# Vulnerabilities published in 2026


- [CVE-2026-15565](https://insights.sbomify.com/CVE-2026-15565/): Denial of service in Red Hat Data Grid 8 (high 7.5)
- [CVE-2026-15564](https://insights.sbomify.com/CVE-2026-15564/): Wildfly-ejb: wildfly-iiop-openjdk: eap iiop listeners may permit unauthed deserialization (high 7.4)
- [CVE-2026-15563](https://insights.sbomify.com/CVE-2026-15563/): Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos (high 7.4)
- [CVE-2026-15562](https://insights.sbomify.com/CVE-2026-15562/): Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service (high 7.5)
- [CVE-2026-15561](https://insights.sbomify.com/CVE-2026-15561/): Undertow-core: oom via missing limits in chunked trailer in eap's undertow (high 7.5)
- [CVE-2026-15560](https://insights.sbomify.com/CVE-2026-15560/): Openjdk-orb: unauthed class loading via iiop in eap (high 8.1)
- [CVE-2026-1556](https://insights.sbomify.com/CVE-2026-1556/): Information disclosure via file URI overwrite in File (Field) Paths (medium 6.9)
- [CVE-2026-15559](https://insights.sbomify.com/CVE-2026-15559/): CodeAstro Simple Online Leave Management System POST accept.php sql injection (medium 5.3)
- [CVE-2026-15558](https://insights.sbomify.com/CVE-2026-15558/): CodeAstro Simple Online Leave Management System deletemp.php sql injection (medium 5.3)
- [CVE-2026-15557](https://insights.sbomify.com/CVE-2026-15557/): waooAI waoowaoo Internal Task Header api-auth.ts requireProjectAuthLight improper authentication (medium 6.9)
- [CVE-2026-15556](https://insights.sbomify.com/CVE-2026-15556/): Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions (high 8.1)
- [CVE-2026-15555](https://insights.sbomify.com/CVE-2026-15555/): Deserialization in Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 (high 8.8)
- [CVE-2026-15554](https://insights.sbomify.com/CVE-2026-15554/): Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery (high 7.4)
- [CVE-2026-15553](https://insights.sbomify.com/CVE-2026-15553/): Ragic｜Enterprise Cloud Database - Arbitrary File Upload (medium 6.9)
- [CVE-2026-15552](https://insights.sbomify.com/CVE-2026-15552/): Ragic｜Enterprise Cloud Database - Stored Cross-Site Scripting (medium 5.3)
- [CVE-2026-15551](https://insights.sbomify.com/CVE-2026-15551/): Integer overflow in rlottie (medium 5.5)
- [CVE-2026-15550](https://insights.sbomify.com/CVE-2026-15550/): Missing authorization in Ninja Forms - Save Progress (medium 4.3)
- [CVE-2026-1555](https://insights.sbomify.com/CVE-2026-1555/): WebStack <= 1.2024 - Unauthenticated Arbitrary File Upload (critical 9.8)
- [CVE-2026-15548](https://insights.sbomify.com/CVE-2026-15548/): Shibby Tomato DNS List Rendering httpd sub_407220 stack-based overflow (high 8.7)
- [CVE-2026-15547](https://insights.sbomify.com/CVE-2026-15547/): Shibby Tomato CIFS Mount sub_2D048 os command injection (medium 5.3)
- [CVE-2026-15546](https://insights.sbomify.com/CVE-2026-15546/): Shibby Tomato start_jffs2 sub_2D568 os command injection (medium 5.3)
- [CVE-2026-15545](https://insights.sbomify.com/CVE-2026-15545/): Shibby Tomato apcupsd tomatodata.cgi main out-of-bounds write (high 8.7)
- [CVE-2026-15544](https://insights.sbomify.com/CVE-2026-15544/): Shibby Tomato apcupsd tomatodata.cgi getupsvar stack-based overflow (high 8.7)
- [CVE-2026-15543](https://insights.sbomify.com/CVE-2026-15543/): Tenda CH22 CertListInfo formCertListInfo buffer overflow (high 8.7)
- [CVE-2026-15542](https://insights.sbomify.com/CVE-2026-15542/): will-moss Isaiah Websocket Connection Authentication main.go improper authentication (medium 6.9)
- [CVE-2026-15541](https://insights.sbomify.com/CVE-2026-15541/): will-moss Isaiah Master Websocket server.go Server.Handle authorization (medium 6.9)
- [CVE-2026-15540](https://insights.sbomify.com/CVE-2026-15540/): SourceCodester Online Book Store System Administrative index.php php file inclusion (medium 5.3)
- [CVE-2026-1554](https://insights.sbomify.com/CVE-2026-1554/): Central Authentication System (CAS) Server - Less critical - XML Element Injection - SA-CONTRIB-2026-007 (medium 4.2)
- [CVE-2026-15539](https://insights.sbomify.com/CVE-2026-15539/): SourceCodester Online Book Store System Book Image Upload Feature index.php books unrestricted upload (medium 5.1)
- [CVE-2026-15538](https://insights.sbomify.com/CVE-2026-15538/): primefaces primereact API ObjectUtils.js ObjectUtils.mutateFieldData prototype pollution (medium 5.3)
- [CVE-2026-15537](https://insights.sbomify.com/CVE-2026-15537/): SourceCodester Online Book Store System login.php sql injection (medium 6.9)
- [CVE-2026-15536](https://insights.sbomify.com/CVE-2026-15536/): itsourcecode Hospital Management System patviewprescription.php sql injection (medium 5.3)
- [CVE-2026-15535](https://insights.sbomify.com/CVE-2026-15535/): AkariAsai self-rag retrieval_lm index.py Indexer.deserialize_from deserialization (medium 5.3)
- [CVE-2026-15534](https://insights.sbomify.com/CVE-2026-15534/): Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch. (medium 5.7)
- [CVE-2026-15533](https://insights.sbomify.com/CVE-2026-15533/): DedeCMS Column Management search.php code injection (medium 5.1)
- [CVE-2026-15532](https://insights.sbomify.com/CVE-2026-15532/): SourceCodester Online Book Store System User Management cross site scripting (medium 4.8)
- [CVE-2026-15531](https://insights.sbomify.com/CVE-2026-15531/): yashbhalgat HashNeRF-pytorch Checkpoint File run_nerf.py torch.load deserialization (medium 4.8)
- [CVE-2026-15530](https://insights.sbomify.com/CVE-2026-15530/): WuzhiCMS Attachment API index.php listimage information disclosure (medium 6.9)
- [CVE-2026-1553](https://insights.sbomify.com/CVE-2026-1553/): Drupal Canvas - Moderately critical - Access bypass - SA-CONTRIB-2026-006 (medium 4.8)
- [CVE-2026-15529](https://insights.sbomify.com/CVE-2026-15529/): yzhao062 pyod persistence.py pyod.utils.persistence.load deserialization (medium 5.3)
- [CVE-2026-15528](https://insights.sbomify.com/CVE-2026-15528/): lamaalrajih kicad-mcp path_validator.py protection mechanism (medium 4.8)
- [CVE-2026-15527](https://insights.sbomify.com/CVE-2026-15527/): better-auth better-icons scan_project_icons/sync_icon path traversal (medium 4.8)
- [CVE-2026-15526](https://insights.sbomify.com/CVE-2026-15526/): augmnt augments-mcp-server scan_project_deps scan-project-deps.ts scanProjectDeps path traversal (medium 4.8)
- [CVE-2026-15525](https://insights.sbomify.com/CVE-2026-15525/): kLOsk adloop write.py _validate_urls server-side request forgery (medium 5.3)
- [CVE-2026-15524](https://insights.sbomify.com/CVE-2026-15524/): alioshr memory-bank-mcp list-project-files-validation-factory.ts path traversal (medium 4.8)
- [CVE-2026-15523](https://insights.sbomify.com/CVE-2026-15523/): CodeAstro Simple Online Leave Management System dashboard.php sql injection (medium 5.3)
- [CVE-2026-15522](https://insights.sbomify.com/CVE-2026-15522/): tugcantopaloglu godot-mcp run_project index.js validatePath path traversal (medium 4.8)
- [CVE-2026-15521](https://insights.sbomify.com/CVE-2026-15521/): makafeli n8n-workflow-builder update_node_from_file server.cjs path traversal (medium 4.8)
- [CVE-2026-15520](https://insights.sbomify.com/CVE-2026-15520/): GNU LibreDWG R2004 Section Decompression decode.c decompress_R2004_section heap-based overflow (medium 4.8)
- [CVE-2026-1552](https://insights.sbomify.com/CVE-2026-1552/): SEMCMS SEMCMS_Info.php sql injection (medium 5.3)
- [CVE-2026-15519](https://insights.sbomify.com/CVE-2026-15519/): usestrix PyPI system_prompt.jinja inclusion of functionality from untrusted control sphere (low 2.3)
- [CVE-2026-15518](https://insights.sbomify.com/CVE-2026-15518/): AREA 17 Twill CMS Media Library Insert FileLibraryController.php storeFile unrestricted upload (medium 5.1)
- [CVE-2026-15517](https://insights.sbomify.com/CVE-2026-15517/): Jinher OA PlanGiveOut.aspx sql injection (medium 6.9)
- [CVE-2026-15516](https://insights.sbomify.com/CVE-2026-15516/): MacCMS Pro Installation Index.php step5 authorization (medium 6.3)
- [CVE-2026-15515](https://insights.sbomify.com/CVE-2026-15515/): Tencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search path (high 7.3)
- [CVE-2026-15514](https://insights.sbomify.com/CVE-2026-15514/): Metasoft 美特软件 MetaCRM PHPRPC Remote Call rpc.jsp RPCService.query sql injection (medium 6.9)
- [CVE-2026-15513](https://insights.sbomify.com/CVE-2026-15513/): Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection (medium 5.3)
- [CVE-2026-15512](https://insights.sbomify.com/CVE-2026-15512/): pig-mesh Pig pig-codegen GeneratorServiceImpl.java code injection (medium 5.3)
- [CVE-2026-15511](https://insights.sbomify.com/CVE-2026-15511/): Comfast CF-WR631AX V3 FastCGI Backend webmgnt system_wl_upload_pic_file os command injection (critical 9.3)
- [CVE-2026-15510](https://insights.sbomify.com/CVE-2026-15510/): Leantime API saveSetting improper authorization (medium 5.3)
- [CVE-2026-1551](https://insights.sbomify.com/CVE-2026-1551/): itsourcecode School Management System controller.php sql injection (medium 5.3)
- [CVE-2026-15509](https://insights.sbomify.com/CVE-2026-15509/): Leantime JSON-RPC Endpoint addUser improper authorization (medium 5.3)
- [CVE-2026-15508](https://insights.sbomify.com/CVE-2026-15508/): Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery (medium 5.3)
- [CVE-2026-15507](https://insights.sbomify.com/CVE-2026-15507/): coollabsio Coolify Policy Policies authorization (medium 5.3)
- [CVE-2026-15506](https://insights.sbomify.com/CVE-2026-15506/): SecureAge CatchPulse Driver saappctl.sys heap-based overflow (high 8.5)
- [CVE-2026-15505](https://insights.sbomify.com/CVE-2026-15505/): vnotex vnote YAML Frontmatter markdownit.js cross site scripting (medium 5.1)
- [CVE-2026-15502](https://insights.sbomify.com/CVE-2026-15502/): AojiaoZero Antaris PayPal IPN Payment ipn.php _rewardPurchase sql injection (medium 5.3)
- [CVE-2026-15501](https://insights.sbomify.com/CVE-2026-15501/): AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery (medium 5.3)
- [CVE-2026-15500](https://insights.sbomify.com/CVE-2026-15500/): AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery (medium 5.3)
- [CVE-2026-1550](https://insights.sbomify.com/CVE-2026-1550/): PHPGurukul Hospital Management System Admin Dashboard adminviews.py improper authorization (medium 5.3)
- [CVE-2026-15499](https://insights.sbomify.com/CVE-2026-15499/): AstrBotDevs AstrBot Scheduled Task cron_tools.py FutureTaskTool.call improper authorization (medium 5.3)
- [CVE-2026-15498](https://insights.sbomify.com/CVE-2026-15498/): sergomanov SmartHomeAdatum Login users.php sql injection (medium 6.9)
- [CVE-2026-15497](https://insights.sbomify.com/CVE-2026-15497/): SonicCloudOrg sonic-agent JWT Authentication Filter ExchangeController.java code injection (medium 6.9)
- [CVE-2026-15496](https://insights.sbomify.com/CVE-2026-15496/): SonicCloudOrg sonic-agent Groovy Script GroovyScriptImpl.java evalIsFailed os command injection (medium 5.3)
- [CVE-2026-15495](https://insights.sbomify.com/CVE-2026-15495/): SonicCloudOrg sonic-agent Android WebSocket Server AndroidWSServer.java os command injection (medium 5.3)
- [CVE-2026-15494](https://insights.sbomify.com/CVE-2026-15494/): AMTT Hotel Broadband Operation System switch_status.php sql injection (medium 5.1)
- [CVE-2026-15493](https://insights.sbomify.com/CVE-2026-15493/): Akpali9 Attendance-Management-System absent.php cross site scripting (medium 5.1)
- [CVE-2026-15492](https://insights.sbomify.com/CVE-2026-15492/): igweze wizgrade studentConductManager.php cross site scripting (medium 5.3)
- [CVE-2026-15491](https://insights.sbomify.com/CVE-2026-15491/): RafyMrX TOKO-ONLINE-ROTI missing authentication (medium 6.9)
- [CVE-2026-15490](https://insights.sbomify.com/CVE-2026-15490/): RafyMrX TOKO-ONLINE-ROTI add.php sql injection (medium 6.9)
- [CVE-2026-1549](https://insights.sbomify.com/CVE-2026-1549/): jishenghua jshERP PluginController uploadPluginConfigFile path traversal (medium 5.3)
- [CVE-2026-15489](https://insights.sbomify.com/CVE-2026-15489/): RafyMrX TOKO-ONLINE-ROTI login.php sql injection (medium 6.9)
- [CVE-2026-15488](https://insights.sbomify.com/CVE-2026-15488/): hcr707305003 shiroiAdmin FileController.php upload unrestricted upload (medium 6.9)
- [CVE-2026-15487](https://insights.sbomify.com/CVE-2026-15487/): TRENDnet TEW-821DAP Firmware Update system_ntp sub_41FBD0 os command injection (medium 5.3)
- [CVE-2026-15486](https://insights.sbomify.com/CVE-2026-15486/): TRENDnet TEW-821DAP Firmware Update tools_ddns sub_42026C os command injection (medium 5.3)
- [CVE-2026-15485](https://insights.sbomify.com/CVE-2026-15485/): TRENDnet TEW-821DAP DNS Lookup tools_nslookup sub_43F2C4 os command injection (medium 5.3)
- [CVE-2026-15484](https://insights.sbomify.com/CVE-2026-15484/): TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow (high 8.7)
- [CVE-2026-15483](https://insights.sbomify.com/CVE-2026-15483/): TRENDnet TEW-821DAP ssi tools_nslookup sub_41EC14 buffer overflow (high 8.7)
- [CVE-2026-15482](https://insights.sbomify.com/CVE-2026-15482/): Aster Telecom Azcall HTTP sis.php sql injection (medium 6.9)
- [CVE-2026-15481](https://insights.sbomify.com/CVE-2026-15481/): Trendnet TEW-635BRM IPoA WAN Connection Setup rc ipoa_test command injection (high 8.7)
- [CVE-2026-15480](https://insights.sbomify.com/CVE-2026-15480/): Trendnet TEW-635BRM Web Service rc start_httpd stack-based overflow (high 8.7)
- [CVE-2026-1548](https://insights.sbomify.com/CVE-2026-1548/): Totolink A7000R cstecgi.cgi CloudACMunualUpdateUserdata command injection (medium 5.3)
- [CVE-2026-15479](https://insights.sbomify.com/CVE-2026-15479/): H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery (medium 6.9)
- [CVE-2026-15478](https://insights.sbomify.com/CVE-2026-15478/): IceHRM UserReport Endpoint EmployeeAttendanceReport.php sql injection (medium 5.3)
- [CVE-2026-15477](https://insights.sbomify.com/CVE-2026-15477/): Bahmni bahmnicore Search Endpoint sql additionalParams sql injection (medium 5.3)
- [CVE-2026-15476](https://insights.sbomify.com/CVE-2026-15476/): QILING Disk Master Kernel Driver diskbckp.sys access control (medium 4.8)
- [CVE-2026-15475](https://insights.sbomify.com/CVE-2026-15475/): MiniTool Partition Wizard Signed Kernel Driver pwdrvio.sys access control (medium 4.8)
- [CVE-2026-15474](https://insights.sbomify.com/CVE-2026-15474/): Eleveo Call Recording Software audio.jsp improper authorization (medium 5.3)
- [CVE-2026-15473](https://insights.sbomify.com/CVE-2026-15473/): Eleveo Call Recording Software Recorded Calls restoreCallAction.do improper authorization (medium 5.3)
- [CVE-2026-15472](https://insights.sbomify.com/CVE-2026-15472/): Eleveo Call Recording Software composeEmailAction.do improper authorization (medium 5.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/857/