# Vulnerabilities published in 2026


- [CVE-2026-11326](https://insights.sbomify.com/CVE-2026-11326/): Missing authorization in OpenAI Atlas (medium 6.0)
- [CVE-2026-113259](https://insights.sbomify.com/CVE-2026-113259/): Use after free in Chrome (high 8.8)
- [CVE-2026-113258](https://insights.sbomify.com/CVE-2026-113258/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113257](https://insights.sbomify.com/CVE-2026-113257/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113256](https://insights.sbomify.com/CVE-2026-113256/): Use after free in Chrome (high 8.8)
- [CVE-2026-113255](https://insights.sbomify.com/CVE-2026-113255/): Use after free in Chrome (high 8.8)
- [CVE-2026-113254](https://insights.sbomify.com/CVE-2026-113254/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113253](https://insights.sbomify.com/CVE-2026-113253/): Use after free in Chrome (high 8.8)
- [CVE-2026-113252](https://insights.sbomify.com/CVE-2026-113252/): Other in Chrome (critical 9.6)
- [CVE-2026-113251](https://insights.sbomify.com/CVE-2026-113251/): Use after free in Chrome (high 8.8)
- [CVE-2026-113250](https://insights.sbomify.com/CVE-2026-113250/): Use after free in Chrome (high 8.8)
- [CVE-2026-11325](https://insights.sbomify.com/CVE-2026-11325/): cloudflare/pages-action is deprecated — migration required by September 18th, 2026 (high 8.8)
- [CVE-2026-113249](https://insights.sbomify.com/CVE-2026-113249/): Other in Chrome (high 8.8)
- [CVE-2026-113248](https://insights.sbomify.com/CVE-2026-113248/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113247](https://insights.sbomify.com/CVE-2026-113247/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113246](https://insights.sbomify.com/CVE-2026-113246/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113245](https://insights.sbomify.com/CVE-2026-113245/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113244](https://insights.sbomify.com/CVE-2026-113244/): Other in Chrome (high 8.8)
- [CVE-2026-113243](https://insights.sbomify.com/CVE-2026-113243/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113242](https://insights.sbomify.com/CVE-2026-113242/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113241](https://insights.sbomify.com/CVE-2026-113241/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113240](https://insights.sbomify.com/CVE-2026-113240/): Use after free in Chrome (high 8.8)
- [CVE-2026-11324](https://insights.sbomify.com/CVE-2026-11324/): WooCommerce Placetopay Gateway <= 3.2.2 - Reflected Cross-Site Scripting via 'redirect-url' (medium 6.1)
- [CVE-2026-113239](https://insights.sbomify.com/CVE-2026-113239/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113238](https://insights.sbomify.com/CVE-2026-113238/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113237](https://insights.sbomify.com/CVE-2026-113237/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113236](https://insights.sbomify.com/CVE-2026-113236/): Use after free in Chrome (high 8.8)
- [CVE-2026-113235](https://insights.sbomify.com/CVE-2026-113235/): Other in Chrome (critical 9.6)
- [CVE-2026-113234](https://insights.sbomify.com/CVE-2026-113234/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113233](https://insights.sbomify.com/CVE-2026-113233/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113232](https://insights.sbomify.com/CVE-2026-113232/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113231](https://insights.sbomify.com/CVE-2026-113231/): Other in Chrome (high 8.8)
- [CVE-2026-113230](https://insights.sbomify.com/CVE-2026-113230/): Other in Chrome (high 8.8)
- [CVE-2026-113229](https://insights.sbomify.com/CVE-2026-113229/): Use after free in Chrome (high 8.8)
- [CVE-2026-113228](https://insights.sbomify.com/CVE-2026-113228/): Use after free in Chrome (high 8.8)
- [CVE-2026-113227](https://insights.sbomify.com/CVE-2026-113227/): Use after free in Chrome (high 8.8)
- [CVE-2026-113226](https://insights.sbomify.com/CVE-2026-113226/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113225](https://insights.sbomify.com/CVE-2026-113225/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113224](https://insights.sbomify.com/CVE-2026-113224/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113223](https://insights.sbomify.com/CVE-2026-113223/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113222](https://insights.sbomify.com/CVE-2026-113222/): Use after free in Chrome (critical 9.6)
- [CVE-2026-113221](https://insights.sbomify.com/CVE-2026-113221/): Use after free in Chrome (high 8.8)
- [CVE-2026-113220](https://insights.sbomify.com/CVE-2026-113220/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11322](https://insights.sbomify.com/CVE-2026-11322/): Hermes WebUI before 0.51.221 Path Traversal via Symlink Workspace Bypass (high 7.1)
- [CVE-2026-113219](https://insights.sbomify.com/CVE-2026-113219/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113218](https://insights.sbomify.com/CVE-2026-113218/): Use after free in Chrome (high 8.8)
- [CVE-2026-113217](https://insights.sbomify.com/CVE-2026-113217/): Use after free in Chrome (high 8.8)
- [CVE-2026-113216](https://insights.sbomify.com/CVE-2026-113216/): Use after free in Chrome (high 8.8)
- [CVE-2026-113215](https://insights.sbomify.com/CVE-2026-113215/): Use after free in Chrome (high 8.8)
- [CVE-2026-113214](https://insights.sbomify.com/CVE-2026-113214/): Other in Chrome (high 8.8)
- [CVE-2026-113213](https://insights.sbomify.com/CVE-2026-113213/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113212](https://insights.sbomify.com/CVE-2026-113212/): Memory corruption in Chrome (not scored)
- [CVE-2026-113211](https://insights.sbomify.com/CVE-2026-113211/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113210](https://insights.sbomify.com/CVE-2026-113210/): Use after free in Chrome (high 8.8)
- [CVE-2026-11321](https://insights.sbomify.com/CVE-2026-11321/): GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import (high 7.1)
- [CVE-2026-113209](https://insights.sbomify.com/CVE-2026-113209/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113208](https://insights.sbomify.com/CVE-2026-113208/): Use after free in Chrome (high 8.8)
- [CVE-2026-113207](https://insights.sbomify.com/CVE-2026-113207/): Use after free in Chrome (high 8.8)
- [CVE-2026-113206](https://insights.sbomify.com/CVE-2026-113206/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113205](https://insights.sbomify.com/CVE-2026-113205/): Use after free in Chrome (high 8.8)
- [CVE-2026-113204](https://insights.sbomify.com/CVE-2026-113204/): Use after free in Chrome (high 8.8)
- [CVE-2026-113203](https://insights.sbomify.com/CVE-2026-113203/): Use after free in Chrome (high 8.8)
- [CVE-2026-113202](https://insights.sbomify.com/CVE-2026-113202/): Use after free in Chrome (high 8.8)
- [CVE-2026-113201](https://insights.sbomify.com/CVE-2026-113201/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113200](https://insights.sbomify.com/CVE-2026-113200/): Use after free in Chrome (high 8.8)
- [CVE-2026-1132](https://insights.sbomify.com/CVE-2026-1132/): Yonyou KSOA HTTP GET Parameter edit_folder.jsp sql injection (medium 6.9)
- [CVE-2026-113199](https://insights.sbomify.com/CVE-2026-113199/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113198](https://insights.sbomify.com/CVE-2026-113198/): Use after free in Chrome (high 8.8)
- [CVE-2026-113197](https://insights.sbomify.com/CVE-2026-113197/): Use after free in Chrome (high 8.8)
- [CVE-2026-113196](https://insights.sbomify.com/CVE-2026-113196/): Security feature bypass in Chrome (not scored)
- [CVE-2026-113195](https://insights.sbomify.com/CVE-2026-113195/): Other in Chrome (high 8.8)
- [CVE-2026-113194](https://insights.sbomify.com/CVE-2026-113194/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113193](https://insights.sbomify.com/CVE-2026-113193/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113192](https://insights.sbomify.com/CVE-2026-113192/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113191](https://insights.sbomify.com/CVE-2026-113191/): Use after free in Chrome (high 8.8)
- [CVE-2026-113190](https://insights.sbomify.com/CVE-2026-113190/): Use after free in Chrome (high 8.8)
- [CVE-2026-11319](https://insights.sbomify.com/CVE-2026-11319/): TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity (medium 6.9)
- [CVE-2026-113189](https://insights.sbomify.com/CVE-2026-113189/): Use after free in Chrome (critical 9.6)
- [CVE-2026-113188](https://insights.sbomify.com/CVE-2026-113188/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113187](https://insights.sbomify.com/CVE-2026-113187/): Use after free in Chrome (high 8.8)
- [CVE-2026-113186](https://insights.sbomify.com/CVE-2026-113186/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113185](https://insights.sbomify.com/CVE-2026-113185/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113184](https://insights.sbomify.com/CVE-2026-113184/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113183](https://insights.sbomify.com/CVE-2026-113183/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113182](https://insights.sbomify.com/CVE-2026-113182/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113181](https://insights.sbomify.com/CVE-2026-113181/): Use after free in Chrome (high 8.8)
- [CVE-2026-113180](https://insights.sbomify.com/CVE-2026-113180/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11318](https://insights.sbomify.com/CVE-2026-11318/): Deskin 3.3.4.3 XPC Service Privilege Escalation via Unauthenticated Installer (high 8.5)
- [CVE-2026-113179](https://insights.sbomify.com/CVE-2026-113179/): Use after free in Chrome (high 8.8)
- [CVE-2026-113178](https://insights.sbomify.com/CVE-2026-113178/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-113177](https://insights.sbomify.com/CVE-2026-113177/): Use after free in Chrome (high 8.8)
- [CVE-2026-113176](https://insights.sbomify.com/CVE-2026-113176/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113175](https://insights.sbomify.com/CVE-2026-113175/): Other in Chrome (high 8.8)
- [CVE-2026-113174](https://insights.sbomify.com/CVE-2026-113174/): Use after free in Chrome (high 8.8)
- [CVE-2026-113173](https://insights.sbomify.com/CVE-2026-113173/): Other in Chrome (high 8.8)
- [CVE-2026-113172](https://insights.sbomify.com/CVE-2026-113172/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-113171](https://insights.sbomify.com/CVE-2026-113171/): Memory corruption in Chrome (critical 9.6)
- [CVE-2026-113170](https://insights.sbomify.com/CVE-2026-113170/): Use after free in Chrome (high 8.8)
- [CVE-2026-11317](https://insights.sbomify.com/CVE-2026-11317/): Rockwell Automation Logix 5370 and 5570 Controllers Vulnerable To Denial of Service Via CIP (high 8.7)
- [CVE-2026-113169](https://insights.sbomify.com/CVE-2026-113169/): Memory corruption in Chrome (critical 9.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/916/