# Vulnerabilities published in 2026


- [CVE-2026-112271](https://insights.sbomify.com/CVE-2026-112271/): libdisplay-info through 0.4.0 Heap Out-of-Bounds Read via DisplayID v1 Parser (medium 6.8)
- [CVE-2026-112270](https://insights.sbomify.com/CVE-2026-112270/): SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx (high 7.1)
- [CVE-2026-11227](https://insights.sbomify.com/CVE-2026-11227/): Other in Chrome (medium 6.5)
- [CVE-2026-112269](https://insights.sbomify.com/CVE-2026-112269/): SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations (high 7.1)
- [CVE-2026-112268](https://insights.sbomify.com/CVE-2026-112268/): sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes (medium 5.3)
- [CVE-2026-112267](https://insights.sbomify.com/CVE-2026-112267/): SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker (medium 6.9)
- [CVE-2026-112266](https://insights.sbomify.com/CVE-2026-112266/): SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching (high 8.2)
- [CVE-2026-112265](https://insights.sbomify.com/CVE-2026-112265/): LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification (high 8.3)
- [CVE-2026-112264](https://insights.sbomify.com/CVE-2026-112264/): BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys (high 8.5)
- [CVE-2026-112263](https://insights.sbomify.com/CVE-2026-112263/): Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting (high 8.5)
- [CVE-2026-112262](https://insights.sbomify.com/CVE-2026-112262/): RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors (high 7.1)
- [CVE-2026-112261](https://insights.sbomify.com/CVE-2026-112261/): Gimp: gimp: use-after-free in xcf loader via prop_selected_path (high 7.8)
- [CVE-2026-112260](https://insights.sbomify.com/CVE-2026-112260/): Gimp: gimp: heap out-of-bounds read in xcf text-layer parasite parsing (high 7.1)
- [CVE-2026-11226](https://insights.sbomify.com/CVE-2026-11226/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-112259](https://insights.sbomify.com/CVE-2026-112259/): Gimp: gimp: null pointer dereference in swatchbooker (sbz) palette import (medium 5.5)
- [CVE-2026-112258](https://insights.sbomify.com/CVE-2026-112258/): Gimp: gimp: use-after-free in xcf loader via prop_linked and prop_selection on channels (high 7.8)
- [CVE-2026-112257](https://insights.sbomify.com/CVE-2026-112257/): Gimp: gimp: heap out-of-bounds read/write in psd thumbnail loader (load_resource_1033) (high 7.8)
- [CVE-2026-112256](https://insights.sbomify.com/CVE-2026-112256/): Logon bypass (trust of attacker-controlled completed-methods list) (critical 9.2)
- [CVE-2026-112255](https://insights.sbomify.com/CVE-2026-112255/): Endpoint credential minting (insecure default allow-list) (low 2.9)
- [CVE-2026-112254](https://insights.sbomify.com/CVE-2026-112254/): agit8or1 clientst0r Property URL Importer property_url_importer.py _fetch_html server-side request forgery (medium 5.3)
- [CVE-2026-112252](https://insights.sbomify.com/CVE-2026-112252/): SQL injection in Wubang Five-in-One Safety Production Management Information System (medium 6.9)
- [CVE-2026-112251](https://insights.sbomify.com/CVE-2026-112251/): antoinersx clawhost Reverse Proxy reverseProxy.ts handleRequest redirect (medium 5.3)
- [CVE-2026-112250](https://insights.sbomify.com/CVE-2026-112250/): Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files (medium 4.4)
- [CVE-2026-11225](https://insights.sbomify.com/CVE-2026-11225/): Other in Chrome (medium 6.5)
- [CVE-2026-112249](https://insights.sbomify.com/CVE-2026-112249/): grandnode grandnode2 Product Description Product.Layout.Simple.cshtml Html.Raw cross site scripting (medium 4.8)
- [CVE-2026-112248](https://insights.sbomify.com/CVE-2026-112248/): grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal (medium 5.1)
- [CVE-2026-112247](https://insights.sbomify.com/CVE-2026-112247/): Cross-site scripting in Five-in-One Safety Production Management Information System (medium 5.3)
- [CVE-2026-112242](https://insights.sbomify.com/CVE-2026-112242/): WordPress Profile Builder plugin <= 4.0.4 - Privilege Escalation vulnerability (high 8.8)
- [CVE-2026-112241](https://insights.sbomify.com/CVE-2026-112241/): WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability (critical 9.8)
- [CVE-2026-112240](https://insights.sbomify.com/CVE-2026-112240/): Broken Access Control in extension "TYPO3 Fluid-Form by coding.ms" (fluid_form) (medium 6.3)
- [CVE-2026-11224](https://insights.sbomify.com/CVE-2026-11224/): Use after free in Chrome (high 8.1)
- [CVE-2026-112239](https://insights.sbomify.com/CVE-2026-112239/): Broken Access Control in extension "TYPO3 AI Integration Extension" (ns_t3ai) (high 7.2)
- [CVE-2026-112238](https://insights.sbomify.com/CVE-2026-112238/): SQL Injection in extension "File manager" (ameos_filemanager) (high 8.7)
- [CVE-2026-112237](https://insights.sbomify.com/CVE-2026-112237/): Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf) (medium 6.9)
- [CVE-2026-112230](https://insights.sbomify.com/CVE-2026-112230/): Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter (low 3.7)
- [CVE-2026-11223](https://insights.sbomify.com/CVE-2026-11223/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-112222](https://insights.sbomify.com/CVE-2026-112222/): WordPress Surfer plugin <= 1.8.0.744 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2026-112221](https://insights.sbomify.com/CVE-2026-112221/): WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-11222](https://insights.sbomify.com/CVE-2026-11222/): Other in Chrome (medium 6.5)
- [CVE-2026-112219](https://insights.sbomify.com/CVE-2026-112219/): Download Monitor < 5.3.5 - Multisite Subsite Admin+ Incorrect Authorization via Approved Download Paths REST Route (medium 4.9)
- [CVE-2026-112218](https://insights.sbomify.com/CVE-2026-112218/): WordPress Majestic Support plugin <= 1.2.1 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-112214](https://insights.sbomify.com/CVE-2026-112214/): Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser (medium 6.5)
- [CVE-2026-112212](https://insights.sbomify.com/CVE-2026-112212/): Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in GitLab (high 7.5)
- [CVE-2026-112210](https://insights.sbomify.com/CVE-2026-112210/): Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service (medium 6.0)
- [CVE-2026-11221](https://insights.sbomify.com/CVE-2026-11221/): Other in Chrome (medium 4.3)
- [CVE-2026-112207](https://insights.sbomify.com/CVE-2026-112207/): Download Monitor < 5.3.4 - Reflected XSS via Cross-Origin Download Link (high 7.1)
- [CVE-2026-112202](https://insights.sbomify.com/CVE-2026-112202/): Imager::File::GIF versions before 1.006 for Perl allow out-of-bounds reads when consolidating GIF images (not scored)
- [CVE-2026-112200](https://insights.sbomify.com/CVE-2026-112200/): Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness (high 8.7)
- [CVE-2026-11220](https://insights.sbomify.com/CVE-2026-11220/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-1122](https://insights.sbomify.com/CVE-2026-1122/): Yonyou KSOA HTTP GET Parameter work_info.jsp sql injection (medium 6.9)
- [CVE-2026-112199](https://insights.sbomify.com/CVE-2026-112199/): WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-112198](https://insights.sbomify.com/CVE-2026-112198/): Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App (high 8.3)
- [CVE-2026-112197](https://insights.sbomify.com/CVE-2026-112197/): Missing Authentication for Critical Function in Tactis' NoviGest Desktop App (critical 9.4)
- [CVE-2026-112195](https://insights.sbomify.com/CVE-2026-112195/): FusionPBX Dialplan Editor dialplan.php os command injection (medium 5.1)
- [CVE-2026-112193](https://insights.sbomify.com/CVE-2026-112193/): Webkul Aureus ERP UserForm.php weak password (medium 6.3)
- [CVE-2026-112192](https://insights.sbomify.com/CVE-2026-112192/): MISP Module Settings Expose Redacted Values and Allow API Modification of CLI-Only Settings (medium 5.3)
- [CVE-2026-112190](https://insights.sbomify.com/CVE-2026-112190/): Webkul Aureus ERP composer.json insertion of sensitive information into debugging code (medium 6.9)
- [CVE-2026-11219](https://insights.sbomify.com/CVE-2026-11219/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-112188](https://insights.sbomify.com/CVE-2026-112188/): MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution (high 7.1)
- [CVE-2026-112184](https://insights.sbomify.com/CVE-2026-112184/): MISP Workflow Module: Reflected XSS via Unescaped misp-modules Parameter Names in Form Labels (medium 4.8)
- [CVE-2026-112183](https://insights.sbomify.com/CVE-2026-112183/): MISP CSS Injection via Remote Tag Colour in Event Preview (medium 4.8)
- [CVE-2026-112180](https://insights.sbomify.com/CVE-2026-112180/): MISP Incomplete Event Deletion Leaves Orphaned Sensitive Records (medium 5.1)
- [CVE-2026-11218](https://insights.sbomify.com/CVE-2026-11218/): Code injection in Chrome (medium 6.8)
- [CVE-2026-112179](https://insights.sbomify.com/CVE-2026-112179/): MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances (medium 5.3)
- [CVE-2026-112178](https://insights.sbomify.com/CVE-2026-112178/): MISP Proposal ACL Bypass: Incomplete Distribution Level Check in Shadow Attribute Access Control (high 7.1)
- [CVE-2026-112177](https://insights.sbomify.com/CVE-2026-112177/): Ghostscript: reintroduction of .charkeys -dsafer bypass in rhel 8 (high 7.3)
- [CVE-2026-11217](https://insights.sbomify.com/CVE-2026-11217/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-112161](https://insights.sbomify.com/CVE-2026-112161/): Lack of integrity checks in Mobatek’s MobaXterm (high 8.5)
- [CVE-2026-11216](https://insights.sbomify.com/CVE-2026-11216/): Other in Chrome (medium 4.3)
- [CVE-2026-112159](https://insights.sbomify.com/CVE-2026-112159/): JumpServer Template Rendering os command injection (medium 5.1)
- [CVE-2026-112158](https://insights.sbomify.com/CVE-2026-112158/): MikroTik RouterOS ipt_SAME.ko same_check integer overflow (high 7.1)
- [CVE-2026-112157](https://insights.sbomify.com/CVE-2026-112157/): MemTensor memmy-agent Memory Service http.ts requireAdminWrite resource consumption (low 2.3)
- [CVE-2026-112153](https://insights.sbomify.com/CVE-2026-112153/): vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection (medium 6.9)
- [CVE-2026-112152](https://insights.sbomify.com/CVE-2026-112152/): vraj404 Criminal-Management-System Search searchOff.php mysqli_query sql injection (medium 6.9)
- [CVE-2026-112151](https://insights.sbomify.com/CVE-2026-112151/): vraj404 Criminal Management System Submission Form home.php sql injection (medium 6.9)
- [CVE-2026-112150](https://insights.sbomify.com/CVE-2026-112150/): vraj404 Criminal-Management-System search.php sql injection (medium 6.9)
- [CVE-2026-11215](https://insights.sbomify.com/CVE-2026-11215/): Other in Chrome (medium 6.5)
- [CVE-2026-112149](https://insights.sbomify.com/CVE-2026-112149/): vraj404 Criminal-Management-System home.php move_uploaded_file unrestricted upload (medium 6.9)
- [CVE-2026-112148](https://insights.sbomify.com/CVE-2026-112148/): Cross-site scripting in LIFF SDK (medium 5.1)
- [CVE-2026-112147](https://insights.sbomify.com/CVE-2026-112147/): ai-genius-automations octoally index.ts information disclosure (medium 6.9)
- [CVE-2026-112146](https://insights.sbomify.com/CVE-2026-112146/): D-Link E15/M32/R15/R32 MQTT Broker passwd hard-coded credentials (medium 5.3)
- [CVE-2026-112145](https://insights.sbomify.com/CVE-2026-112145/): Code injection in speaches (medium 6.9)
- [CVE-2026-112144](https://insights.sbomify.com/CVE-2026-112144/): satya-vinay Events-Management-System project.sql file access (medium 6.9)
- [CVE-2026-112143](https://insights.sbomify.com/CVE-2026-112143/): satya-vinay Events-Management-System missing authentication (medium 6.9)
- [CVE-2026-112142](https://insights.sbomify.com/CVE-2026-112142/): satya-vinay Events-Management-System Registration-Delete dodelete.php sql injection (medium 6.9)
- [CVE-2026-112141](https://insights.sbomify.com/CVE-2026-112141/): satya-vinay Events-Management-System Registration-Edit doedit.php mysqli_query sql injection (medium 6.9)
- [CVE-2026-112140](https://insights.sbomify.com/CVE-2026-112140/): llSourcell Doctor-Dignity chat_module.py _get_lib_module code injection (medium 5.3)
- [CVE-2026-11214](https://insights.sbomify.com/CVE-2026-11214/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-112139](https://insights.sbomify.com/CVE-2026-112139/): subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection (medium 6.9)
- [CVE-2026-112138](https://insights.sbomify.com/CVE-2026-112138/): diem-project diem dmCodeEditor actions.class.php join path traversal (medium 5.1)
- [CVE-2026-11213](https://insights.sbomify.com/CVE-2026-11213/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-11212](https://insights.sbomify.com/CVE-2026-11212/): Security feature bypass in Chrome (medium 4.3)
- [CVE-2026-112112](https://insights.sbomify.com/CVE-2026-112112/): Security feature bypass in BIRD (low 2.3)
- [CVE-2026-112111](https://insights.sbomify.com/CVE-2026-112111/): Cross-site scripting in Bootstrap Shortcodes (medium 5.1)
- [CVE-2026-11211](https://insights.sbomify.com/CVE-2026-11211/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-112108](https://insights.sbomify.com/CVE-2026-112108/): ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow (medium 5.3)
- [CVE-2026-112107](https://insights.sbomify.com/CVE-2026-112107/): ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow (medium 5.3)
- [CVE-2026-112106](https://insights.sbomify.com/CVE-2026-112106/): TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation (medium 6.3)
- [CVE-2026-112105](https://insights.sbomify.com/CVE-2026-112105/): GlitterWare Passy TLS main.dart MyHttpOverrides certificate validation (medium 6.3)
- [CVE-2026-112104](https://insights.sbomify.com/CVE-2026-112104/): eremef bandcamp-player Remote Control Server database.ts missing authentication (medium 6.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/924/