# Vulnerabilities published in 2026


- [CVE-2026-20630](https://insights.sbomify.com/CVE-2026-20630/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-2063](https://insights.sbomify.com/CVE-2026-2063/): D-Link DIR-823X Web Management set_ac_server os command injection (medium 5.1)
- [CVE-2026-20629](https://insights.sbomify.com/CVE-2026-20629/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-20628](https://insights.sbomify.com/CVE-2026-20628/): Security feature bypass in iOS and iPadOS (high 7.1)
- [CVE-2026-20627](https://insights.sbomify.com/CVE-2026-20627/): Information disclosure in iOS and iPadOS (medium 5.5)
- [CVE-2026-20626](https://insights.sbomify.com/CVE-2026-20626/): Missing authorization in iOS and iPadOS (high 7.8)
- [CVE-2026-20625](https://insights.sbomify.com/CVE-2026-20625/): Path traversal in macOS (medium 5.5)
- [CVE-2026-20624](https://insights.sbomify.com/CVE-2026-20624/): Security feature bypass in macOS (medium 5.5)
- [CVE-2026-20623](https://insights.sbomify.com/CVE-2026-20623/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-20622](https://insights.sbomify.com/CVE-2026-20622/): Information disclosure in macOS (high 7.5)
- [CVE-2026-20621](https://insights.sbomify.com/CVE-2026-20621/): Memory corruption in iOS and iPadOS (medium 5.5)
- [CVE-2026-20620](https://insights.sbomify.com/CVE-2026-20620/): Memory corruption in macOS (high 7.7)
- [CVE-2026-2062](https://insights.sbomify.com/CVE-2026-2062/): Open5GS PGW S5U Address sgwc_sxa_handle_session_modification_response null pointer dereference (medium 6.9)
- [CVE-2026-20619](https://insights.sbomify.com/CVE-2026-20619/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-20618](https://insights.sbomify.com/CVE-2026-20618/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-20617](https://insights.sbomify.com/CVE-2026-20617/): Race condition in iOS and iPadOS (high 7.0)
- [CVE-2026-20616](https://insights.sbomify.com/CVE-2026-20616/): Memory corruption in iOS and iPadOS (high 8.8)
- [CVE-2026-20615](https://insights.sbomify.com/CVE-2026-20615/): Path traversal in iOS and iPadOS (high 7.8)
- [CVE-2026-20614](https://insights.sbomify.com/CVE-2026-20614/): Path traversal in macOS (high 7.8)
- [CVE-2026-20613](https://insights.sbomify.com/CVE-2026-20613/): Container and Containerization archive extraction does not guard against escapes from extraction base directory. (high 7.8)
- [CVE-2026-20612](https://insights.sbomify.com/CVE-2026-20612/): Information disclosure in macOS (medium 5.5)
- [CVE-2026-20611](https://insights.sbomify.com/CVE-2026-20611/): Memory corruption in iOS and iPadOS (high 7.8)
- [CVE-2026-20610](https://insights.sbomify.com/CVE-2026-20610/): Privilege escalation in macOS (high 7.8)
- [CVE-2026-2061](https://insights.sbomify.com/CVE-2026-2061/): D-Link DIR-823X set_ipv6 sub_424D20 os command injection (medium 5.1)
- [CVE-2026-20609](https://insights.sbomify.com/CVE-2026-20609/): Memory corruption in iOS and iPadOS (medium 4.4)
- [CVE-2026-20608](https://insights.sbomify.com/CVE-2026-20608/): Memory corruption in Safari (medium 5.5)
- [CVE-2026-20607](https://insights.sbomify.com/CVE-2026-20607/): Privilege escalation in macOS (medium 4.0)
- [CVE-2026-20606](https://insights.sbomify.com/CVE-2026-20606/): Security feature bypass in iOS and iPadOS (high 7.1)
- [CVE-2026-20605](https://insights.sbomify.com/CVE-2026-20605/): Memory corruption in iOS and iPadOS (medium 4.6)
- [CVE-2026-20603](https://insights.sbomify.com/CVE-2026-20603/): Information disclosure in macOS (medium 4.4)
- [CVE-2026-20602](https://insights.sbomify.com/CVE-2026-20602/): Denial of service in macOS (medium 5.5)
- [CVE-2026-20601](https://insights.sbomify.com/CVE-2026-20601/): Missing authorization in macOS (low 3.3)
- [CVE-2026-2060](https://insights.sbomify.com/CVE-2026-2060/): code-projects Simple Blood Donor Management System editcampaignform.php sql injection (medium 6.9)
- [CVE-2026-2059](https://insights.sbomify.com/CVE-2026-2059/): SourceCodester Medical Center Portal Management System emp_edit1.php sql injection (medium 6.9)
- [CVE-2026-20589](https://insights.sbomify.com/CVE-2026-20589/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20588](https://insights.sbomify.com/CVE-2026-20588/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20587](https://insights.sbomify.com/CVE-2026-20587/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20586](https://insights.sbomify.com/CVE-2026-20586/): Memory corruption in MediaTek chipset (high 8.8)
- [CVE-2026-2058](https://insights.sbomify.com/CVE-2026-2058/): mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection (medium 6.9)
- [CVE-2026-20579](https://insights.sbomify.com/CVE-2026-20579/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-2057](https://insights.sbomify.com/CVE-2026-2057/): SourceCodester Medical Center Portal Management System login.php sql injection (medium 6.9)
- [CVE-2026-2056](https://insights.sbomify.com/CVE-2026-2056/): D-Link DIR-605L/DIR-619L DHCP Connection Status wan_connection_status.asp information disclosure (medium 6.9)
- [CVE-2026-2055](https://insights.sbomify.com/CVE-2026-2055/): D-Link DIR-605L/DIR-619L DHCP Client Information information disclosure (medium 6.9)
- [CVE-2026-20544](https://insights.sbomify.com/CVE-2026-20544/): Memory corruption in MediaTek chipset (medium 6.8)
- [CVE-2026-20543](https://insights.sbomify.com/CVE-2026-20543/): Information disclosure in MediaTek chipset (medium 5.5)
- [CVE-2026-20542](https://insights.sbomify.com/CVE-2026-20542/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20541](https://insights.sbomify.com/CVE-2026-20541/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20540](https://insights.sbomify.com/CVE-2026-20540/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-2054](https://insights.sbomify.com/CVE-2026-2054/): D-Link DIR-605L/DIR-619L Wifi Setting information disclosure (medium 6.9)
- [CVE-2026-20539](https://insights.sbomify.com/CVE-2026-20539/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20538](https://insights.sbomify.com/CVE-2026-20538/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20537](https://insights.sbomify.com/CVE-2026-20537/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20536](https://insights.sbomify.com/CVE-2026-20536/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20535](https://insights.sbomify.com/CVE-2026-20535/): Missing authorization in MediaTek chipset (medium 6.7)
- [CVE-2026-20534](https://insights.sbomify.com/CVE-2026-20534/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20533](https://insights.sbomify.com/CVE-2026-20533/): Integer overflow in MediaTek chipset (medium 6.7)
- [CVE-2026-20532](https://insights.sbomify.com/CVE-2026-20532/): Memory corruption in MediaTek chipset (medium 6.2)
- [CVE-2026-20531](https://insights.sbomify.com/CVE-2026-20531/): Use after free in MediaTek chipset (high 8.4)
- [CVE-2026-20530](https://insights.sbomify.com/CVE-2026-20530/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-2053](https://insights.sbomify.com/CVE-2026-2053/): Unauthenticated Server-Side Request Forgery via WS-Addressing in WSO2 API Manager (high 8.3)
- [CVE-2026-20529](https://insights.sbomify.com/CVE-2026-20529/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20528](https://insights.sbomify.com/CVE-2026-20528/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20527](https://insights.sbomify.com/CVE-2026-20527/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20526](https://insights.sbomify.com/CVE-2026-20526/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-20525](https://insights.sbomify.com/CVE-2026-20525/): Denial of service in MediaTek chipset (medium 5.3)
- [CVE-2026-20524](https://insights.sbomify.com/CVE-2026-20524/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20523](https://insights.sbomify.com/CVE-2026-20523/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20522](https://insights.sbomify.com/CVE-2026-20522/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20521](https://insights.sbomify.com/CVE-2026-20521/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20520](https://insights.sbomify.com/CVE-2026-20520/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-2052](https://insights.sbomify.com/CVE-2026-2052/): Widget Options <= 4.2.2 - Authenticated (Contributor+) Remote Code Execution via Display Logic (high 8.8)
- [CVE-2026-20519](https://insights.sbomify.com/CVE-2026-20519/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-20518](https://insights.sbomify.com/CVE-2026-20518/): Information disclosure in MediaTek chipset (medium 4.4)
- [CVE-2026-20517](https://insights.sbomify.com/CVE-2026-20517/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20516](https://insights.sbomify.com/CVE-2026-20516/): Privilege escalation in MediaTek chipset (medium 5.5)
- [CVE-2026-20515](https://insights.sbomify.com/CVE-2026-20515/): Use after free in MediaTek chipset (medium 5.5)
- [CVE-2026-20514](https://insights.sbomify.com/CVE-2026-20514/): Missing authorization in MediaTek chipset (medium 4.4)
- [CVE-2026-20513](https://insights.sbomify.com/CVE-2026-20513/): Information disclosure in MediaTek chipset (medium 4.4)
- [CVE-2026-20512](https://insights.sbomify.com/CVE-2026-20512/): Privilege escalation in MediaTek chipset (medium 6.7)
- [CVE-2026-20511](https://insights.sbomify.com/CVE-2026-20511/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20510](https://insights.sbomify.com/CVE-2026-20510/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20509](https://insights.sbomify.com/CVE-2026-20509/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20508](https://insights.sbomify.com/CVE-2026-20508/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20507](https://insights.sbomify.com/CVE-2026-20507/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20506](https://insights.sbomify.com/CVE-2026-20506/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20504](https://insights.sbomify.com/CVE-2026-20504/): Denial of service in MediaTek chipset (medium 5.3)
- [CVE-2026-20503](https://insights.sbomify.com/CVE-2026-20503/): Denial of service in MediaTek chipset (medium 5.3)
- [CVE-2026-20502](https://insights.sbomify.com/CVE-2026-20502/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20501](https://insights.sbomify.com/CVE-2026-20501/): Memory corruption in MediaTek chipset (high 8.4)
- [CVE-2026-20500](https://insights.sbomify.com/CVE-2026-20500/): Denial of service in MediaTek chipset (medium 5.5)
- [CVE-2026-2050](https://insights.sbomify.com/CVE-2026-2050/): GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20498](https://insights.sbomify.com/CVE-2026-20498/): Missing authorization in MediaTek chipset (medium 6.0)
- [CVE-2026-20497](https://insights.sbomify.com/CVE-2026-20497/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20496](https://insights.sbomify.com/CVE-2026-20496/): Memory corruption in MediaTek chipset (medium 4.4)
- [CVE-2026-20495](https://insights.sbomify.com/CVE-2026-20495/): Missing authorization in MediaTek chipset (high 7.8)
- [CVE-2026-20494](https://insights.sbomify.com/CVE-2026-20494/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-20493](https://insights.sbomify.com/CVE-2026-20493/): Memory corruption in MediaTek chipset (medium 4.4)
- [CVE-2026-20492](https://insights.sbomify.com/CVE-2026-20492/): Race condition in MediaTek chipset (medium 5.5)
- [CVE-2026-20491](https://insights.sbomify.com/CVE-2026-20491/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-20490](https://insights.sbomify.com/CVE-2026-20490/): Memory corruption in MediaTek chipset (medium 4.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/814/