# Vulnerabilities published in 2026


- [CVE-2026-1278](https://insights.sbomify.com/CVE-2026-1278/): Mandatory Field <= 1.6.8 - Authenticated (Administrator+) Stored Cross-Site Scripting via Settings Fields (medium 4.4)
- [CVE-2026-12779](https://insights.sbomify.com/CVE-2026-12779/): AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control (high 8.5)
- [CVE-2026-12778](https://insights.sbomify.com/CVE-2026-12778/): AOMEI Partition Assistant Kernel Driver ampa10.sys access control (high 8.5)
- [CVE-2026-12776](https://insights.sbomify.com/CVE-2026-12776/): Montodel House-Rental-Management index.php houses sql injection (medium 5.3)
- [CVE-2026-12775](https://insights.sbomify.com/CVE-2026-12775/): Montodel House-Rental-Management login.php sql injection (medium 6.9)
- [CVE-2026-12774](https://insights.sbomify.com/CVE-2026-12774/): BerriAI litellm MCP Server Connection Testing rest_endpoints.py _execute_with_mcp_client server-side request forgery (medium 5.3)
- [CVE-2026-12773](https://insights.sbomify.com/CVE-2026-12773/): BerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authentication (medium 6.9)
- [CVE-2026-12772](https://insights.sbomify.com/CVE-2026-12772/): BerriAI litellm PROXY_ADMIN database API Key Generator login_utils.py authenticate_user session expiration (medium 5.3)
- [CVE-2026-12771](https://insights.sbomify.com/CVE-2026-12771/): BerriAI litellm M2M JWT user_api_key_auth.py improper authorization (low 2.3)
- [CVE-2026-12770](https://insights.sbomify.com/CVE-2026-12770/): BerriAI litellm Admin Key key_management_endpoints.py improper authorization (medium 5.3)
- [CVE-2026-1277](https://insights.sbomify.com/CVE-2026-1277/): URL Shortify <= 1.12.1 - Unauthenticated Open Redirect via 'redirect_to' Parameter (medium 4.7)
- [CVE-2026-12767](https://insights.sbomify.com/CVE-2026-12767/): Langflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches (medium 6.5)
- [CVE-2026-12766](https://insights.sbomify.com/CVE-2026-12766/): Server-side request forgery in Langflow OSS (medium 5.4)
- [CVE-2026-12765](https://insights.sbomify.com/CVE-2026-12765/): Langflow OSS is affected by server-side request forgery due to missing URL validation in flow components (medium 6.5)
- [CVE-2026-12763](https://insights.sbomify.com/CVE-2026-12763/): Langflow is vulnerable to authentication bypass and insufficient session expiration (medium 4.2)
- [CVE-2026-12762](https://insights.sbomify.com/CVE-2026-12762/): Insertion of Sensitive Information into Externally-Accessible File in IBM Business Automation Insights (medium 5.3)
- [CVE-2026-12761](https://insights.sbomify.com/CVE-2026-12761/): Auth bypass in miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) (critical 9.8)
- [CVE-2026-12760](https://insights.sbomify.com/CVE-2026-12760/): Denial-of-Service Vulnerability via Malformed IPv4 Fragmentation Handling in TP-Link Tapo C200 (high 7.1)
- [CVE-2026-1276](https://insights.sbomify.com/CVE-2026-1276/): IBM QRadar SIEM Cross-Site Scripting (medium 5.4)
- [CVE-2026-12759](https://insights.sbomify.com/CVE-2026-12759/): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. (medium 6.5)
- [CVE-2026-12758](https://insights.sbomify.com/CVE-2026-12758/): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. (medium 5.4)
- [CVE-2026-12757](https://insights.sbomify.com/CVE-2026-12757/): Email Subscribers & Newsletters <= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field (medium 6.5)
- [CVE-2026-12756](https://insights.sbomify.com/CVE-2026-12756/): Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 (high 7.1)
- [CVE-2026-12755](https://insights.sbomify.com/CVE-2026-12755/): Server-side request forgery in Server (low 2.7)
- [CVE-2026-12754](https://insights.sbomify.com/CVE-2026-12754/): VikBooking Hotel Booking Engine & PMS <= 1.8.12 - Reflected Cross-Site Scripting via 'layoutstyle' Parameter (medium 6.1)
- [CVE-2026-12753](https://insights.sbomify.com/CVE-2026-12753/): SQL injection in Advance Product Search- Voice & Ajax Search for WooCommerce (high 7.5)
- [CVE-2026-12752](https://insights.sbomify.com/CVE-2026-12752/): Multiple security vulnerabilities addressed with IBM Business Automation Workflow August 2026 (high 7.1)
- [CVE-2026-12751](https://insights.sbomify.com/CVE-2026-12751/): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. (medium 5.4)
- [CVE-2026-12750](https://insights.sbomify.com/CVE-2026-12750/): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. (medium 6.4)
- [CVE-2026-1275](https://insights.sbomify.com/CVE-2026-1275/): Cross-site scripting in Multi Post Carousel by Category (medium 6.4)
- [CVE-2026-12749](https://insights.sbomify.com/CVE-2026-12749/): Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026. (medium 6.4)
- [CVE-2026-12747](https://insights.sbomify.com/CVE-2026-12747/): Cross-site scripting in Frontend Admin by DynamiApps (medium 6.4)
- [CVE-2026-12746](https://insights.sbomify.com/CVE-2026-12746/): Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter (high 8.1)
- [CVE-2026-12745](https://insights.sbomify.com/CVE-2026-12745/): Deserialization in Neurons for ITSM (critical 9.8)
- [CVE-2026-12744](https://insights.sbomify.com/CVE-2026-12744/): Deserialization in Neurons for ITSM (critical 9.8)
- [CVE-2026-12743](https://insights.sbomify.com/CVE-2026-12743/): affiliate-toolkit <= 3.8.8 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter (medium 4.9)
- [CVE-2026-12742](https://insights.sbomify.com/CVE-2026-12742/): Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 2026 (medium 5.4)
- [CVE-2026-12741](https://insights.sbomify.com/CVE-2026-12741/): WP Fast Total Search <= 1.80.280 - Unauthenticated SQL Injection (high 7.5)
- [CVE-2026-12740](https://insights.sbomify.com/CVE-2026-12740/): Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter (high 8.1)
- [CVE-2026-1274](https://insights.sbomify.com/CVE-2026-1274/): IBM Guardium Data Protection is affected by multiple vulnerabilities (medium 4.9)
- [CVE-2026-12739](https://insights.sbomify.com/CVE-2026-12739/): WP Easy Pay <= 4.5.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion (medium 4.3)
- [CVE-2026-12738](https://insights.sbomify.com/CVE-2026-12738/): Missing authorization in WP Easy Pay – Payment and Donation form Builder for Square (medium 4.3)
- [CVE-2026-12736](https://insights.sbomify.com/CVE-2026-12736/): Privilege escalation in WPify Woo – Withdrawal, CRN/VAT, QR payments, Heureka and more for WooCommerce (high 8.0)
- [CVE-2026-12734](https://insights.sbomify.com/CVE-2026-12734/): Cross-site scripting in weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot (medium 6.4)
- [CVE-2026-12733](https://insights.sbomify.com/CVE-2026-12733/): IBM DataPower Gateway affected by denial of service (high 7.5)
- [CVE-2026-12732](https://insights.sbomify.com/CVE-2026-12732/): Cross-site scripting in LearnPress – WordPress LMS Plugin for Create and Sell Online Courses (medium 6.4)
- [CVE-2026-12731](https://insights.sbomify.com/CVE-2026-12731/): Cross-site scripting in weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot (medium 6.4)
- [CVE-2026-12730](https://insights.sbomify.com/CVE-2026-12730/): Improper Validation of Certificate with Host Mismatch in IBM Business Automation Workflow containers (low 3.8)
- [CVE-2026-1273](https://insights.sbomify.com/CVE-2026-1273/): PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints (high 7.2)
- [CVE-2026-12729](https://insights.sbomify.com/CVE-2026-12729/): Missing authorization in weDocs: AI Powered Knowledge Base, Docs, Documentation, Wiki & AI Chatbot (medium 4.3)
- [CVE-2026-12728](https://insights.sbomify.com/CVE-2026-12728/): IBM MQ Java messaging is vulnerable to remote code execution (high 8.8)
- [CVE-2026-12727](https://insights.sbomify.com/CVE-2026-12727/): IBM MQ Buffer Overflow (medium 4.3)
- [CVE-2026-12726](https://insights.sbomify.com/CVE-2026-12726/): Server-side request forgery in Red Hat Ansible Automation Platform 2 (medium 6.3)
- [CVE-2026-12725](https://insights.sbomify.com/CVE-2026-12725/): Dnsmasq: dnsmasq: heap buffer overflow in log_query() when logging unsupported ds/dnskey replies (medium 5.9)
- [CVE-2026-12724](https://insights.sbomify.com/CVE-2026-12724/): Kirki < 6.0.12 - Unauthenticated HTML Injection in Password Reset Email via kirki-forgot-password (medium 4.3)
- [CVE-2026-12723](https://insights.sbomify.com/CVE-2026-12723/): Kirki < 6.0.12 - Unauthenticated Arbitrary Comment Modification and Moderation Bypass via Component Library (medium 5.3)
- [CVE-2026-12722](https://insights.sbomify.com/CVE-2026-12722/): Authentication Bypass in FTC Software's E-Commerce Management Panel (high 8.2)
- [CVE-2026-12721](https://insights.sbomify.com/CVE-2026-12721/): Kirki < 6.0.13 - Unauthenticated SQL Injection (high 8.6)
- [CVE-2026-12720](https://insights.sbomify.com/CVE-2026-12720/): Kirki < 6.0.13 - Unauthenticated PHP Object Injection (high 7.5)
- [CVE-2026-1272](https://insights.sbomify.com/CVE-2026-1272/): IBM Guardium Data Protection is affected by multiple vulnerabilities (low 2.7)
- [CVE-2026-12718](https://insights.sbomify.com/CVE-2026-12718/): SQLi in Karel Electronics' KarelIPS (critical 9.8)
- [CVE-2026-12717](https://insights.sbomify.com/CVE-2026-12717/): Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection (critical 9.4)
- [CVE-2026-12715](https://insights.sbomify.com/CVE-2026-12715/): Missing Authorization in Firebase Studio allows Cross-Tenant Source Code Theft (high 8.5)
- [CVE-2026-12713](https://insights.sbomify.com/CVE-2026-12713/): WPCargo Track & Trace < 8.0.4 - Unauthenticated SQL Injection via wpcargo_tracking_number (critical 9.1)
- [CVE-2026-12710](https://insights.sbomify.com/CVE-2026-12710/): Missing Authorization in Application Integration QueryEngineTask (critical 9.3)
- [CVE-2026-1271](https://insights.sbomify.com/CVE-2026-1271/): Missing authorization in ProfileGrid – User Profiles, Groups and Communities (medium 5.3)
- [CVE-2026-12707](https://insights.sbomify.com/CVE-2026-12707/): Unbounded path event queue growth in quiche via peer-driven source connection ID rotation (high 7.5)
- [CVE-2026-12706](https://insights.sbomify.com/CVE-2026-12706/): Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move() (medium 6.5)
- [CVE-2026-12705](https://insights.sbomify.com/CVE-2026-12705/): Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool (medium 5.9)
- [CVE-2026-12704](https://insights.sbomify.com/CVE-2026-12704/): SAML assertion replay via skipped InResponseTo validation (medium 6.8)
- [CVE-2026-12703](https://insights.sbomify.com/CVE-2026-12703/): Bypass of 2FA for Connections via Unattended Access in TeamViewer for macOS (high 8.0)
- [CVE-2026-12702](https://insights.sbomify.com/CVE-2026-12702/): Missing authorization in Octopus Server (medium 5.1)
- [CVE-2026-12701](https://insights.sbomify.com/CVE-2026-12701/): Pulpcore: pulpcore: relative_path_validator bypass via directory traversal in filesystemexport (critical 9.0)
- [CVE-2026-12698](https://insights.sbomify.com/CVE-2026-12698/): wpForo Forum < 3.1.3 - Subscriber+ Account Status and Reputation Manipulation via Profile Update Mass Assignment (medium 4.3)
- [CVE-2026-12697](https://insights.sbomify.com/CVE-2026-12697/): wpForo Forum < 3.1.2 - Subscriber+ Cross-User AI Chat Message Deletion via IDOR (medium 5.4)
- [CVE-2026-12696](https://insights.sbomify.com/CVE-2026-12696/): wpForo Forum < 3.1.2 - Subscriber+ Stored XSS via Profile Location Field (medium 5.4)
- [CVE-2026-12695](https://insights.sbomify.com/CVE-2026-12695/): miniOrange 2FA < 6.2.6 - 2FA Bypass via Attacker-Controlled ga_secret (high 8.1)
- [CVE-2026-12694](https://insights.sbomify.com/CVE-2026-12694/): Missing Authorization in Vimesoft's Enterprise Video Platform (critical 9.1)
- [CVE-2026-12693](https://insights.sbomify.com/CVE-2026-12693/): IDOR in Vimesoft's Enterprise Video Platform (critical 9.4)
- [CVE-2026-12692](https://insights.sbomify.com/CVE-2026-12692/): Improper Authentication in Vimesoft's Enterprise Video Platform (critical 9.8)
- [CVE-2026-12691](https://insights.sbomify.com/CVE-2026-12691/): Authentication Bypass in Vimesoft's Enterprise Video Platform (high 7.5)
- [CVE-2026-12690](https://insights.sbomify.com/CVE-2026-12690/): ProfileGrid < 5.9.9.7 - Subscriber+ Premium License Tampering via Missing Authorization (low 3.8)
- [CVE-2026-12689](https://insights.sbomify.com/CVE-2026-12689/): ProfileGrid < 5.9.9.7 - Subscriber+ Cross-User Private Message Thread Deletion and Tampering via Missing Authorization (medium 5.4)
- [CVE-2026-12688](https://insights.sbomify.com/CVE-2026-12688/): ProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery (medium 6.5)
- [CVE-2026-12687](https://insights.sbomify.com/CVE-2026-12687/): ProfileGrid < 5.9.9.8 - Unauthenticated Privilege Escalation via Unrestricted Group ID (high 7.5)
- [CVE-2026-12686](https://insights.sbomify.com/CVE-2026-12686/): Incorrect authorisation in Adiss’s Biloop (critical 9.3)
- [CVE-2026-12685](https://insights.sbomify.com/CVE-2026-12685/): EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor (high 7.5)
- [CVE-2026-12684](https://insights.sbomify.com/CVE-2026-12684/): Customer Reviews for WooCommerce < 5.113.0 - Unauthenticated Arbitrary Media Upload via cr_upload_media (medium 6.5)
- [CVE-2026-12683](https://insights.sbomify.com/CVE-2026-12683/): Stored XSS Yönetim panel in Ankaref's LIBRID/LIBREF (medium 5.4)
- [CVE-2026-12682](https://insights.sbomify.com/CVE-2026-12682/): Stored XSS in Ankaref's LIBRID/LIBREF (medium 5.4)
- [CVE-2026-12681](https://insights.sbomify.com/CVE-2026-12681/): Go-Attestation: Hash injection into trusted measurement list via unskipped SignatureHeaderSize vendor bytes in parseEfiSignatureList() (high 8.9)
- [CVE-2026-1268](https://insights.sbomify.com/CVE-2026-1268/): Dynamic Widget Content <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Content Field (medium 6.4)
- [CVE-2026-12673](https://insights.sbomify.com/CVE-2026-12673/): Privilege escalation in liquidfiles (medium 5.9)
- [CVE-2026-12670](https://insights.sbomify.com/CVE-2026-12670/): IBM MQ Denial of Service (medium 5.3)
- [CVE-2026-1267](https://insights.sbomify.com/CVE-2026-1267/): IBM Planning Analytics Information Disclosure (medium 6.5)
- [CVE-2026-12669](https://insights.sbomify.com/CVE-2026-12669/): IBM MQ Out-of-bounds Read (low 3.1)
- [CVE-2026-12667](https://insights.sbomify.com/CVE-2026-12667/): IBM MQ .NET client is vulnerable to XML external entity injection (high 7.1)
- [CVE-2026-12666](https://insights.sbomify.com/CVE-2026-12666/): IBM MQ Java messaging is vulnerable to XML external entity injection (high 8.1)
- [CVE-2026-12665](https://insights.sbomify.com/CVE-2026-12665/): IBM MQ Buffer Overflow (high 8.1)
- [CVE-2026-12664](https://insights.sbomify.com/CVE-2026-12664/): Incorrect Authorization in GitLab (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/882/