# Vulnerabilities published in 2026


- [CVE-2026-13780](https://insights.sbomify.com/CVE-2026-13780/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-1378](https://insights.sbomify.com/CVE-2026-1378/): WP Posts Re-order <= 1.0 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13779](https://insights.sbomify.com/CVE-2026-13779/): Use after free in Chrome (high 8.1)
- [CVE-2026-13778](https://insights.sbomify.com/CVE-2026-13778/): Use after free in Chrome (high 7.8)
- [CVE-2026-13777](https://insights.sbomify.com/CVE-2026-13777/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-13776](https://insights.sbomify.com/CVE-2026-13776/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-13775](https://insights.sbomify.com/CVE-2026-13775/): Use after free in Chrome (critical 9.6)
- [CVE-2026-13774](https://insights.sbomify.com/CVE-2026-13774/): Use after free in Chrome (high 8.1)
- [CVE-2026-13773](https://insights.sbomify.com/CVE-2026-13773/): IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol (medium 6.0)
- [CVE-2026-13772](https://insights.sbomify.com/CVE-2026-13772/): IBM WebSphere eXtreme Scale's OQL is affected by remote code execution (high 7.5)
- [CVE-2026-13771](https://insights.sbomify.com/CVE-2026-13771/): Cross-site scripting in Customer Reviews for WooCommerce (medium 6.4)
- [CVE-2026-13770](https://insights.sbomify.com/CVE-2026-13770/): AppMySite <= 3.15.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via save_ams_license_key AJAX Handler (medium 6.4)
- [CVE-2026-1377](https://insights.sbomify.com/CVE-2026-1377/): imwptip <= 1.1 - Cross-Site Request Forgery to Settings Update (medium 4.3)
- [CVE-2026-13769](https://insights.sbomify.com/CVE-2026-13769/): Overly permissive File Permissions in AWS CLI (medium 6.8)
- [CVE-2026-13768](https://insights.sbomify.com/CVE-2026-13768/): Gardyn IoT Hub Use of Hard-coded Credentials (critical 9.5)
- [CVE-2026-13767](https://insights.sbomify.com/CVE-2026-13767/): Quiz and Survey Master (QSM) <= 11.2.0 - Authenticated (Custom+) SQL Injection via 'pages' Parameter (medium 6.5)
- [CVE-2026-13766](https://insights.sbomify.com/CVE-2026-13766/): DBIx::QuickORM versions before 0.000026 for Perl allow SQL injection via unquoted SQL identifiers (critical 9.8)
- [CVE-2026-13765](https://insights.sbomify.com/CVE-2026-13765/): Missing authorization in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (high 7.5)
- [CVE-2026-13763](https://insights.sbomify.com/CVE-2026-13763/): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF (high 7.9)
- [CVE-2026-13762](https://insights.sbomify.com/CVE-2026-13762/): HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF (high 7.9)
- [CVE-2026-13761](https://insights.sbomify.com/CVE-2026-13761/): Denial of service in Pega Infinity (high 8.8)
- [CVE-2026-13760](https://insights.sbomify.com/CVE-2026-13760/): OS Command Injection in aws-cdk-lib Docker Bundling (high 7.0)
- [CVE-2026-1376](https://insights.sbomify.com/CVE-2026-1376/): IBM i Denial of Service (high 7.5)
- [CVE-2026-13759](https://insights.sbomify.com/CVE-2026-13759/): IBM WebSphere eXtreme Scale is affected by Insecure Deserilization (high 7.5)
- [CVE-2026-13758](https://insights.sbomify.com/CVE-2026-13758/): Weak cryptography in CryptX (low 3.7)
- [CVE-2026-13757](https://insights.sbomify.com/CVE-2026-13757/): P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing (medium 6.2)
- [CVE-2026-13756](https://insights.sbomify.com/CVE-2026-13756/): WP Grid Builder <= 2.3.3 - Authenticated (Subscriber+) Privilege Escalation via 'key' Parameter (high 8.8)
- [CVE-2026-13755](https://insights.sbomify.com/CVE-2026-13755/): Tickera <= 3.6.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'price_wrapper' Shortcode Attribute (medium 6.4)
- [CVE-2026-13754](https://insights.sbomify.com/CVE-2026-13754/): Tickera <= 3.6.0.0 - Authenticated (Staff+) SQL Injection via 's' Parameter (medium 6.5)
- [CVE-2026-13753](https://insights.sbomify.com/CVE-2026-13753/): Certain HP DeskJet All in One – Potential Information Disclosure (high 7.5)
- [CVE-2026-13752](https://insights.sbomify.com/CVE-2026-13752/): SQL injection in Snowflake CLI (medium 6.0)
- [CVE-2026-13751](https://insights.sbomify.com/CVE-2026-13751/): Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load (medium 4.1)
- [CVE-2026-13750](https://insights.sbomify.com/CVE-2026-13750/): Snowflake CLI Sensitive Credential Exposure Through Debug Logging (medium 5.5)
- [CVE-2026-1375](https://insights.sbomify.com/CVE-2026-1375/): Missing authorization in Tutor LMS – eLearning and online course solution (high 8.1)
- [CVE-2026-13749](https://insights.sbomify.com/CVE-2026-13749/): Snowflake CLI Arbitrary Code Execution via Snowpark Annotation Processor Template Injection (high 8.8)
- [CVE-2026-13748](https://insights.sbomify.com/CVE-2026-13748/): Snowflake CLI Arbitrary Local File Read and Exfiltration Through Improper File Path Restriction (medium 6.3)
- [CVE-2026-13746](https://insights.sbomify.com/CVE-2026-13746/): Snowflake CLI SQL Injection Through Improper Neutralization of Local CLI Parameters (low 3.6)
- [CVE-2026-13745](https://insights.sbomify.com/CVE-2026-13745/): Arbitrary Code Execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME (high 7.7)
- [CVE-2026-13744](https://insights.sbomify.com/CVE-2026-13744/): Snowflake CLI SQL Injection Through Improper Neutralization of User-Controlled Input (high 8.3)
- [CVE-2026-13743](https://insights.sbomify.com/CVE-2026-13743/): Improper verification of cryptographic signature in CubeSpace CW0057 Reaction Wheel (low 3.3)
- [CVE-2026-13742](https://insights.sbomify.com/CVE-2026-13742/): Lack of signature verification before execution of downloaded content (medium 5.9)
- [CVE-2026-13741](https://insights.sbomify.com/CVE-2026-13741/): Privilege escalation in Digits: WordPress Mobile Number Signup and Login (high 8.8)
- [CVE-2026-13739](https://insights.sbomify.com/CVE-2026-13739/): Server-Side Request Forgery (SSRF) (high 8.8)
- [CVE-2026-13738](https://insights.sbomify.com/CVE-2026-13738/): Improper Authorization Validation (critical 9.2)
- [CVE-2026-13737](https://insights.sbomify.com/CVE-2026-13737/): Command Restriction Bypass (critical 9.2)
- [CVE-2026-13736](https://insights.sbomify.com/CVE-2026-13736/): NewPath WildApricotPress Add-on – Member Directory <= 1.0.0 - Unauthenticated Member PII Disclosure via REST API (medium 5.3)
- [CVE-2026-13735](https://insights.sbomify.com/CVE-2026-13735/): WireGuard keepalive transport-data messages accepted without Poly1305 authentication (low 3.7)
- [CVE-2026-13734](https://insights.sbomify.com/CVE-2026-13734/): Zephyr WireGuard mutates peer state before anti-replay check, enabling capture-replay endpoint hijack (medium 6.5)
- [CVE-2026-13733](https://insights.sbomify.com/CVE-2026-13733/): Cross-site scripting in Download Manager (medium 6.4)
- [CVE-2026-13732](https://insights.sbomify.com/CVE-2026-13732/): Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf (high 7.0)
- [CVE-2026-13731](https://insights.sbomify.com/CVE-2026-13731/): WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter (high 7.2)
- [CVE-2026-1373](https://insights.sbomify.com/CVE-2026-1373/): Easy Author Image <= 1.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Picture URL (medium 6.4)
- [CVE-2026-13729](https://insights.sbomify.com/CVE-2026-13729/): Podlove Podcast Publisher < 4.5.3 - Podcast Contributor/Group/Role Creation and Deletion via CSRF (medium 4.3)
- [CVE-2026-13728](https://insights.sbomify.com/CVE-2026-13728/): WatchGuard Firebox Hardcoded Fallback Encryption Key in Access Portal Resource Credential Database (medium 5.9)
- [CVE-2026-13726](https://insights.sbomify.com/CVE-2026-13726/): Multiple Page Generator Plugin – MPG < 4.1.8 - Reflected XSS via mpg_shortcode (high 7.1)
- [CVE-2026-13725](https://insights.sbomify.com/CVE-2026-13725/): Dynamic Pricing With Discount Rules for WooCommerce < 5.0.0 - Reflected XSS via wdpAjax (high 7.1)
- [CVE-2026-13724](https://insights.sbomify.com/CVE-2026-13724/): Business Logic Bypass in Gobito's Corporate Training Management System (medium 4.3)
- [CVE-2026-13723](https://insights.sbomify.com/CVE-2026-13723/): Develar's electron-builder allows arbitrary file overwrite (medium 6.5)
- [CVE-2026-13722](https://insights.sbomify.com/CVE-2026-13722/): WatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OS (high 8.6)
- [CVE-2026-13720](https://insights.sbomify.com/CVE-2026-13720/): Editor can forge file-provisioning provenance on dashboards via the dashboard API (medium 5.4)
- [CVE-2026-1372](https://insights.sbomify.com/CVE-2026-1372/): Missing authorization in Tutor LMS Elementor Addons (medium 4.3)
- [CVE-2026-13719](https://insights.sbomify.com/CVE-2026-13719/): Alert rules in restricted folders disclosed via the alert rules list API (medium 4.3)
- [CVE-2026-13718](https://insights.sbomify.com/CVE-2026-13718/): Tabs Responsive <= 2.5 - Shop Manager+ Stored XSS via WooCommerce Product Tab Content (medium 6.8)
- [CVE-2026-13717](https://insights.sbomify.com/CVE-2026-13717/): Misconfiguration in Red Hat OpenShift AI (RHOAI) (high 8.8)
- [CVE-2026-13716](https://insights.sbomify.com/CVE-2026-13716/): Path Traversal: '.../...//' in Crafty Controller (critical 9.1)
- [CVE-2026-13714](https://insights.sbomify.com/CVE-2026-13714/): Realtyna Organic IDX plugin + WPL Real Estate < 5.3.0 - Unauthenticated Arbitrary File Upload to Remote Code Execution (critical 9.8)
- [CVE-2026-13713](https://insights.sbomify.com/CVE-2026-13713/): Use after free in YAML::Syck (medium 6.2)
- [CVE-2026-13712](https://insights.sbomify.com/CVE-2026-13712/): Divi 5.0 - 5.8.1 - Contributor+ Stored XSS via Social Media Follow Skype URL (medium 5.4)
- [CVE-2026-13710](https://insights.sbomify.com/CVE-2026-13710/): Cross-site scripting in Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress (medium 6.4)
- [CVE-2026-1371](https://insights.sbomify.com/CVE-2026-1371/): Missing authorization in Tutor LMS – eLearning and online course solution (medium 5.3)
- [CVE-2026-13709](https://insights.sbomify.com/CVE-2026-13709/): Cross-site scripting in Graphina – Charts and Graphs For Elementor (medium 6.4)
- [CVE-2026-13708](https://insights.sbomify.com/CVE-2026-13708/): Denial of service in Imager::File::JPEG (high 7.5)
- [CVE-2026-13707](https://insights.sbomify.com/CVE-2026-13707/): Session fixation attacks on improperly configured OAuth 1.0a tools (not scored)
- [CVE-2026-13706](https://insights.sbomify.com/CVE-2026-13706/): UrlShortener extension url validation can be bypassed due to difference between php url parsing and WHATWG (not scored)
- [CVE-2026-13705](https://insights.sbomify.com/CVE-2026-13705/): Memory corruption in Imager (high 7.1)
- [CVE-2026-13704](https://insights.sbomify.com/CVE-2026-13704/): GiveWP <= 4.16.1 - Authenticated (Give Worker+) Stored Cross-Site Scripting via Sequioa Form (medium 6.4)
- [CVE-2026-13703](https://insights.sbomify.com/CVE-2026-13703/): SEO Redirection Plugin – 301 Redirect Manager < 9.19 - Subscriber+ Redirect Rule Disclosure (medium 5.4)
- [CVE-2026-13701](https://insights.sbomify.com/CVE-2026-13701/): Advanced Excerpt < 4.5 - Admin+ Stored XSS via Ellipsis Setting (medium 4.8)
- [CVE-2026-13700](https://insights.sbomify.com/CVE-2026-13700/): WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure (medium 5.9)
- [CVE-2026-1370](https://insights.sbomify.com/CVE-2026-1370/): SIBS - WooCommerce <= 2.2.0 - Authenticated (Admin+) SQL Injection via 'referencedId' Parameter (medium 4.9)
- [CVE-2026-13699](https://insights.sbomify.com/CVE-2026-13699/): Databroker 0.6.1 PublishValue missing data_point panic (medium 4.3)
- [CVE-2026-13698](https://insights.sbomify.com/CVE-2026-13698/): Denial of service in OpenVPN (medium 6.0)
- [CVE-2026-13697](https://insights.sbomify.com/CVE-2026-13697/): undici vulnerable to cross-user information disclosure and parse-time crash via degenerate private cache directives (high 7.4)
- [CVE-2026-13696](https://insights.sbomify.com/CVE-2026-13696/): LDAP Injection in HAVELSAN's Liman MYS (high 8.8)
- [CVE-2026-13695](https://insights.sbomify.com/CVE-2026-13695/): SQL Injection in the Integratec Application (high 8.8)
- [CVE-2026-13694](https://insights.sbomify.com/CVE-2026-13694/): Bit Form < 3.1.0 - Unauthenticated Workflow Trigger via Authentication Bypass (medium 6.5)
- [CVE-2026-13693](https://insights.sbomify.com/CVE-2026-13693/): Bit Form < 3.1.0 - Unauthenticated Arbitrary File Read via Path Traversal (medium 5.9)
- [CVE-2026-13692](https://insights.sbomify.com/CVE-2026-13692/): PayU CommercePro < 3.9.0 - Unauthenticated Order Tampering (medium 5.3)
- [CVE-2026-13690](https://insights.sbomify.com/CVE-2026-13690/): UsersWP < 1.2.67 - Two-Factor Authentication Bypass (high 7.4)
- [CVE-2026-1369](https://insights.sbomify.com/CVE-2026-1369/): Conditional CAPTCHA <= 4.0.0 - Open Redirect (medium 4.3)
- [CVE-2026-13684](https://insights.sbomify.com/CVE-2026-13684/): Other in DiskStation Manager (DSM) (critical 9.8)
- [CVE-2026-13683](https://insights.sbomify.com/CVE-2026-13683/): SQL injection in DiskStation Manager (DSM) (low 2.7)
- [CVE-2026-1368](https://insights.sbomify.com/CVE-2026-1368/): Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation (high 7.5)
- [CVE-2026-13676](https://insights.sbomify.com/CVE-2026-13676/): fast-uri vulnerable to host confusion via failed IDN canonicalization (high 7.5)
- [CVE-2026-13673](https://insights.sbomify.com/CVE-2026-13673/): Misconfiguration in DiskStation Manager (DSM) (high 8.8)
- [CVE-2026-1367](https://insights.sbomify.com/CVE-2026-1367/): SQL Injection (high 8.3)
- [CVE-2026-13666](https://insights.sbomify.com/CVE-2026-13666/): Other in DiskStation Manager (DSM) (low 3.5)
- [CVE-2026-1365](https://insights.sbomify.com/CVE-2026-1365/): Information Disclosure in Sayax's OSOS (medium 6.5)
- [CVE-2026-1364](https://insights.sbomify.com/CVE-2026-1364/): JNC｜IAQS and I6 - Missing Authentication (critical 9.3)
- [CVE-2026-13639](https://insights.sbomify.com/CVE-2026-13639/): Weak cryptography in DiskStation Manager (DSM) (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/874/