# Vulnerabilities published in 2026


- [CVE-2026-1243](https://insights.sbomify.com/CVE-2026-1243/): IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability (medium 5.4)
- [CVE-2026-12428](https://insights.sbomify.com/CVE-2026-12428/): Missing authorization in Blocks for ACF Fields — Display Custom Fields in the Block Editor (medium 6.5)
- [CVE-2026-12426](https://insights.sbomify.com/CVE-2026-12426/): Members <= 3.2.22 - Unauthenticated Sensitive Information Disclosure via REST API Pagination Side Channel (medium 5.3)
- [CVE-2026-12425](https://insights.sbomify.com/CVE-2026-12425/): Reflected / DOM cross-site scripting (XSS) in PowerSchool ERP / Employee Access Center 23.10 (medium 5.7)
- [CVE-2026-12423](https://insights.sbomify.com/CVE-2026-12423/): Foreman: unauthenticated information disclosure via provisioning token validation flaw (high 7.5)
- [CVE-2026-12421](https://insights.sbomify.com/CVE-2026-12421/): ARforms <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'password' Field Values (high 7.2)
- [CVE-2026-1242](https://insights.sbomify.com/CVE-2026-1242/): Missing authorization in BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites (medium 4.3)
- [CVE-2026-12418](https://insights.sbomify.com/CVE-2026-12418/): Missing authorization in User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (medium 5.3)
- [CVE-2026-12417](https://insights.sbomify.com/CVE-2026-12417/): Auth bypass in SignUp & SignIn (critical 9.8)
- [CVE-2026-12416](https://insights.sbomify.com/CVE-2026-12416/): Auth bypass in Invoice Generator (critical 9.8)
- [CVE-2026-12415](https://insights.sbomify.com/CVE-2026-12415/): Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter (critical 9.8)
- [CVE-2026-12413](https://insights.sbomify.com/CVE-2026-12413/): IKEv2 Denial of Service via malformed fragmentation (high 7.5)
- [CVE-2026-12411](https://insights.sbomify.com/CVE-2026-12411/): Broken Access Control in Canonical LXD DevLXD API (high 8.4)
- [CVE-2026-12410](https://insights.sbomify.com/CVE-2026-12410/): CCleaner local privilege escalation via link following on uninstall (high 7.8)
- [CVE-2026-1241](https://insights.sbomify.com/CVE-2026-1241/): Authentication Bypass Using an Alternate Path or Channel in Pelco, Inc. Sarix Pro 3 Series IP Cameras (high 8.7)
- [CVE-2026-12409](https://insights.sbomify.com/CVE-2026-12409/): Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action (medium 4.3)
- [CVE-2026-12408](https://insights.sbomify.com/CVE-2026-12408/): Missing authorization in Slim SEO – A Fast & Automated SEO Plugin For WordPress (medium 4.3)
- [CVE-2026-12407](https://insights.sbomify.com/CVE-2026-12407/): Missing authorization in E2Pdf – Export Pdf Tool for WordPress (high 8.8)
- [CVE-2026-12406](https://insights.sbomify.com/CVE-2026-12406/): Missing authorization in User Frontend: AI Powered Frontend Posting, User Directory, Profile Builder, Membership & User Registration (medium 5.3)
- [CVE-2026-12405](https://insights.sbomify.com/CVE-2026-12405/): Rubygem-foreman_remote_execution: command injection in job invocations via effective_user parameter (high 8.8)
- [CVE-2026-12404](https://insights.sbomify.com/CVE-2026-12404/): NEX-Forms <= 9.2.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via CSVExport Class (medium 5.3)
- [CVE-2026-12402](https://insights.sbomify.com/CVE-2026-12402/): Cross-site scripting in OTP Login & Register Woocommerce (medium 4.4)
- [CVE-2026-12400](https://insights.sbomify.com/CVE-2026-12400/): Missing authorization in FlowForms – Conversational Form Builder (medium 4.3)
- [CVE-2026-12399](https://insights.sbomify.com/CVE-2026-12399/): Gutenverse <= 3.8.0 - Authenticated (Editor+) Stored Cross-Site Scripting via 'fonts[].font.font.value' Parameter (medium 4.4)
- [CVE-2026-12398](https://insights.sbomify.com/CVE-2026-12398/): Galaxy_ng: shell injection in legacy role import via unsanitized git ref names (high 7.5)
- [CVE-2026-12397](https://insights.sbomify.com/CVE-2026-12397/): WP Job Portal < 2.5.5 - Subscriber+ Employer Email Disclosure via IDOR (medium 4.3)
- [CVE-2026-12396](https://insights.sbomify.com/CVE-2026-12396/): WP Job Portal < 2.5.5 - Subscriber+ Arbitrary Job Approval, Featuring and Rejection (medium 5.4)
- [CVE-2026-12395](https://insights.sbomify.com/CVE-2026-12395/): WP Job Portal < 2.5.5 - Subscriber+ SQL Injection via Applied Resumes 'ta' Parameter (medium 6.5)
- [CVE-2026-12394](https://insights.sbomify.com/CVE-2026-12394/): MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation to Administrator (critical 9.8)
- [CVE-2026-12393](https://insights.sbomify.com/CVE-2026-12393/): WPS Bookings for WooCommerce < 3.11.7 - Subscriber+ Arbitrary Booking Order Cancellation via IDOR (medium 5.4)
- [CVE-2026-12392](https://insights.sbomify.com/CVE-2026-12392/): RPC secret disclosure via vendor data endpoint in Canonical MAAS (medium 5.3)
- [CVE-2026-12391](https://insights.sbomify.com/CVE-2026-12391/): ubuntu-pro-client Local Privilege Escalation and Information Disclosure via Symlink Arbitrary File Read in collect-logs (medium 5.0)
- [CVE-2026-12390](https://insights.sbomify.com/CVE-2026-12390/): Access of resource using incompatible type ('type confusion') in AzeoTech DAQFactory (high 8.4)
- [CVE-2026-1239](https://insights.sbomify.com/CVE-2026-1239/): Missing authorization in Ninja Forms – The Contact Form Builder That Grows With You (high 7.5)
- [CVE-2026-12388](https://insights.sbomify.com/CVE-2026-12388/): Privilege escalation in Red Hat Build of Keycloak (medium 6.5)
- [CVE-2026-12387](https://insights.sbomify.com/CVE-2026-12387/): Mali GPU Kernel Driver allows access to already freed memory (medium 5.1)
- [CVE-2026-12386](https://insights.sbomify.com/CVE-2026-12386/): Buffer Overflow in TUBITAK BILGEM's Pardus Pen (low 3.9)
- [CVE-2026-12385](https://insights.sbomify.com/CVE-2026-12385/): Missing authorization in Smart Slider 3 (medium 4.3)
- [CVE-2026-12384](https://insights.sbomify.com/CVE-2026-12384/): Broken Access Control in TECHIN2B Application (high 8.8)
- [CVE-2026-12383](https://insights.sbomify.com/CVE-2026-12383/): Eda-server: externaleventstreamviewset trusts subject header without validation and leaks expected dn (high 7.5)
- [CVE-2026-12382](https://insights.sbomify.com/CVE-2026-12382/): Aap-gateway: missing requestheaderstoremove allows mtls bypass via subject header spoofing (high 8.2)
- [CVE-2026-12380](https://insights.sbomify.com/CVE-2026-12380/): Reflected XSS in Akıllı Ticaret's E-Commerce Pack (medium 6.1)
- [CVE-2026-1238](https://insights.sbomify.com/CVE-2026-1238/): SlimStat Analytics <= 5.3.5 - Unauthenticated Stored Cross-Site Scripting via 'fh' (high 7.2)
- [CVE-2026-12379](https://insights.sbomify.com/CVE-2026-12379/): URL Redirection to Untrusted Site ('Open Redirect') vulnerability in the Dashboard OAuth/OIDC implementation of Axivion (medium 6.8)
- [CVE-2026-12378](https://insights.sbomify.com/CVE-2026-12378/): BookingPress <= 1.1.28 - Unauthenticated PHP Object Injection (high 8.1)
- [CVE-2026-12376](https://insights.sbomify.com/CVE-2026-12376/): Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint (medium 4.3)
- [CVE-2026-12375](https://insights.sbomify.com/CVE-2026-12375/): Uncanny Automator Pro 7.3.0.5 - Backdoor via Compromised Vendor Update Server (critical 9.8)
- [CVE-2026-12374](https://insights.sbomify.com/CVE-2026-12374/): Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool (medium 6.4)
- [CVE-2026-12372](https://insights.sbomify.com/CVE-2026-12372/): Server-Side Request Forgery (SSRF) in nltk/nltk (low 3.7)
- [CVE-2026-12370](https://insights.sbomify.com/CVE-2026-12370/): Remote Code Execution Vulnerability (high 7.6)
- [CVE-2026-1237](https://insights.sbomify.com/CVE-2026-1237/): Juju has broken CMR authorization (low 2.1)
- [CVE-2026-12366](https://insights.sbomify.com/CVE-2026-12366/): Use-after-free freeing an armed dynamically-allocated k_timer in Zephyr userspace object disposal (high 8.8)
- [CVE-2026-12365](https://insights.sbomify.com/CVE-2026-12365/): Use-after-free in Zephyr delayable work-queue cancellation under SMP timing race (medium 5.8)
- [CVE-2026-12364](https://insights.sbomify.com/CVE-2026-12364/): Memory corruption in zephyr (high 8.4)
- [CVE-2026-12363](https://insights.sbomify.com/CVE-2026-12363/): Out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 0 (medium 4.2)
- [CVE-2026-12360](https://insights.sbomify.com/CVE-2026-12360/): JetEngine <= 3.8.10.1 - Unauthenticated SQL Injection via Listing Grid Load More AJAX Endpoint (high 7.5)
- [CVE-2026-1236](https://insights.sbomify.com/CVE-2026-1236/): Cross-site scripting in Envira Gallery – Image Photo Gallery, Albums, Video Gallery, Slideshows & More (medium 6.4)
- [CVE-2026-12359](https://insights.sbomify.com/CVE-2026-12359/): Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access (high 8.1)
- [CVE-2026-12358](https://insights.sbomify.com/CVE-2026-12358/): Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access (high 7.5)
- [CVE-2026-12357](https://insights.sbomify.com/CVE-2026-12357/): Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability (high 7.2)
- [CVE-2026-12355](https://insights.sbomify.com/CVE-2026-12355/): IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution (high 8.1)
- [CVE-2026-12354](https://insights.sbomify.com/CVE-2026-12354/): IBM MQ Resource Adapter IVT message-driven bean is vulnerable to remote code execution via JNDI injection (high 7.5)
- [CVE-2026-12353](https://insights.sbomify.com/CVE-2026-12353/): Rhcs: memory leak during https connection leads to denial of service (medium 5.3)
- [CVE-2026-12352](https://insights.sbomify.com/CVE-2026-12352/): Incorrect Authorization (medium 5.9)
- [CVE-2026-12351](https://insights.sbomify.com/CVE-2026-12351/): IBM MQ is vulnerable to unauthenticated remote code execution via JNDI injection (critical 9.8)
- [CVE-2026-12350](https://insights.sbomify.com/CVE-2026-12350/): IBM MQ Deserialization of Untrusted Data (medium 6.5)
- [CVE-2026-1235](https://insights.sbomify.com/CVE-2026-1235/): WP eCommerce <= 3.15.1 - Unauthenticated PHP Object Injection (medium 6.5)
- [CVE-2026-12349](https://insights.sbomify.com/CVE-2026-12349/): Missing authorization in Premium Addons for KingComposer (medium 5.3)
- [CVE-2026-12348](https://insights.sbomify.com/CVE-2026-12348/): Address Bar Spoofing in Arc Search for Android (window.open race condition) (high 7.4)
- [CVE-2026-12345](https://insights.sbomify.com/CVE-2026-12345/): Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory (medium 5.9)
- [CVE-2026-12343](https://insights.sbomify.com/CVE-2026-12343/): IBM MQ Denial of Service (medium 6.5)
- [CVE-2026-12342](https://insights.sbomify.com/CVE-2026-12342/): SailPoint IdentityIQ Improper Form Validation Vulnerability (critical 9.6)
- [CVE-2026-12341](https://insights.sbomify.com/CVE-2026-12341/): SailPoint IdentityIQ Improper Bearer Token Validation Vulnerability (high 8.8)
- [CVE-2026-12340](https://insights.sbomify.com/CVE-2026-12340/): Out-of-bounds heap read in SM2/SM3 certificate Subject Key Identifier computation (medium 6.3)
- [CVE-2026-12339](https://insights.sbomify.com/CVE-2026-12339/): Authenticated Arbitrary File Write Vulnerability in multiple devices (medium 6.9)
- [CVE-2026-12330](https://insights.sbomify.com/CVE-2026-12330/): Incorrect boundary conditions in the Internationalization component (medium 5.4)
- [CVE-2026-1233](https://insights.sbomify.com/CVE-2026-1233/): Text to Speech (TTS) by Mementor <= 1.9.8 - Use of Hardcoded Password to Unauthenticated Remote Database Access (high 7.5)
- [CVE-2026-12329](https://insights.sbomify.com/CVE-2026-12329/): Memory safety bug fixed in Thunderbird ESR 140.12 (medium 5.3)
- [CVE-2026-12328](https://insights.sbomify.com/CVE-2026-12328/): Memory corruption in Firefox (high 8.1)
- [CVE-2026-12327](https://insights.sbomify.com/CVE-2026-12327/): Memory safety bugs fixed in Firefox ESR 140.12, Thunderbird ESR 140.12, Firefox 152 and Thunderbird 152 (high 8.1)
- [CVE-2026-12326](https://insights.sbomify.com/CVE-2026-12326/): Memory safety bugs fixed in Firefox 152 and Thunderbird 152 (high 8.1)
- [CVE-2026-12325](https://insights.sbomify.com/CVE-2026-12325/): Denial-of-service in the Graphics: ImageLib component (medium 6.5)
- [CVE-2026-12324](https://insights.sbomify.com/CVE-2026-12324/): Incorrect boundary conditions in the Graphics: CanvasWebGL component (high 7.3)
- [CVE-2026-12323](https://insights.sbomify.com/CVE-2026-12323/): Spoofing issue in the DOM: Core & HTML component (medium 5.4)
- [CVE-2026-12322](https://insights.sbomify.com/CVE-2026-12322/): Clickjacking issue in the Widget: Gtk component (medium 5.4)
- [CVE-2026-12321](https://insights.sbomify.com/CVE-2026-12321/): JIT miscompilation in the JavaScript: WebAssembly component (medium 5.4)
- [CVE-2026-12320](https://insights.sbomify.com/CVE-2026-12320/): Information disclosure in the Password Manager component (medium 4.3)
- [CVE-2026-1232](https://insights.sbomify.com/CVE-2026-1232/): Anti-Tamper Bypass in BeyondTrust Privilege Management for Windows (medium 6.8)
- [CVE-2026-12319](https://insights.sbomify.com/CVE-2026-12319/): Denial-of-service in the Audio/Video: Playback component (medium 6.5)
- [CVE-2026-12318](https://insights.sbomify.com/CVE-2026-12318/): Incorrect boundary conditions in the Libraries component in NSS (high 7.3)
- [CVE-2026-12317](https://insights.sbomify.com/CVE-2026-12317/): Memory safety bug fixed in Thunderbird 152 (high 7.5)
- [CVE-2026-12316](https://insights.sbomify.com/CVE-2026-12316/): Mitigation bypass in the DOM: Security component (critical 9.1)
- [CVE-2026-12315](https://insights.sbomify.com/CVE-2026-12315/): Mitigation bypass in the DOM: Security component (critical 9.1)
- [CVE-2026-12314](https://insights.sbomify.com/CVE-2026-12314/): Memory safety bug fixed in Thunderbird 152 (high 7.5)
- [CVE-2026-12313](https://insights.sbomify.com/CVE-2026-12313/): Information disclosure, sandbox escape in the Security: Process Sandboxing component (medium 4.7)
- [CVE-2026-12312](https://insights.sbomify.com/CVE-2026-12312/): Memory safety bug fixed in Thunderbird 152 (high 7.5)
- [CVE-2026-12311](https://insights.sbomify.com/CVE-2026-12311/): Information disclosure, sandbox escape in the Security: Process Sandboxing component (medium 4.7)
- [CVE-2026-12310](https://insights.sbomify.com/CVE-2026-12310/): Memory safety bug fixed in Thunderbird 152 (high 7.5)
- [CVE-2026-1231](https://insights.sbomify.com/CVE-2026-1231/): Cross-site scripting in Beaver Builder Page Builder – Drag and Drop Website Builder (medium 6.4)
- [CVE-2026-12309](https://insights.sbomify.com/CVE-2026-12309/): Memory safety bug fixed in Thunderbird 152 (medium 6.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/885/