# Vulnerabilities published in 2026


- [CVE-2026-2049](https://insights.sbomify.com/CVE-2026-2049/): GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20489](https://insights.sbomify.com/CVE-2026-20489/): Integer overflow in MediaTek chipset (medium 4.4)
- [CVE-2026-20488](https://insights.sbomify.com/CVE-2026-20488/): Information disclosure in MediaTek chipset (medium 4.4)
- [CVE-2026-20486](https://insights.sbomify.com/CVE-2026-20486/): Denial of service in MediaTek chipset (medium 6.7)
- [CVE-2026-20485](https://insights.sbomify.com/CVE-2026-20485/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20484](https://insights.sbomify.com/CVE-2026-20484/): Missing authorization in MediaTek chipset (medium 4.4)
- [CVE-2026-20483](https://insights.sbomify.com/CVE-2026-20483/): Missing authorization in MediaTek chipset (high 7.7)
- [CVE-2026-20482](https://insights.sbomify.com/CVE-2026-20482/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20481](https://insights.sbomify.com/CVE-2026-20481/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20480](https://insights.sbomify.com/CVE-2026-20480/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-2048](https://insights.sbomify.com/CVE-2026-2048/): GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20479](https://insights.sbomify.com/CVE-2026-20479/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-20478](https://insights.sbomify.com/CVE-2026-20478/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-20477](https://insights.sbomify.com/CVE-2026-20477/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20476](https://insights.sbomify.com/CVE-2026-20476/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-20475](https://insights.sbomify.com/CVE-2026-20475/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20474](https://insights.sbomify.com/CVE-2026-20474/): Race condition in MediaTek chipset (medium 6.0)
- [CVE-2026-20473](https://insights.sbomify.com/CVE-2026-20473/): Use after free in MediaTek chipset (medium 6.0)
- [CVE-2026-20472](https://insights.sbomify.com/CVE-2026-20472/): Memory corruption in MediaTek chipset (medium 4.4)
- [CVE-2026-20471](https://insights.sbomify.com/CVE-2026-20471/): Memory corruption in MediaTek chipset (medium 4.6)
- [CVE-2026-20470](https://insights.sbomify.com/CVE-2026-20470/): Missing authorization in MediaTek chipset (medium 6.2)
- [CVE-2026-2047](https://insights.sbomify.com/CVE-2026-2047/): GIMP ICNS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20469](https://insights.sbomify.com/CVE-2026-20469/): Privilege escalation in MediaTek chipset (medium 6.0)
- [CVE-2026-20468](https://insights.sbomify.com/CVE-2026-20468/): Privilege escalation in MediaTek chipset (medium 6.0)
- [CVE-2026-20467](https://insights.sbomify.com/CVE-2026-20467/): Memory corruption in MediaTek chipset (medium 6.0)
- [CVE-2026-20466](https://insights.sbomify.com/CVE-2026-20466/): Memory corruption in MediaTek chipset (medium 6.1)
- [CVE-2026-20465](https://insights.sbomify.com/CVE-2026-20465/): Memory corruption in MediaTek chipset (high 8.1)
- [CVE-2026-20464](https://insights.sbomify.com/CVE-2026-20464/): Integer overflow in MediaTek chipset (medium 6.5)
- [CVE-2026-20463](https://insights.sbomify.com/CVE-2026-20463/): Privilege escalation in MediaTek chipset (medium 6.7)
- [CVE-2026-20462](https://insights.sbomify.com/CVE-2026-20462/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20461](https://insights.sbomify.com/CVE-2026-20461/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20460](https://insights.sbomify.com/CVE-2026-20460/): Information disclosure in MediaTek chipset (medium 5.3)
- [CVE-2026-20459](https://insights.sbomify.com/CVE-2026-20459/): Denial of service in MediaTek chipset (medium 5.3)
- [CVE-2026-20458](https://insights.sbomify.com/CVE-2026-20458/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-20457](https://insights.sbomify.com/CVE-2026-20457/): Null dereference in MediaTek chipset (medium 5.3)
- [CVE-2026-20456](https://insights.sbomify.com/CVE-2026-20456/): Memory corruption in MediaTek chipset (medium 5.5)
- [CVE-2026-20455](https://insights.sbomify.com/CVE-2026-20455/): Memory corruption in MediaTek chipset (high 7.8)
- [CVE-2026-20454](https://insights.sbomify.com/CVE-2026-20454/): Race condition in MediaTek chipset (medium 6.4)
- [CVE-2026-20453](https://insights.sbomify.com/CVE-2026-20453/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20452](https://insights.sbomify.com/CVE-2026-20452/): Memory corruption in MediaTek chipset (high 8.0)
- [CVE-2026-20451](https://insights.sbomify.com/CVE-2026-20451/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20450](https://insights.sbomify.com/CVE-2026-20450/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-2045](https://insights.sbomify.com/CVE-2026-2045/): GIMP XWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20449](https://insights.sbomify.com/CVE-2026-20449/): Memory corruption in MediaTek chipset (medium 6.5)
- [CVE-2026-20448](https://insights.sbomify.com/CVE-2026-20448/): Missing authorization in MediaTek chipset (medium 6.7)
- [CVE-2026-20447](https://insights.sbomify.com/CVE-2026-20447/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20446](https://insights.sbomify.com/CVE-2026-20446/): Integer overflow in MediaTek chipset (medium 4.3)
- [CVE-2026-20445](https://insights.sbomify.com/CVE-2026-20445/): Race condition in MediaTek chipset (medium 4.4)
- [CVE-2026-20444](https://insights.sbomify.com/CVE-2026-20444/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20443](https://insights.sbomify.com/CVE-2026-20443/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20442](https://insights.sbomify.com/CVE-2026-20442/): Use after free in MediaTek chipset (medium 4.4)
- [CVE-2026-20441](https://insights.sbomify.com/CVE-2026-20441/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20440](https://insights.sbomify.com/CVE-2026-20440/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-2044](https://insights.sbomify.com/CVE-2026-2044/): GIMP PGM File Parsing Uninitialized Memory Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20439](https://insights.sbomify.com/CVE-2026-20439/): Use after free in MediaTek chipset (medium 4.4)
- [CVE-2026-20438](https://insights.sbomify.com/CVE-2026-20438/): Race condition in MediaTek chipset (medium 6.4)
- [CVE-2026-20437](https://insights.sbomify.com/CVE-2026-20437/): Use after free in MediaTek chipset (medium 4.4)
- [CVE-2026-20436](https://insights.sbomify.com/CVE-2026-20436/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20435](https://insights.sbomify.com/CVE-2026-20435/): Information disclosure in MediaTek chipset (medium 4.6)
- [CVE-2026-20434](https://insights.sbomify.com/CVE-2026-20434/): Memory corruption in MediaTek chipset (high 7.5)
- [CVE-2026-20433](https://insights.sbomify.com/CVE-2026-20433/): Memory corruption in MediaTek chipset (high 8.8)
- [CVE-2026-20432](https://insights.sbomify.com/CVE-2026-20432/): Memory corruption in MediaTek chipset (high 8.0)
- [CVE-2026-20431](https://insights.sbomify.com/CVE-2026-20431/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20430](https://insights.sbomify.com/CVE-2026-20430/): Memory corruption in MediaTek chipset (high 8.8)
- [CVE-2026-2043](https://insights.sbomify.com/CVE-2026-2043/): Nagios Host esensors_websensor_configwizard_func Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-20429](https://insights.sbomify.com/CVE-2026-20429/): Memory corruption in MediaTek chipset (medium 4.4)
- [CVE-2026-20428](https://insights.sbomify.com/CVE-2026-20428/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20427](https://insights.sbomify.com/CVE-2026-20427/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20426](https://insights.sbomify.com/CVE-2026-20426/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20425](https://insights.sbomify.com/CVE-2026-20425/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20424](https://insights.sbomify.com/CVE-2026-20424/): Memory corruption in MediaTek chipset (medium 4.4)
- [CVE-2026-20423](https://insights.sbomify.com/CVE-2026-20423/): Memory corruption in MediaTek chipset (high 7.8)
- [CVE-2026-20422](https://insights.sbomify.com/CVE-2026-20422/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20421](https://insights.sbomify.com/CVE-2026-20421/): Memory corruption in MediaTek chipset (medium 6.5)
- [CVE-2026-20420](https://insights.sbomify.com/CVE-2026-20420/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-2042](https://insights.sbomify.com/CVE-2026-2042/): Nagios Host monitoringwizard Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-20419](https://insights.sbomify.com/CVE-2026-20419/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20418](https://insights.sbomify.com/CVE-2026-20418/): Memory corruption in MediaTek chipset (critical 9.8)
- [CVE-2026-20417](https://insights.sbomify.com/CVE-2026-20417/): Memory corruption in MediaTek chipset (medium 5.3)
- [CVE-2026-20416](https://insights.sbomify.com/CVE-2026-20416/): Memory corruption in MediaTek chipset (high 7.2)
- [CVE-2026-20415](https://insights.sbomify.com/CVE-2026-20415/): Race condition in MediaTek chipset (medium 5.5)
- [CVE-2026-20414](https://insights.sbomify.com/CVE-2026-20414/): Use after free in MediaTek chipset (medium 6.7)
- [CVE-2026-20413](https://insights.sbomify.com/CVE-2026-20413/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-20412](https://insights.sbomify.com/CVE-2026-20412/): Memory corruption in MediaTek chipset (high 7.8)
- [CVE-2026-20411](https://insights.sbomify.com/CVE-2026-20411/): Use after free in MediaTek chipset (high 7.8)
- [CVE-2026-20410](https://insights.sbomify.com/CVE-2026-20410/): Memory corruption in MediaTek chipset (medium 6.7)
- [CVE-2026-2041](https://insights.sbomify.com/CVE-2026-2041/): Nagios Host zabbixagent_configwizard_func Command Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-20409](https://insights.sbomify.com/CVE-2026-20409/): Memory corruption in MediaTek chipset (high 7.8)
- [CVE-2026-20408](https://insights.sbomify.com/CVE-2026-20408/): Memory corruption in MediaTek chipset (high 8.8)
- [CVE-2026-20407](https://insights.sbomify.com/CVE-2026-20407/): Memory corruption in MediaTek chipset (critical 9.3)
- [CVE-2026-20406](https://insights.sbomify.com/CVE-2026-20406/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20405](https://insights.sbomify.com/CVE-2026-20405/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-20404](https://insights.sbomify.com/CVE-2026-20404/): Memory corruption in MediaTek chipset (medium 6.5)
- [CVE-2026-20403](https://insights.sbomify.com/CVE-2026-20403/): Memory corruption in MediaTek chipset (medium 6.5)
- [CVE-2026-20402](https://insights.sbomify.com/CVE-2026-20402/): Memory corruption in MediaTek chipset (medium 6.5)
- [CVE-2026-20401](https://insights.sbomify.com/CVE-2026-20401/): Denial of service in MediaTek chipset (medium 6.5)
- [CVE-2026-2040](https://insights.sbomify.com/CVE-2026-2040/): PDF-XChange Editor TrackerUpdate Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (high 7.3)
- [CVE-2026-2039](https://insights.sbomify.com/CVE-2026-2039/): GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability (high 7.3)
- [CVE-2026-2038](https://insights.sbomify.com/CVE-2026-2038/): GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability (high 7.3)
- [CVE-2026-2037](https://insights.sbomify.com/CVE-2026-2037/): GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/815/