# Vulnerabilities published in 2026 - [CVE-2026-16944](https://insights.sbomify.com/CVE-2026-16944/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 6.7) - [CVE-2026-16943](https://insights.sbomify.com/CVE-2026-16943/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.2) - [CVE-2026-16942](https://insights.sbomify.com/CVE-2026-16942/): WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS (medium 5.4) - [CVE-2026-16941](https://insights.sbomify.com/CVE-2026-16941/): IBM i is Affected By An Incorrect Authorization Vulnerability [] (medium 4.3) - [CVE-2026-16940](https://insights.sbomify.com/CVE-2026-16940/): Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal (critical 10.0) - [CVE-2026-1694](https://insights.sbomify.com/CVE-2026-1694/): Server configuration details in HTTP headers (low 2.3) - [CVE-2026-16938](https://insights.sbomify.com/CVE-2026-16938/): Power System Missing Authorization (medium 6.9) - [CVE-2026-16937](https://insights.sbomify.com/CVE-2026-16937/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16936](https://insights.sbomify.com/CVE-2026-16936/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16935](https://insights.sbomify.com/CVE-2026-16935/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16934](https://insights.sbomify.com/CVE-2026-16934/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16933](https://insights.sbomify.com/CVE-2026-16933/): Power System Integer Overflow (high 8.2) - [CVE-2026-16932](https://insights.sbomify.com/CVE-2026-16932/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16931](https://insights.sbomify.com/CVE-2026-16931/): IBM i is Affected By A Denial of Service Vulnerability [] (high 7.5) - [CVE-2026-16930](https://insights.sbomify.com/CVE-2026-16930/): Power System Missing Authorization (high 8.2) - [CVE-2026-1693](https://insights.sbomify.com/CVE-2026-1693/): Use of vulnerable Resource Owner Password Credentials flow (medium 5.3) - [CVE-2026-16929](https://insights.sbomify.com/CVE-2026-16929/): IBM i is Affected By Multiple Vulnerabilities in Host Servers (medium 5.3) - [CVE-2026-16928](https://insights.sbomify.com/CVE-2026-16928/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.5) - [CVE-2026-16927](https://insights.sbomify.com/CVE-2026-16927/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.3) - [CVE-2026-16926](https://insights.sbomify.com/CVE-2026-16926/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.1) - [CVE-2026-16925](https://insights.sbomify.com/CVE-2026-16925/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.1) - [CVE-2026-16924](https://insights.sbomify.com/CVE-2026-16924/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.5) - [CVE-2026-16923](https://insights.sbomify.com/CVE-2026-16923/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.0) - [CVE-2026-16922](https://insights.sbomify.com/CVE-2026-16922/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.0) - [CVE-2026-1692](https://insights.sbomify.com/CVE-2026-1692/): Missing origin validation in GraphicalData web service requests (medium 5.3) - [CVE-2026-16919](https://insights.sbomify.com/CVE-2026-16919/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16917](https://insights.sbomify.com/CVE-2026-16917/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16916](https://insights.sbomify.com/CVE-2026-16916/): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (critical 9.1) - [CVE-2026-16915](https://insights.sbomify.com/CVE-2026-16915/): IBM Db2 Mirror for i is affected by multiple vulnerabilities (high 7.5) - [CVE-2026-16914](https://insights.sbomify.com/CVE-2026-16914/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 6.7) - [CVE-2026-16913](https://insights.sbomify.com/CVE-2026-16913/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16911](https://insights.sbomify.com/CVE-2026-16911/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16910](https://insights.sbomify.com/CVE-2026-16910/): Quay: ssrf in red hat quay notification webhooks (slack/generic) (medium 5.5) - [CVE-2026-1691](https://insights.sbomify.com/CVE-2026-1691/): bolo-solo SnakeYAML BackupService.java importMarkdownsSync deserialization (medium 5.3) - [CVE-2026-16909](https://insights.sbomify.com/CVE-2026-16909/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16908](https://insights.sbomify.com/CVE-2026-16908/): IBM i is Affected By Multiple SQL Vulnerabilities [, ] (high 8.5) - [CVE-2026-16907](https://insights.sbomify.com/CVE-2026-16907/): IBM i is Affected By Multiple Vulnerabilities in the Debug Server (high 7.6) - [CVE-2026-16906](https://insights.sbomify.com/CVE-2026-16906/): IBM i is Affected By Multiple Vulnerabilities in Domain Name System (high 8.8) - [CVE-2026-16905](https://insights.sbomify.com/CVE-2026-16905/): IBM Db2 Mirror for i is affected by multiple vulnerabilities (medium 5.3) - [CVE-2026-16904](https://insights.sbomify.com/CVE-2026-16904/): IBM i is Affected By improper privilege management in Navigator for i (high 8.1) - [CVE-2026-16903](https://insights.sbomify.com/CVE-2026-16903/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.6) - [CVE-2026-16901](https://insights.sbomify.com/CVE-2026-16901/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-1690](https://insights.sbomify.com/CVE-2026-1690/): Tenda HG10 formSysCmd system command injection (medium 5.1) - [CVE-2026-16898](https://insights.sbomify.com/CVE-2026-16898/): IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service (high 7.8) - [CVE-2026-16897](https://insights.sbomify.com/CVE-2026-16897/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 4.4) - [CVE-2026-16896](https://insights.sbomify.com/CVE-2026-16896/): IBM i is Affected By Multiple Vulnerabilities in Network Authentication Service (high 7.1) - [CVE-2026-16895](https://insights.sbomify.com/CVE-2026-16895/): Authentication Bypass in Metasploit JSON-RPC Service When DB Health Check Fails (medium 5.1) - [CVE-2026-16894](https://insights.sbomify.com/CVE-2026-16894/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16892](https://insights.sbomify.com/CVE-2026-16892/): IBM i is Affected By An Improper Authentication Vulnerability in Network Authentication Service [] (medium 5.4) - [CVE-2026-16891](https://insights.sbomify.com/CVE-2026-16891/): Vulnerabilities in IBM AIX and PowerVM VIOS (low 3.3) - [CVE-2026-16890](https://insights.sbomify.com/CVE-2026-16890/): Vulnerabilities in IBM AIX and PowerVM VIOS (low 3.6) - [CVE-2026-1689](https://insights.sbomify.com/CVE-2026-1689/): Tenda HG10 Login formLogin checkUserFromLanOrWan command injection (medium 6.9) - [CVE-2026-16889](https://insights.sbomify.com/CVE-2026-16889/): Stored XSS via Pre-Login Notice Image Upload Serves Attacker HTML from Application Origin (medium 4.8) - [CVE-2026-16888](https://insights.sbomify.com/CVE-2026-16888/): Vulnerabilities in IBM AIX and PowerVM VIOS (low 3.7) - [CVE-2026-16887](https://insights.sbomify.com/CVE-2026-16887/): IBM i is Affected By A Denial of Service Vulnerability DST/SST [] (high 7.5) - [CVE-2026-16886](https://insights.sbomify.com/CVE-2026-16886/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 4.3) - [CVE-2026-16885](https://insights.sbomify.com/CVE-2026-16885/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16883](https://insights.sbomify.com/CVE-2026-16883/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 5.5) - [CVE-2026-16882](https://insights.sbomify.com/CVE-2026-16882/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16881](https://insights.sbomify.com/CVE-2026-16881/): Code injection in LINE client for Android (high 8.7) - [CVE-2026-1688](https://insights.sbomify.com/CVE-2026-1688/): itsourcecode Directory Management System index.php sql injection (medium 6.9) - [CVE-2026-16879](https://insights.sbomify.com/CVE-2026-16879/): IBM Db2 Mirror for i is affected by multiple vulnerabilities (high 8.8) - [CVE-2026-16878](https://insights.sbomify.com/CVE-2026-16878/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 5.4) - [CVE-2026-16877](https://insights.sbomify.com/CVE-2026-16877/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16876](https://insights.sbomify.com/CVE-2026-16876/): Auth bypass in UNIVERGE IX-R/IX-V (critical 9.3) - [CVE-2026-16875](https://insights.sbomify.com/CVE-2026-16875/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16874](https://insights.sbomify.com/CVE-2026-16874/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16873](https://insights.sbomify.com/CVE-2026-16873/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16872](https://insights.sbomify.com/CVE-2026-16872/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16871](https://insights.sbomify.com/CVE-2026-16871/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 4.3) - [CVE-2026-16870](https://insights.sbomify.com/CVE-2026-16870/): Multiple Security Vulnerabilities in Snowflake libsnowflakeclient (high 8.8) - [CVE-2026-1687](https://insights.sbomify.com/CVE-2026-1687/): Tenda HG10 Boa Webserver formSamba command injection (medium 6.9) - [CVE-2026-16869](https://insights.sbomify.com/CVE-2026-16869/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.8) - [CVE-2026-16868](https://insights.sbomify.com/CVE-2026-16868/): IBM i is Affected By Multiple Vulnerabilities in NetServer (high 8.1) - [CVE-2026-16867](https://insights.sbomify.com/CVE-2026-16867/): IBM i is Affected By Multiple Vulnerabilities in NetServer (high 8.1) - [CVE-2026-16866](https://insights.sbomify.com/CVE-2026-16866/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 4.8) - [CVE-2026-16865](https://insights.sbomify.com/CVE-2026-16865/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16864](https://insights.sbomify.com/CVE-2026-16864/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16863](https://insights.sbomify.com/CVE-2026-16863/): IBM i is Affected By Out-of-Bounds Read Vulnerability [] (high 7.7) - [CVE-2026-16862](https://insights.sbomify.com/CVE-2026-16862/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16861](https://insights.sbomify.com/CVE-2026-16861/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 5.3) - [CVE-2026-16860](https://insights.sbomify.com/CVE-2026-16860/): IBM i is Affected By Remote Code Execution Vulnerability [] (critical 9.9) - [CVE-2026-1686](https://insights.sbomify.com/CVE-2026-1686/): Totolink A3600R app.so setAppEasyWizardConfig buffer overflow (high 8.7) - [CVE-2026-16859](https://insights.sbomify.com/CVE-2026-16859/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 5.3) - [CVE-2026-16857](https://insights.sbomify.com/CVE-2026-16857/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.2) - [CVE-2026-16856](https://insights.sbomify.com/CVE-2026-16856/): IBM i is Affected By Multiple Vulnerabilities in Domain Name System (high 8.8) - [CVE-2026-16855](https://insights.sbomify.com/CVE-2026-16855/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 5.5) - [CVE-2026-16853](https://insights.sbomify.com/CVE-2026-16853/): IBM i is Affected By Multiple Vulnerabilities in NetServer (medium 6.5) - [CVE-2026-16852](https://insights.sbomify.com/CVE-2026-16852/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.5) - [CVE-2026-16851](https://insights.sbomify.com/CVE-2026-16851/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 7.4) - [CVE-2026-16850](https://insights.sbomify.com/CVE-2026-16850/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-1685](https://insights.sbomify.com/CVE-2026-1685/): D-Link DIR-823X Login sub_40AC74 excessive authentication (medium 6.3) - [CVE-2026-16849](https://insights.sbomify.com/CVE-2026-16849/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 4.3) - [CVE-2026-16848](https://insights.sbomify.com/CVE-2026-16848/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16847](https://insights.sbomify.com/CVE-2026-16847/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16846](https://insights.sbomify.com/CVE-2026-16846/): Vulnerabilities in IBM AIX and PowerVM VIOS (medium 6.5) - [CVE-2026-16845](https://insights.sbomify.com/CVE-2026-16845/): Vulnerabilities in IBM AIX and PowerVM VIOS (critical 9.8) - [CVE-2026-16844](https://insights.sbomify.com/CVE-2026-16844/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) - [CVE-2026-16843](https://insights.sbomify.com/CVE-2026-16843/): Command injection in DS-3WAP521-SI (high 7.2) - [CVE-2026-16842](https://insights.sbomify.com/CVE-2026-16842/): Vulnerabilities in IBM AIX and PowerVM VIOS (high 8.8) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/845/