Perle IOLAN STS/SCS Authenticated Command Injection via 'shell ps' (high 8.6)
- [CVE-2026-23758](https://insights.sbomify.com/CVE-2026-23758/): GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter (medium 5.1)
- [CVE-2026-23757](https://insights.sbomify.com/CVE-2026-23757/): GFI HelpDesk < 4.99.10 Stored XSS via Reports Module (medium 5.1)
- [CVE-2026-23756](https://insights.sbomify.com/CVE-2026-23756/): GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject (medium 5.1)
- [CVE-2026-23755](https://insights.sbomify.com/CVE-2026-23755/): D-Link D-View 8 Installer DLL Preloading via Uncontrolled Search Path (high 8.4)
- [CVE-2026-23754](https://insights.sbomify.com/CVE-2026-23754/): D-Link D-View 8 IDOR Allows Credential Disclosure and Account Takeover (high 8.7)
- [CVE-2026-23753](https://insights.sbomify.com/CVE-2026-23753/): GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter (medium 4.8)
- [CVE-2026-23752](https://insights.sbomify.com/CVE-2026-23752/): GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter (medium 4.8)
- [CVE-2026-23751](https://insights.sbomify.com/CVE-2026-23751/): Kofax Capture 6.0.0.0 Unauthenticated File Read/Write & SMB Coercion via .NET Remoting (critical 9.3)
- [CVE-2026-23750](https://insights.sbomify.com/CVE-2026-23750/): Golioth Pouch (prior to commit 1b2219a1) BLE GATT Heap-based Buffer Overflow (high 7.2)
- [CVE-2026-2375](https://insights.sbomify.com/CVE-2026-2375/): Privilege escalation in App Builder – Create Native Android & iOS Apps On The Flight (medium 6.5)
- [CVE-2026-23749](https://insights.sbomify.com/CVE-2026-23749/): Golioth Firmware SDK < 0.22.0 Blockwise Transfer Path Out-of-Bounds Read (low 2.1)
- [CVE-2026-23748](https://insights.sbomify.com/CVE-2026-23748/): Golioth Firmware SDK < 0.22.0 LightDB State Out-of-Bounds Read (medium 6.3)
- [CVE-2026-23747](https://insights.sbomify.com/CVE-2026-23747/): Golioth Firmware SDK < 0.22.0 Payload Utils Stack-based Buffer Overflow (medium 6.3)
- [CVE-2026-23746](https://insights.sbomify.com/CVE-2026-23746/): Entrust Instant Financial Issuance (IFI) SmartCardController Service .NET Remoting RCE (critical 9.3)
- [CVE-2026-23745](https://insights.sbomify.com/CVE-2026-23745/): node-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization (high 8.2)
- [CVE-2026-23744](https://insights.sbomify.com/CVE-2026-23744/): REC in MCPJam inspector due to HTTP Endpoint exposes (critical 9.8)
- [CVE-2026-23743](https://insights.sbomify.com/CVE-2026-23743/): Discourse allows permalinks to restricted resources to leak resource slugs to unauthorized users (medium 6.9)
- [CVE-2026-23742](https://insights.sbomify.com/CVE-2026-23742/): Skipper arbitrary code execution through lua filters (high 8.8)
- [CVE-2026-23741](https://insights.sbomify.com/CVE-2026-23741/): Privilege escalation in asterisk (not scored)
- [CVE-2026-23740](https://insights.sbomify.com/CVE-2026-23740/): Asterisk vulnerable to potential privilege escalation (not scored)
- [CVE-2026-2374](https://insights.sbomify.com/CVE-2026-2374/): Login No Captcha reCAPTCHA <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via PHP_SELF (high 7.2)
- [CVE-2026-23739](https://insights.sbomify.com/CVE-2026-23739/): Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection (low 2.0)
- [CVE-2026-23738](https://insights.sbomify.com/CVE-2026-23738/): Cross-site scripting in asterisk (low 3.5)
- [CVE-2026-23737](https://insights.sbomify.com/CVE-2026-23737/): seroval Affected by Remote Code Execution via JSON Deserialization (high 7.5)
- [CVE-2026-23736](https://insights.sbomify.com/CVE-2026-23736/): seroval Affected by Prototype Pollution via JSON Deserialization (high 7.3)
- [CVE-2026-23735](https://insights.sbomify.com/CVE-2026-23735/): Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in graphql-modules (high 8.7)
- [CVE-2026-23734](https://insights.sbomify.com/CVE-2026-23734/): XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash (critical 9.3)
- [CVE-2026-23733](https://insights.sbomify.com/CVE-2026-23733/): Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE) (medium 6.4)
- [CVE-2026-23732](https://insights.sbomify.com/CVE-2026-23732/): FreeRDP has heap-buffer-overflow in Glyph_Alloc (medium 5.5)
- [CVE-2026-23731](https://insights.sbomify.com/CVE-2026-23731/): WeGIA Clickjacking Vulnerability (medium 4.3)
- [CVE-2026-23730](https://insights.sbomify.com/CVE-2026-23730/): Open redirect in WeGIA (medium 4.8)
- [CVE-2026-2373](https://insights.sbomify.com/CVE-2026-2373/): Missing authorization in Royal Addons for Elementor – Addons and Templates Kit for Elementor (medium 5.3)
- [CVE-2026-23729](https://insights.sbomify.com/CVE-2026-23729/): Open redirect in WeGIA (medium 4.8)
- [CVE-2026-23728](https://insights.sbomify.com/CVE-2026-23728/): Open redirect in WeGIA (medium 4.8)
- [CVE-2026-23727](https://insights.sbomify.com/CVE-2026-23727/): Open redirect in WeGIA (medium 4.8)
- [CVE-2026-23726](https://insights.sbomify.com/CVE-2026-23726/): Open redirect in WeGIA (medium 4.8)
- [CVE-2026-23725](https://insights.sbomify.com/CVE-2026-23725/): WeGIA Stored Cross-Site Scripting (XSS) – nome Parameter on Adopters Information Page (medium 5.3)
- [CVE-2026-23724](https://insights.sbomify.com/CVE-2026-23724/): WeGIA Stored Cross-Site Scripting (XSS) – atendido_idatendido Parameter on Occurrence Registration Page (medium 4.3)
- [CVE-2026-23723](https://insights.sbomify.com/CVE-2026-23723/): WeGIA has a Critical SQL Injection in Atendido_ocorrenciaControle via id_memorando parameter (high 7.2)
- [CVE-2026-23722](https://insights.sbomify.com/CVE-2026-23722/): WeGIA has a Reflected Cross-Site Scripting (XSS) vulnerability allowing arbitrary code execution and UI redressing. (critical 9.1)
- [CVE-2026-23721](https://insights.sbomify.com/CVE-2026-23721/): OpenProject users with "View Members" permission in any project can view all Group memberships (medium 4.3)
- [CVE-2026-23720](https://insights.sbomify.com/CVE-2026-23720/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-23719](https://insights.sbomify.com/CVE-2026-23719/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-23718](https://insights.sbomify.com/CVE-2026-23718/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-23717](https://insights.sbomify.com/CVE-2026-23717/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-23716](https://insights.sbomify.com/CVE-2026-23716/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-23715](https://insights.sbomify.com/CVE-2026-23715/): Memory corruption in Simcenter Femap (high 7.3)
- [CVE-2026-2371](https://insights.sbomify.com/CVE-2026-2371/): Missing authorization in Greenshift – animation and page builder blocks (medium 5.3)
- [CVE-2026-23708](https://insights.sbomify.com/CVE-2026-23708/): Auth bypass in FortiSOAR PaaS (medium 6.7)
- [CVE-2026-23707](https://insights.sbomify.com/CVE-2026-23707/): SQL injection in FortiAnalyzer (medium 6.5)
- [CVE-2026-23706](https://insights.sbomify.com/CVE-2026-23706/): SQL injection in FortiAnalyzer (medium 5.9)
- [CVE-2026-23705](https://insights.sbomify.com/CVE-2026-23705/): SQL injection in FortiAnalyzer (medium 6.5)
- [CVE-2026-23704](https://insights.sbomify.com/CVE-2026-23704/): File upload in Movable Type (Cloud Edition) (medium 5.1)
- [CVE-2026-23703](https://insights.sbomify.com/CVE-2026-23703/): Misconfiguration in FinalCode Ver.5 series (high 8.5)
- [CVE-2026-23702](https://insights.sbomify.com/CVE-2026-23702/): Copeland XWEB and XWEB Pro OS Command Injection (high 8.0)
- [CVE-2026-2370](https://insights.sbomify.com/CVE-2026-2370/): Improper Handling of Parameters in GitLab (high 8.1)
- [CVE-2026-23699](https://insights.sbomify.com/CVE-2026-23699/): Command injection in AP180(JA) V1.xx (high 8.6)
- [CVE-2026-23698](https://insights.sbomify.com/CVE-2026-23698/): Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload (high 8.6)
- [CVE-2026-23697](https://insights.sbomify.com/CVE-2026-23697/): Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module (high 8.7)
- [CVE-2026-23696](https://insights.sbomify.com/CVE-2026-23696/): Windmill < 1.603.3 File Ownership Handling SQLi RCE (critical 9.4)
- [CVE-2026-23695](https://insights.sbomify.com/CVE-2026-23695/): Cockpit CMS 2.14.0 Stored XSS via Set Field Display Template (medium 5.1)
- [CVE-2026-23694](https://insights.sbomify.com/CVE-2026-23694/): Aruba HiSpeed Cache < 3.0.5 CSRF in Multiple Administrative AJAX Actions (medium 5.1)
- [CVE-2026-23693](https://insights.sbomify.com/CVE-2026-23693/): ElementsKit Elementor Addons < 3.7.9 Unauthenticated Mailchimp REST Endpoint (critical 9.3)
- [CVE-2026-2369](https://insights.sbomify.com/CVE-2026-2369/): Libsoup: libsoup: buffer overread due to integer underflow when handling zero-length resources (medium 6.5)
- [CVE-2026-23689](https://insights.sbomify.com/CVE-2026-23689/): Denial of service (DOS) in SAP Supply Chain Management (high 7.7)
- [CVE-2026-23688](https://insights.sbomify.com/CVE-2026-23688/): Missing Authorization check in SAP Fiori App (Manage Service Entry Sheets - Lean Services) (medium 4.3)
- [CVE-2026-23687](https://insights.sbomify.com/CVE-2026-23687/): XML Signature Wrapping in SAP NetWeaver AS ABAP and ABAP Platform (high 8.8)
- [CVE-2026-23686](https://insights.sbomify.com/CVE-2026-23686/): CRLF Injection vulnerability in SAP NetWeaver Application Server Java (low 3.4)
- [CVE-2026-23685](https://insights.sbomify.com/CVE-2026-23685/): Insecure Deserialization vulnerability in SAP NetWeaver (JMS service) (medium 4.4)
- [CVE-2026-23684](https://insights.sbomify.com/CVE-2026-23684/): Race condition vulnerability in SAP Commerce Cloud (medium 5.9)
- [CVE-2026-23683](https://insights.sbomify.com/CVE-2026-23683/): Missing Authorization check in SAP Fiori App (Intercompany Balance Reconciliation) (medium 4.3)
- [CVE-2026-23681](https://insights.sbomify.com/CVE-2026-23681/): Missing Authorization check in a function module in SAP Support Tools Plug-In (medium 4.3)
- [CVE-2026-2368](https://insights.sbomify.com/CVE-2026-2368/): Security feature bypass in FileZ (high 7.5)
- [CVE-2026-23679](https://insights.sbomify.com/CVE-2026-23679/): libusb < 1.0.30 NULL Pointer Dereference in parse_interface() (medium 6.9)
- [CVE-2026-23678](https://insights.sbomify.com/CVE-2026-23678/): Binardat 10G08-0800GSM Network Switch Traceroute CLI Command Injection (high 8.7)
- [CVE-2026-23674](https://insights.sbomify.com/CVE-2026-23674/): MapUrlToZone Security Feature Bypass Vulnerability (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/786/