# Vulnerabilities published in 2026


- [CVE-2026-113353](https://insights.sbomify.com/CVE-2026-113353/): LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers (medium 5.3)
- [CVE-2026-113352](https://insights.sbomify.com/CVE-2026-113352/): uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers (high 7.7)
- [CVE-2026-113351](https://insights.sbomify.com/CVE-2026-113351/): libexpat 2.7.2 through 2.9.0 Denial of Service via XML_ParserReset (high 8.2)
- [CVE-2026-113350](https://insights.sbomify.com/CVE-2026-113350/): react-admin before 5.15.5 Stored XSS via UrlField and FileField (medium 5.1)
- [CVE-2026-11335](https://insights.sbomify.com/CVE-2026-11335/): tittuvarghese CollegeManagementSystem login-form.php session_start session fixiation (medium 5.3)
- [CVE-2026-113349](https://insights.sbomify.com/CVE-2026-113349/): OpenCATS before 0.10.0 Missing Authorization in Calendar editEvent/deleteEvent (medium 5.3)
- [CVE-2026-113345](https://insights.sbomify.com/CVE-2026-113345/): Misconfiguration in Electronic delivery item Inspection Support System (high 8.5)
- [CVE-2026-113344](https://insights.sbomify.com/CVE-2026-113344/): Use after free in Chrome (high 8.8)
- [CVE-2026-113343](https://insights.sbomify.com/CVE-2026-113343/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113342](https://insights.sbomify.com/CVE-2026-113342/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113341](https://insights.sbomify.com/CVE-2026-113341/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113340](https://insights.sbomify.com/CVE-2026-113340/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-11334](https://insights.sbomify.com/CVE-2026-11334/): tittuvarghese CollegeManagementSystem fetch.php sql injection (medium 6.9)
- [CVE-2026-113339](https://insights.sbomify.com/CVE-2026-113339/): Use after free in Chrome (high 8.8)
- [CVE-2026-113338](https://insights.sbomify.com/CVE-2026-113338/): Use after free in Chrome (high 8.8)
- [CVE-2026-113337](https://insights.sbomify.com/CVE-2026-113337/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113336](https://insights.sbomify.com/CVE-2026-113336/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113335](https://insights.sbomify.com/CVE-2026-113335/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113334](https://insights.sbomify.com/CVE-2026-113334/): Other in Chrome (high 8.8)
- [CVE-2026-113333](https://insights.sbomify.com/CVE-2026-113333/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113332](https://insights.sbomify.com/CVE-2026-113332/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113331](https://insights.sbomify.com/CVE-2026-113331/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113330](https://insights.sbomify.com/CVE-2026-113330/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11333](https://insights.sbomify.com/CVE-2026-11333/): tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload (medium 5.3)
- [CVE-2026-113329](https://insights.sbomify.com/CVE-2026-113329/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113328](https://insights.sbomify.com/CVE-2026-113328/): Other in Chrome (critical 9.6)
- [CVE-2026-113327](https://insights.sbomify.com/CVE-2026-113327/): Use after free in Chrome (high 8.8)
- [CVE-2026-113326](https://insights.sbomify.com/CVE-2026-113326/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113325](https://insights.sbomify.com/CVE-2026-113325/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113324](https://insights.sbomify.com/CVE-2026-113324/): Use after free in Chrome (high 8.8)
- [CVE-2026-113323](https://insights.sbomify.com/CVE-2026-113323/): Use after free in Chrome (high 8.8)
- [CVE-2026-113322](https://insights.sbomify.com/CVE-2026-113322/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113321](https://insights.sbomify.com/CVE-2026-113321/): Use after free in Chrome (high 8.8)
- [CVE-2026-113320](https://insights.sbomify.com/CVE-2026-113320/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11332](https://insights.sbomify.com/CVE-2026-11332/): Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution (high 7.8)
- [CVE-2026-113319](https://insights.sbomify.com/CVE-2026-113319/): Use after free in Chrome (high 8.8)
- [CVE-2026-113318](https://insights.sbomify.com/CVE-2026-113318/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113317](https://insights.sbomify.com/CVE-2026-113317/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113316](https://insights.sbomify.com/CVE-2026-113316/): Code injection in Chrome (high 8.8)
- [CVE-2026-113315](https://insights.sbomify.com/CVE-2026-113315/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113314](https://insights.sbomify.com/CVE-2026-113314/): Use after free in Chrome (high 8.8)
- [CVE-2026-113313](https://insights.sbomify.com/CVE-2026-113313/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113312](https://insights.sbomify.com/CVE-2026-113312/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113311](https://insights.sbomify.com/CVE-2026-113311/): Use after free in Chrome (high 8.8)
- [CVE-2026-113310](https://insights.sbomify.com/CVE-2026-113310/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-11331](https://insights.sbomify.com/CVE-2026-11331/): Potential wildcard CNAME RPZ policy bypass (high 7.5)
- [CVE-2026-113309](https://insights.sbomify.com/CVE-2026-113309/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113308](https://insights.sbomify.com/CVE-2026-113308/): Use after free in Chrome (high 8.8)
- [CVE-2026-113307](https://insights.sbomify.com/CVE-2026-113307/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113306](https://insights.sbomify.com/CVE-2026-113306/): Other in Chrome (high 8.8)
- [CVE-2026-113305](https://insights.sbomify.com/CVE-2026-113305/): Use after free in Chrome (high 8.8)
- [CVE-2026-113304](https://insights.sbomify.com/CVE-2026-113304/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113303](https://insights.sbomify.com/CVE-2026-113303/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113302](https://insights.sbomify.com/CVE-2026-113302/): Use after free in Chrome (high 8.8)
- [CVE-2026-113301](https://insights.sbomify.com/CVE-2026-113301/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113300](https://insights.sbomify.com/CVE-2026-113300/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-11330](https://insights.sbomify.com/CVE-2026-11330/): thedotmack claude-mem Observation Content Hash store.ts computeObservationContentHash weak hash (low 2.0)
- [CVE-2026-1133](https://insights.sbomify.com/CVE-2026-1133/): Yonyou KSOA HTTP GET Parameter folder.jsp sql injection (medium 6.9)
- [CVE-2026-113299](https://insights.sbomify.com/CVE-2026-113299/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113298](https://insights.sbomify.com/CVE-2026-113298/): Use after free in Chrome (high 8.8)
- [CVE-2026-113297](https://insights.sbomify.com/CVE-2026-113297/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-113296](https://insights.sbomify.com/CVE-2026-113296/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113295](https://insights.sbomify.com/CVE-2026-113295/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113294](https://insights.sbomify.com/CVE-2026-113294/): Other in Chrome (high 8.8)
- [CVE-2026-113293](https://insights.sbomify.com/CVE-2026-113293/): Use after free in Chrome (high 8.8)
- [CVE-2026-113292](https://insights.sbomify.com/CVE-2026-113292/): Other in Chrome (high 8.8)
- [CVE-2026-113291](https://insights.sbomify.com/CVE-2026-113291/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113290](https://insights.sbomify.com/CVE-2026-113290/): Use after free in Chrome (high 8.8)
- [CVE-2026-11329](https://insights.sbomify.com/CVE-2026-11329/): onnx onnx-mlir Placeholder Node Cache backend.py generate_hash_key weak hash (low 2.0)
- [CVE-2026-113289](https://insights.sbomify.com/CVE-2026-113289/): Other in Chrome (high 8.8)
- [CVE-2026-113288](https://insights.sbomify.com/CVE-2026-113288/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113287](https://insights.sbomify.com/CVE-2026-113287/): Use after free in Chrome (high 8.8)
- [CVE-2026-113286](https://insights.sbomify.com/CVE-2026-113286/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113285](https://insights.sbomify.com/CVE-2026-113285/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113284](https://insights.sbomify.com/CVE-2026-113284/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113283](https://insights.sbomify.com/CVE-2026-113283/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113282](https://insights.sbomify.com/CVE-2026-113282/): Use after free in Chrome (high 8.8)
- [CVE-2026-113281](https://insights.sbomify.com/CVE-2026-113281/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113280](https://insights.sbomify.com/CVE-2026-113280/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11328](https://insights.sbomify.com/CVE-2026-11328/): Exclusive Addons for Elementor <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title (medium 6.4)
- [CVE-2026-113279](https://insights.sbomify.com/CVE-2026-113279/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113278](https://insights.sbomify.com/CVE-2026-113278/): Use after free in Chrome (high 8.8)
- [CVE-2026-113277](https://insights.sbomify.com/CVE-2026-113277/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113276](https://insights.sbomify.com/CVE-2026-113276/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113275](https://insights.sbomify.com/CVE-2026-113275/): Use after free in Chrome (high 8.8)
- [CVE-2026-113274](https://insights.sbomify.com/CVE-2026-113274/): Use after free in Chrome (high 8.8)
- [CVE-2026-113273](https://insights.sbomify.com/CVE-2026-113273/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113272](https://insights.sbomify.com/CVE-2026-113272/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113271](https://insights.sbomify.com/CVE-2026-113271/): Use after free in Chrome (high 8.8)
- [CVE-2026-113270](https://insights.sbomify.com/CVE-2026-113270/): Use after free in Chrome (critical 9.6)
- [CVE-2026-113269](https://insights.sbomify.com/CVE-2026-113269/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113268](https://insights.sbomify.com/CVE-2026-113268/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113267](https://insights.sbomify.com/CVE-2026-113267/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113266](https://insights.sbomify.com/CVE-2026-113266/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113265](https://insights.sbomify.com/CVE-2026-113265/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113264](https://insights.sbomify.com/CVE-2026-113264/): Other in Chrome (high 8.8)
- [CVE-2026-113263](https://insights.sbomify.com/CVE-2026-113263/): Use after free in Chrome (critical 9.6)
- [CVE-2026-113262](https://insights.sbomify.com/CVE-2026-113262/): Use after free in Chrome (high 8.8)
- [CVE-2026-113261](https://insights.sbomify.com/CVE-2026-113261/): Use after free in Chrome (critical 9.6)
- [CVE-2026-113260](https://insights.sbomify.com/CVE-2026-113260/): Memory corruption in Chrome (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/915/