# Vulnerabilities published in 2026 - [CVE-2026-20362](https://insights.sbomify.com/CVE-2026-20362/): Cisco Finesse Server-Side Request Forgery Vulnerability (high 7.2) - [CVE-2026-20361](https://insights.sbomify.com/CVE-2026-20361/): Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection (high 8.8) - [CVE-2026-20360](https://insights.sbomify.com/CVE-2026-20360/): Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Information Exposure & Insecure Handling (high 8.8) - [CVE-2026-2036](https://insights.sbomify.com/CVE-2026-2036/): GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability (high 8.8) - [CVE-2026-20359](https://insights.sbomify.com/CVE-2026-20359/): Cisco Crosswork Security Hardening Release: August 2026 (critical 9.9) - [CVE-2026-20358](https://insights.sbomify.com/CVE-2026-20358/): Cisco Crosswork Security Hardening Release: August 2026 (critical 10.0) - [CVE-2026-20357](https://insights.sbomify.com/CVE-2026-20357/): Cisco Crosswork Security Hardening Release: August 2026 (critical 10.0) - [CVE-2026-20356](https://insights.sbomify.com/CVE-2026-20356/): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (high 7.5) - [CVE-2026-20355](https://insights.sbomify.com/CVE-2026-20355/): Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty (medium 5.9) - [CVE-2026-20354](https://insights.sbomify.com/CVE-2026-20354/): Cisco Secure Email S/MIME Ciphertext Decryption Vulnerabilty (medium 5.9) - [CVE-2026-20353](https://insights.sbomify.com/CVE-2026-20353/): Cisco Secure Email Gateway Security Hardening Release (critical 9.8) - [CVE-2026-20352](https://insights.sbomify.com/CVE-2026-20352/): Cisco Identity Services Engine RADIUS Denial of Service Vulnerability (high 8.6) - [CVE-2026-20350](https://insights.sbomify.com/CVE-2026-20350/): Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability (medium 4.7) - [CVE-2026-2035](https://insights.sbomify.com/CVE-2026-2035/): Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability (medium 6.8) - [CVE-2026-20349](https://insights.sbomify.com/CVE-2026-20349/): Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection (high 8.6, exploited in the wild) - [CVE-2026-20348](https://insights.sbomify.com/CVE-2026-20348/): ClamAV XAR File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20347](https://insights.sbomify.com/CVE-2026-20347/): ClamAV Mach-O File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20346](https://insights.sbomify.com/CVE-2026-20346/): ClamAV PDF File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20345](https://insights.sbomify.com/CVE-2026-20345/): ClamAV GPT File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20344](https://insights.sbomify.com/CVE-2026-20344/): Cisco Secure Firewall Management Center Software SQL Injection Vulnerability (high 8.8) - [CVE-2026-20343](https://insights.sbomify.com/CVE-2026-20343/): Cisco Secure Firewall Management Center Software Information Disclosure and Disk Denial of Service Vulnerability (high 7.5) - [CVE-2026-20342](https://insights.sbomify.com/CVE-2026-20342/): Cisco Secure Firewall Management Center Software Low Privileged Arbitrary File Download Vulnerability (high 7.7) - [CVE-2026-20341](https://insights.sbomify.com/CVE-2026-20341/): Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability (critical 9.1) - [CVE-2026-20340](https://insights.sbomify.com/CVE-2026-20340/): Cisco Secure Firewall Management Center Software Deserialization Arbitrary Root Command Execution Vulnerability (high 8.8) - [CVE-2026-2034](https://insights.sbomify.com/CVE-2026-2034/): Sante DICOM Viewer Pro DCM File Parsing Buffer Overflow Remote Code Execution Vulnerability (high 7.8) - [CVE-2026-20339](https://insights.sbomify.com/CVE-2026-20339/): ClamAV PESpin File Format Processing Integer Overflow Vulnerability (high 7.5) - [CVE-2026-20338](https://insights.sbomify.com/CVE-2026-20338/): ClamAV ZIP File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20337](https://insights.sbomify.com/CVE-2026-20337/): ClamAV ZIP File Format Processing Memory Corruption Vulnerability (high 7.5) - [CVE-2026-20336](https://insights.sbomify.com/CVE-2026-20336/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (high 8.8) - [CVE-2026-20335](https://insights.sbomify.com/CVE-2026-20335/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (high 8.1) - [CVE-2026-20334](https://insights.sbomify.com/CVE-2026-20334/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (high 8.4) - [CVE-2026-20333](https://insights.sbomify.com/CVE-2026-20333/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (high 8.8) - [CVE-2026-20332](https://insights.sbomify.com/CVE-2026-20332/): Missing authorization in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (critical 9.9) - [CVE-2026-20331](https://insights.sbomify.com/CVE-2026-20331/): Security feature bypass in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (critical 9.6) - [CVE-2026-20330](https://insights.sbomify.com/CVE-2026-20330/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (critical 9.9) - [CVE-2026-2033](https://insights.sbomify.com/CVE-2026-2033/): MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability (high 8.1) - [CVE-2026-20329](https://insights.sbomify.com/CVE-2026-20329/): Other in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software (critical 9.9) - [CVE-2026-20328](https://insights.sbomify.com/CVE-2026-20328/): Cisco Smart Software Manager On-Prem Arbitrary Account Password Reset Vulnerability (critical 9.1) - [CVE-2026-20327](https://insights.sbomify.com/CVE-2026-20327/): Cisco Unified Intelligence Center SQL Injection Vulnerability (medium 6.5) - [CVE-2026-20326](https://insights.sbomify.com/CVE-2026-20326/): Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function (critical 9.8) - [CVE-2026-20325](https://insights.sbomify.com/CVE-2026-20325/): Command injection in Cisco Nexus Dashboard (critical 9.9) - [CVE-2026-20324](https://insights.sbomify.com/CVE-2026-20324/): Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability (critical 9.9) - [CVE-2026-20323](https://insights.sbomify.com/CVE-2026-20323/): Auth bypass in Cisco Secure Firewall Management Center (FMC) (high 8.3) - [CVE-2026-20322](https://insights.sbomify.com/CVE-2026-20322/): Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control (critical 9.9) - [CVE-2026-20321](https://insights.sbomify.com/CVE-2026-20321/): Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability (medium 6.5) - [CVE-2026-20320](https://insights.sbomify.com/CVE-2026-20320/): XML external entity in Cisco BroadWorks (high 7.5) - [CVE-2026-2032](https://insights.sbomify.com/CVE-2026-2032/): Interrupted page loads in new tabs could allow website spoofing under trusted domains in Firefox iOS (medium 4.3) - [CVE-2026-20319](https://insights.sbomify.com/CVE-2026-20319/): Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities (high 7.5) - [CVE-2026-20318](https://insights.sbomify.com/CVE-2026-20318/): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities (critical 9.6) - [CVE-2026-20317](https://insights.sbomify.com/CVE-2026-20317/): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities (critical 10.0) - [CVE-2026-20316](https://insights.sbomify.com/CVE-2026-20316/): Cisco Secure Firewall Management Center Use of Hard-coded Password (medium 5.3, exploited in the wild) - [CVE-2026-20315](https://insights.sbomify.com/CVE-2026-20315/): Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities (critical 10.0) - [CVE-2026-20314](https://insights.sbomify.com/CVE-2026-20314/): Server-side request forgery in Cisco Packaged Contact Center Enterprise (medium 5.0) - [CVE-2026-20313](https://insights.sbomify.com/CVE-2026-20313/): Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities (high 7.7) - [CVE-2026-20312](https://insights.sbomify.com/CVE-2026-20312/): Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities (high 8.8) - [CVE-2026-20311](https://insights.sbomify.com/CVE-2026-20311/): Cisco IOS XE Software Web UI Denial of Service Vulnerability (medium 6.3) - [CVE-2026-20310](https://insights.sbomify.com/CVE-2026-20310/): Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access (critical 9.1) - [CVE-2026-2031](https://insights.sbomify.com/CVE-2026-2031/): Google Cloud Application Integration: Exposed internal APIs allow Information Disclosure and Remote Code Execution. (critical 10.0) - [CVE-2026-20309](https://insights.sbomify.com/CVE-2026-20309/): Cisco Identity Services Engine Cross-Site Scripting Vulnerability (medium 6.1) - [CVE-2026-20308](https://insights.sbomify.com/CVE-2026-20308/): Cisco IOS XE Software Web-Based Management Interface Vulnerability (medium 4.3) - [CVE-2026-20307](https://insights.sbomify.com/CVE-2026-20307/): Cisco Identity Services Engine Remote Code Execution Vulnerability (critical 9.9) - [CVE-2026-20306](https://insights.sbomify.com/CVE-2026-20306/): Cisco Identity Services Engine Command Injection Vulnerability (critical 9.1) - [CVE-2026-20305](https://insights.sbomify.com/CVE-2026-20305/): Cisco Identity Services Engine Command Injection Vulnerability (critical 9.1) - [CVE-2026-20304](https://insights.sbomify.com/CVE-2026-20304/): Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities (critical 9.9) - [CVE-2026-20303](https://insights.sbomify.com/CVE-2026-20303/): Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities (critical 9.9) - [CVE-2026-20302](https://insights.sbomify.com/CVE-2026-20302/): Cisco RoomOS Stack Overflow Vulnerability (medium 6.1) - [CVE-2026-20301](https://insights.sbomify.com/CVE-2026-20301/): Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability (high 8.6) - [CVE-2026-20300](https://insights.sbomify.com/CVE-2026-20300/): Cisco Identity Services Engine SQL Injection Vulnerability (high 7.1) - [CVE-2026-2030](https://insights.sbomify.com/CVE-2026-2030/): Cross-site scripting in WPBakery Page Builder Addons by Livemesh (medium 6.4) - [CVE-2026-20298](https://insights.sbomify.com/CVE-2026-20298/): Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise (medium 5.3) - [CVE-2026-20297](https://insights.sbomify.com/CVE-2026-20297/): Path Traversal through 'explicit_appname' in the App Install REST Endpoint in Splunk Enterprise (high 7.2) - [CVE-2026-20296](https://insights.sbomify.com/CVE-2026-20296/): SPL Command Safeguards Bypass through Cross-Site Request Forgery (CSRF) in Deployment Server in Splunk Enterprise (high 8.3) - [CVE-2026-20295](https://insights.sbomify.com/CVE-2026-20295/): Denial of service in Cisco Secure Firewall Management Center (FMC) (high 8.6) - [CVE-2026-20294](https://insights.sbomify.com/CVE-2026-20294/): Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability (medium 6.5) - [CVE-2026-20293](https://insights.sbomify.com/CVE-2026-20293/): Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability (high 7.1) - [CVE-2026-20291](https://insights.sbomify.com/CVE-2026-20291/): Multiple Cisco Products Snort 3 Software Hardening Release: October 2026 (high 7.8) - [CVE-2026-20290](https://insights.sbomify.com/CVE-2026-20290/): Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability (medium 5.8) - [CVE-2026-2029](https://insights.sbomify.com/CVE-2026-2029/): Cross-site scripting in Livemesh Addons for Beaver Builder (medium 6.4) - [CVE-2026-20289](https://insights.sbomify.com/CVE-2026-20289/): Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability (medium 5.7) - [CVE-2026-20288](https://insights.sbomify.com/CVE-2026-20288/): Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability (medium 6.5) - [CVE-2026-20287](https://insights.sbomify.com/CVE-2026-20287/): Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities (medium 6.5) - [CVE-2026-20286](https://insights.sbomify.com/CVE-2026-20286/): Cisco Identity Services Engine Authorization Bypass Vulnerability (medium 4.3) - [CVE-2026-20285](https://insights.sbomify.com/CVE-2026-20285/): Cisco Identity Services Engine Authorization Bypass Vulnerability (medium 4.3) - [CVE-2026-20284](https://insights.sbomify.com/CVE-2026-20284/): Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability (critical 9.1) - [CVE-2026-20283](https://insights.sbomify.com/CVE-2026-20283/): Cisco Identity Services Engine IPSec Open API Command Injection Vulnerability (medium 6.5) - [CVE-2026-20282](https://insights.sbomify.com/CVE-2026-20282/): Cisco Identity Services Engine Authenticated Write Vulnerability (medium 4.9) - [CVE-2026-20281](https://insights.sbomify.com/CVE-2026-20281/): Denial of service in Cisco Session Initiation Protocol (SIP) Software (high 7.5) - [CVE-2026-20280](https://insights.sbomify.com/CVE-2026-20280/): Cisco IOS XR Software Security Hardening Release: September 2026 (high 8.8) - [CVE-2026-2028](https://insights.sbomify.com/CVE-2026-2028/): Missing authorization in MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites (medium 5.3) - [CVE-2026-20279](https://insights.sbomify.com/CVE-2026-20279/): Cisco IOS XR Software Security Hardening Release: September 2026 (critical 9.8) - [CVE-2026-20278](https://insights.sbomify.com/CVE-2026-20278/): Cisco IOS XR Software Security Hardening Release: September 2026 (high 8.8) - [CVE-2026-20277](https://insights.sbomify.com/CVE-2026-20277/): Cisco IOS XR Software Security Hardening Release: September 2026 (high 8.2) - [CVE-2026-20276](https://insights.sbomify.com/CVE-2026-20276/): Cisco IOS XR Software Security Hardening Release: September 2026 (high 8.6) - [CVE-2026-20275](https://insights.sbomify.com/CVE-2026-20275/): Cisco IOS XR Software Security Hardening Release: September 2026 (high 8.8) - [CVE-2026-20274](https://insights.sbomify.com/CVE-2026-20274/): Cisco IOS XR Software Security Hardening Release: September 2026 (critical 9.8) - [CVE-2026-20273](https://insights.sbomify.com/CVE-2026-20273/): Cisco IOS XE Software Security Hardening Release (high 8.6) - [CVE-2026-20272](https://insights.sbomify.com/CVE-2026-20272/): Cisco IOS XE Software Security Hardening Release (critical 9.8) - [CVE-2026-20271](https://insights.sbomify.com/CVE-2026-20271/): Cisco IOS XE Software Security Hardening Release (high 8.6) - [CVE-2026-20270](https://insights.sbomify.com/CVE-2026-20270/): Cisco IOS XE Software Security Hardening Release (high 8.6) - [CVE-2026-2027](https://insights.sbomify.com/CVE-2026-2027/): AMP Enhancer <= 1.0.49 - Authenticated (Administrator+) Stored Cross-Site Scripting via AMP Custom CSS Setting (medium 4.4) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/816/