# Vulnerabilities published in 2026


- [CVE-2026-21930](https://insights.sbomify.com/CVE-2026-21930/): Other in Oracle ZFS Storage Appliance Kit (low 2.3)
- [CVE-2026-2193](https://insights.sbomify.com/CVE-2026-2193/): D-Link DI-7100G C1 set_jhttpd_info command injection (medium 5.3)
- [CVE-2026-21929](https://insights.sbomify.com/CVE-2026-21929/): Denial of service in MySQL Server (medium 5.3)
- [CVE-2026-21928](https://insights.sbomify.com/CVE-2026-21928/): Information disclosure in Oracle Solaris (medium 5.3)
- [CVE-2026-21927](https://insights.sbomify.com/CVE-2026-21927/): Other in Oracle Solaris (medium 5.8)
- [CVE-2026-21926](https://insights.sbomify.com/CVE-2026-21926/): Denial of service in Siebel CRM Deployment (high 7.5)
- [CVE-2026-21925](https://insights.sbomify.com/CVE-2026-21925/): Other in Oracle GraalVM Enterprise Edition (medium 4.8)
- [CVE-2026-21924](https://insights.sbomify.com/CVE-2026-21924/): Other in Oracle Utilities Application Framework (medium 5.4)
- [CVE-2026-21923](https://insights.sbomify.com/CVE-2026-21923/): Other in Oracle Life Sciences Central Designer (medium 6.5)
- [CVE-2026-21922](https://insights.sbomify.com/CVE-2026-21922/): Other in Oracle Planning and Budgeting Cloud Service (medium 4.2)
- [CVE-2026-21921](https://insights.sbomify.com/CVE-2026-21921/): Use after free in Junos OS (high 7.1)
- [CVE-2026-21920](https://insights.sbomify.com/CVE-2026-21920/): Junos OS: SRX Series: If a specific request is processed by the DNS subsystem flowd will crash (high 8.7)
- [CVE-2026-2192](https://insights.sbomify.com/CVE-2026-2192/): Tenda AC9 formGetRebootTimer stack-based overflow (high 8.6)
- [CVE-2026-21919](https://insights.sbomify.com/CVE-2026-21919/): Denial of service in Junos OS (high 7.1)
- [CVE-2026-21918](https://insights.sbomify.com/CVE-2026-21918/): Junos OS: SRX and MX Series: When TCP packets occur in a specific sequence flowd crashes (high 8.7)
- [CVE-2026-21917](https://insights.sbomify.com/CVE-2026-21917/): Junos OS: SRX Series: Specifically malformed SSL packet causes FPC crash (high 8.7)
- [CVE-2026-21916](https://insights.sbomify.com/CVE-2026-21916/): Junos OS: A low privileged user can escalate their privileges so that they can login as root (high 7.0)
- [CVE-2026-21915](https://insights.sbomify.com/CVE-2026-21915/): JSI Virtual Lightweight Collector: Shell escape allows privilege escalation to root (high 8.4)
- [CVE-2026-21914](https://insights.sbomify.com/CVE-2026-21914/): Junos OS: SRX Series: A specifically malformed GTP message will cause an FPC crash (high 8.7)
- [CVE-2026-21913](https://insights.sbomify.com/CVE-2026-21913/): Junos OS: EX4000: A high volume of traffic destined to the device leads to a crash and restart (high 8.7)
- [CVE-2026-21912](https://insights.sbomify.com/CVE-2026-21912/): Junos OS: MX10k Series: 'show system firmware' CLI command may lead to LC480 or LC2101 line card reset (medium 6.8)
- [CVE-2026-21911](https://insights.sbomify.com/CVE-2026-21911/): Junos OS Evolved: Flapping management interface causes MAC learning on label-switched interfaces to stop (high 7.1)
- [CVE-2026-21910](https://insights.sbomify.com/CVE-2026-21910/): Junos OS: EX4k Series, QFX5k Series: In an EVPN-VXLAN configuration link flaps cause Inter-VNI traffic drop (high 7.1)
- [CVE-2026-2191](https://insights.sbomify.com/CVE-2026-2191/): Tenda AC9 formGetDdosDefenceList stack-based overflow (high 8.6)
- [CVE-2026-21909](https://insights.sbomify.com/CVE-2026-21909/): Junos OS and Junos OS Evolved: Receipt of specific IS-IS update packet causes memory leak leading to RPD crash (high 7.1)
- [CVE-2026-21908](https://insights.sbomify.com/CVE-2026-21908/): Use after free in Junos OS (high 7.5)
- [CVE-2026-21907](https://insights.sbomify.com/CVE-2026-21907/): Junos Space: TLS/SSL server supports use of static key ciphers (ssl-static-key-ciphers) (high 8.2)
- [CVE-2026-21906](https://insights.sbomify.com/CVE-2026-21906/): Denial of service in Junos OS (high 8.7)
- [CVE-2026-21905](https://insights.sbomify.com/CVE-2026-21905/): Denial of service in Junos OS (high 8.7)
- [CVE-2026-21904](https://insights.sbomify.com/CVE-2026-21904/): Junos Space: ilpFilter field on nLegacy.jsp is vulnerable to reflected cross-site script injection (medium 5.1)
- [CVE-2026-21903](https://insights.sbomify.com/CVE-2026-21903/): Junos OS: Subscribing to telemetry sensors at scale causes all FPCs to crash (high 7.1)
- [CVE-2026-21902](https://insights.sbomify.com/CVE-2026-21902/): Junos OS Evolved: PTX Series: A vulnerability allows a unauthenticated, network-based attacker to execute code as root (critical 9.3)
- [CVE-2026-21901](https://insights.sbomify.com/CVE-2026-21901/): Junos OS and Junos OS Evolved: Configuration of a specific SSH option results in mgd crash (medium 6.7)
- [CVE-2026-21900](https://insights.sbomify.com/CVE-2026-21900/): CryptoLib Has Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern (high 8.2)
- [CVE-2026-2190](https://insights.sbomify.com/CVE-2026-2190/): itsourcecode School Management System controller.php sql injection (medium 6.9)
- [CVE-2026-21899](https://insights.sbomify.com/CVE-2026-21899/): CryptoLib has an out-of-bounds read and crash vulnerability when decoding an empty Base64url string (medium 4.7)
- [CVE-2026-21898](https://insights.sbomify.com/CVE-2026-21898/): CryptoLib Has Out-of-bounds Read in Crypto_AOS_ProcessSecurity (high 8.2)
- [CVE-2026-21897](https://insights.sbomify.com/CVE-2026-21897/): CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters (high 7.3)
- [CVE-2026-21896](https://insights.sbomify.com/CVE-2026-21896/): Kirby is missing permission checks in the content changes API (medium 5.8)
- [CVE-2026-21895](https://insights.sbomify.com/CVE-2026-21895/): rsa crate has potential panic on a prime being equal to 1 (low 2.7)
- [CVE-2026-21894](https://insights.sbomify.com/CVE-2026-21894/): n8n's Missing Stripe-Signature Verification Allows Unauthenticated Forged Webhooks (medium 6.5)
- [CVE-2026-21893](https://insights.sbomify.com/CVE-2026-21893/): n8n Vulnerable to Command Injection in Community Package Installation (critical 9.4)
- [CVE-2026-21892](https://insights.sbomify.com/CVE-2026-21892/): Parsl Monitoring Visualization Vulnerable to SQL Injection (medium 5.3)
- [CVE-2026-21891](https://insights.sbomify.com/CVE-2026-21891/): ZimaOS has Authentication Bypass via System-Level Username (critical 9.4)
- [CVE-2026-2189](https://insights.sbomify.com/CVE-2026-2189/): itsourcecode School Management System index.php sql injection (medium 6.9)
- [CVE-2026-21889](https://insights.sbomify.com/CVE-2026-21889/): Weblate leaks information via screenshots (low 2.3)
- [CVE-2026-21888](https://insights.sbomify.com/CVE-2026-21888/): MQTT v5 Variable Byte Integer parsing out-of-bounds: get_var_integer() (high 7.5)
- [CVE-2026-21887](https://insights.sbomify.com/CVE-2026-21887/): OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature (high 7.7)
- [CVE-2026-21886](https://insights.sbomify.com/CVE-2026-21886/): OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities (medium 6.5)
- [CVE-2026-21885](https://insights.sbomify.com/CVE-2026-21885/): Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources (medium 6.5)
- [CVE-2026-21884](https://insights.sbomify.com/CVE-2026-21884/): React Router SSR XSS in ScrollRestoration (high 8.2)
- [CVE-2026-21883](https://insights.sbomify.com/CVE-2026-21883/): Bokeh server applications have Incomplete Origin Validation in WebSockets (medium 4.5)
- [CVE-2026-21882](https://insights.sbomify.com/CVE-2026-21882/): theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution (high 8.4)
- [CVE-2026-21881](https://insights.sbomify.com/CVE-2026-21881/): Kanboard is Vulnerable to Reverse Proxy Authentication Bypass (critical 9.1)
- [CVE-2026-21880](https://insights.sbomify.com/CVE-2026-21880/): Kanboard LDAP Injection Vulnerability can Lead to User Enumeration and Information Disclosure (medium 5.3)
- [CVE-2026-2188](https://insights.sbomify.com/CVE-2026-2188/): UTT 进取 521G formPdbUpConfig sub_446B18 os command injection (high 8.6)
- [CVE-2026-21879](https://insights.sbomify.com/CVE-2026-21879/): Kanboard vulnerable to Open Redirect via protocol-relative URLs (medium 4.7)
- [CVE-2026-21878](https://insights.sbomify.com/CVE-2026-21878/): BACnet Stack Improperly Limits Pathnames to a Restricted Directory (high 7.5)
- [CVE-2026-21877](https://insights.sbomify.com/CVE-2026-21877/): n8n is vulnerable to Remote Code Execution via Arbitrary File Write (critical 10.0)
- [CVE-2026-21876](https://insights.sbomify.com/CVE-2026-21876/): OWASP CRS has multipart bypass using multiple content-type parts (critical 9.3)
- [CVE-2026-21875](https://insights.sbomify.com/CVE-2026-21875/): ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments (critical 9.8)
- [CVE-2026-21874](https://insights.sbomify.com/CVE-2026-21874/): NiceGUI has Redis connection leak via tab storage causes service degradation (medium 5.3)
- [CVE-2026-21873](https://insights.sbomify.com/CVE-2026-21873/): Zero-click XSS in all NiceGUI apps which uses `ui.sub_pages` (high 7.2)
- [CVE-2026-21872](https://insights.sbomify.com/CVE-2026-21872/): NiceGUI apps are vulnerable to XSS which uses `ui.sub_pages` and render arbitrary user-provided links (medium 6.1)
- [CVE-2026-21871](https://insights.sbomify.com/CVE-2026-21871/): NiceGUI is vulnerable to XSS via Unescaped URL in ui.navigate.history.push() / replace() (medium 6.1)
- [CVE-2026-21870](https://insights.sbomify.com/CVE-2026-21870/): The BACnet Protocol Stack library has an Off-by-one Stack-based Buffer Overflow in tokenizer_string (medium 5.5)
- [CVE-2026-2187](https://insights.sbomify.com/CVE-2026-2187/): Tenda RX3 formSetQosBand set_qosMib_list stack-based overflow (high 8.7)
- [CVE-2026-21869](https://insights.sbomify.com/CVE-2026-21869/): llama.cpp has Out-of-bounds Write in llama-server (high 8.8)
- [CVE-2026-21868](https://insights.sbomify.com/CVE-2026-21868/): Flag Forge has ReDoS Vulnerability in User Profile Lookup API (high 7.5)
- [CVE-2026-21866](https://insights.sbomify.com/CVE-2026-21866/): Dify - Stored XSS in chat (medium 5.1)
- [CVE-2026-21865](https://insights.sbomify.com/CVE-2026-21865/): Discourse topic conversion permission vulnerability for moderators (medium 6.5)
- [CVE-2026-21864](https://insights.sbomify.com/CVE-2026-21864/): Remote DoS from malformed RESTORE command (medium 6.5)
- [CVE-2026-21863](https://insights.sbomify.com/CVE-2026-21863/): Malformed Valkey Cluster bus message can lead to Remote DoS (high 7.5)
- [CVE-2026-21862](https://insights.sbomify.com/CVE-2026-21862/): RustFS sourceIp bypass via spoofed X-Forwarded-For/Real-IP headers (high 7.7)
- [CVE-2026-21861](https://insights.sbomify.com/CVE-2026-21861/): baserCMS: OS Command Injection Leading to Remote Code Execution (RCE) (critical 9.1)
- [CVE-2026-21860](https://insights.sbomify.com/CVE-2026-21860/): Werkzeug safe_join() allows Windows special device names with compound extensions (medium 6.3)
- [CVE-2026-2186](https://insights.sbomify.com/CVE-2026-2186/): Tenda RX3 SetIpMacBind fromSetIpMacBind stack-based overflow (high 8.7)
- [CVE-2026-21859](https://insights.sbomify.com/CVE-2026-21859/): Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF) (medium 5.8)
- [CVE-2026-21858](https://insights.sbomify.com/CVE-2026-21858/): n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling (critical 10.0)
- [CVE-2026-21857](https://insights.sbomify.com/CVE-2026-21857/): Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read (high 8.3)
- [CVE-2026-21856](https://insights.sbomify.com/CVE-2026-21856/): Tarkov Data Manager has Authenticated SQL Injection (high 7.2)
- [CVE-2026-21855](https://insights.sbomify.com/CVE-2026-21855/): Tarkov Data Manager has Unauthenticated Reflected XSS (critical 9.3)
- [CVE-2026-21854](https://insights.sbomify.com/CVE-2026-21854/): Tarkov Data Manager Authentication Bypass vulnerability (critical 9.8)
- [CVE-2026-21853](https://insights.sbomify.com/CVE-2026-21853/): AFFiNE: One-click Remote Code Execution through Custom URL Handling (high 8.8)
- [CVE-2026-21852](https://insights.sbomify.com/CVE-2026-21852/): Claude Code Leaks Data via Malicious Environment Configuration Before Trust Confirmation (medium 5.3)
- [CVE-2026-21851](https://insights.sbomify.com/CVE-2026-21851/): MONAI has Path Traversal (Zip Slip) in NGC Private Bundle Download (medium 5.3)
- [CVE-2026-2185](https://insights.sbomify.com/CVE-2026-2185/): Tenda RX3 MAC Filtering Configuration Endpoint setBlackRule set_device_name stack-based overflow (high 8.7)
- [CVE-2026-21848](https://insights.sbomify.com/CVE-2026-21848/): HCL BigFix Service Management is affected by multiple security vulnerabilities. (medium 5.0)
- [CVE-2026-21840](https://insights.sbomify.com/CVE-2026-21840/): HCL BigFix Platform is affected by a user enumeration vulnerability (low 3.1)
- [CVE-2026-2184](https://insights.sbomify.com/CVE-2026-2184/): Great Developers Certificate Generation System csv.php os command injection (medium 6.9)
- [CVE-2026-21837](https://insights.sbomify.com/CVE-2026-21837/): HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API (high 8.7)
- [CVE-2026-21836](https://insights.sbomify.com/CVE-2026-21836/): HCL DominoIQ is affected by broken access control (medium 6.5)
- [CVE-2026-21833](https://insights.sbomify.com/CVE-2026-21833/): HCL AION is susceptible to a Missing "Content-Security-Policy" header Vulnerability (CVE-2026-21833) (low 3.7)
- [CVE-2026-21832](https://insights.sbomify.com/CVE-2026-21832/): HCL AION is affected by multiple security vulnerabilities. (medium 4.3)
- [CVE-2026-21830](https://insights.sbomify.com/CVE-2026-21830/): HCL BigFix AEX is affected by multiple security vulnerabilities. (low 3.7)
- [CVE-2026-2183](https://insights.sbomify.com/CVE-2026-2183/): Great Developers Certificate Generation System csv.php unrestricted upload (medium 5.3)
- [CVE-2026-21827](https://insights.sbomify.com/CVE-2026-21827/): HCL Connections is vulnerable to an information disclosure vulnerability (low 3.1)
- [CVE-2026-21826](https://insights.sbomify.com/CVE-2026-21826/): HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection (medium 6.1)
- [CVE-2026-21825](https://insights.sbomify.com/CVE-2026-21825/): HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center (medium 6.1)
- [CVE-2026-21824](https://insights.sbomify.com/CVE-2026-21824/): A privilege escalation vulnerability affects HCL Commerce (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/803/