# Vulnerabilities published in 2026


- [CVE-2026-11093](https://insights.sbomify.com/CVE-2026-11093/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110922](https://insights.sbomify.com/CVE-2026-110922/): Use after free in Chrome (high 8.8)
- [CVE-2026-110921](https://insights.sbomify.com/CVE-2026-110921/): Use after free in Chrome (high 8.8)
- [CVE-2026-110920](https://insights.sbomify.com/CVE-2026-110920/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11092](https://insights.sbomify.com/CVE-2026-11092/): Privilege escalation in Chrome (high 8.8)
- [CVE-2026-110919](https://insights.sbomify.com/CVE-2026-110919/): Use after free in Chrome (high 8.8)
- [CVE-2026-110918](https://insights.sbomify.com/CVE-2026-110918/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-110917](https://insights.sbomify.com/CVE-2026-110917/): Memory corruption in Chrome (medium 4.3)
- [CVE-2026-110916](https://insights.sbomify.com/CVE-2026-110916/): Other in Chrome (critical 9.6)
- [CVE-2026-110915](https://insights.sbomify.com/CVE-2026-110915/): Use after free in Chrome (high 8.8)
- [CVE-2026-110914](https://insights.sbomify.com/CVE-2026-110914/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-110913](https://insights.sbomify.com/CVE-2026-110913/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-110912](https://insights.sbomify.com/CVE-2026-110912/): Information disclosure in DragonFlyBSD (high 7.1)
- [CVE-2026-110911](https://insights.sbomify.com/CVE-2026-110911/): SQL injection in Wheels (critical 9.8)
- [CVE-2026-110910](https://insights.sbomify.com/CVE-2026-110910/): qs.stringify with allowEmptyArrays does not encode the keys of empty arrays, allowing query string parameter injection (medium 6.3)
- [CVE-2026-11091](https://insights.sbomify.com/CVE-2026-11091/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-110909](https://insights.sbomify.com/CVE-2026-110909/): Other in Wheels CLI (medium 5.0)
- [CVE-2026-110908](https://insights.sbomify.com/CVE-2026-110908/): Command injection in pfSense-pkg-frr (high 8.8)
- [CVE-2026-110907](https://insights.sbomify.com/CVE-2026-110907/): Information disclosure in Backdrop (high 7.5)
- [CVE-2026-110904](https://insights.sbomify.com/CVE-2026-110904/): Auth bypass in ApostropheCMS (medium 5.3)
- [CVE-2026-110903](https://insights.sbomify.com/CVE-2026-110903/): WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-110902](https://insights.sbomify.com/CVE-2026-110902/): WordPress Event Tickets plugin <= 5.30.1 - Insecure Direct Object References (IDOR) vulnerability (medium 4.3)
- [CVE-2026-110901](https://insights.sbomify.com/CVE-2026-110901/): WordPress SmartCrawl plugin <= 3.16.4 - Insecure Direct Object References (IDOR) vulnerability (medium 5.4)
- [CVE-2026-110900](https://insights.sbomify.com/CVE-2026-110900/): WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-11090](https://insights.sbomify.com/CVE-2026-11090/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-1109](https://insights.sbomify.com/CVE-2026-1109/): cijliu librtsp rtsp_parse_request buffer overflow (medium 4.8)
- [CVE-2026-110899](https://insights.sbomify.com/CVE-2026-110899/): WordPress Ninja Forms plugin <= 3.15.5 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110898](https://insights.sbomify.com/CVE-2026-110898/): WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability (medium 6.4)
- [CVE-2026-110897](https://insights.sbomify.com/CVE-2026-110897/): WordPress PowerPack Lite for Beaver Builder plugin <= 1.3.1 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110896](https://insights.sbomify.com/CVE-2026-110896/): WordPress Passster plugin <= 4.3.18 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110895](https://insights.sbomify.com/CVE-2026-110895/): WordPress Support Genix plugin <= 1.4.54 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-110894](https://insights.sbomify.com/CVE-2026-110894/): WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110893](https://insights.sbomify.com/CVE-2026-110893/): WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-110892](https://insights.sbomify.com/CVE-2026-110892/): WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-110891](https://insights.sbomify.com/CVE-2026-110891/): WordPress WordLift plugin <= 3.54.15 - Broken Access Control vulnerability (medium 5.4)
- [CVE-2026-110890](https://insights.sbomify.com/CVE-2026-110890/): WordPress JetSmartFilters plugin <= 3.8.6 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-11089](https://insights.sbomify.com/CVE-2026-11089/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110889](https://insights.sbomify.com/CVE-2026-110889/): WordPress Gantry 5 Framework plugin <= 5.6.4 - Sensitive Data Exposure vulnerability (high 7.5)
- [CVE-2026-110888](https://insights.sbomify.com/CVE-2026-110888/): WordPress AI Engine plugin <= 3.8.3 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-110887](https://insights.sbomify.com/CVE-2026-110887/): WordPress HivePress plugin <= 1.7.32 - Remote Code Execution (RCE) vulnerability (critical 9.9)
- [CVE-2026-110886](https://insights.sbomify.com/CVE-2026-110886/): WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability (critical 9.8)
- [CVE-2026-110885](https://insights.sbomify.com/CVE-2026-110885/): WordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability (medium 6.5)
- [CVE-2026-110884](https://insights.sbomify.com/CVE-2026-110884/): WordPress Live Summary for Gravity Forms plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-110883](https://insights.sbomify.com/CVE-2026-110883/): WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability (medium 6.5)
- [CVE-2026-110882](https://insights.sbomify.com/CVE-2026-110882/): WordPress SMS Alert Order Notifications plugin <= 4.0.1 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-110881](https://insights.sbomify.com/CVE-2026-110881/): WordPress SureDash plugin <= 1.12.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-110880](https://insights.sbomify.com/CVE-2026-110880/): WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-11088](https://insights.sbomify.com/CVE-2026-11088/): Integer overflow in Chrome (critical 9.6)
- [CVE-2026-110879](https://insights.sbomify.com/CVE-2026-110879/): Deserialization in jackson-databind (critical 9.8)
- [CVE-2026-110878](https://insights.sbomify.com/CVE-2026-110878/): Aureus ERP through 1.6.0 Stored XSS via Inventory Rule Action Information (medium 5.1)
- [CVE-2026-110877](https://insights.sbomify.com/CVE-2026-110877/): AdPlug through 2.4 Heap Out-of-Bounds Read via CdmoLoader::load (medium 6.8)
- [CVE-2026-110876](https://insights.sbomify.com/CVE-2026-110876/): AdPlug through 2.4 Out-of-Bounds Read via CxsmPlayer::play_note in XSM Files (medium 6.8)
- [CVE-2026-110875](https://insights.sbomify.com/CVE-2026-110875/): AdPlug through 2.4 Heap Buffer Overflow via CksmPlayer::update in ksm.cpp (medium 6.9)
- [CVE-2026-110874](https://insights.sbomify.com/CVE-2026-110874/): Dolibarr before 23.0.4 PHP Object Injection via jsonOrUnserialize() (high 7.5)
- [CVE-2026-110873](https://insights.sbomify.com/CVE-2026-110873/): Heym 0.0.55 before 0.0.121 Credential Theft via error_workflow_id Field (high 7.1)
- [CVE-2026-110872](https://insights.sbomify.com/CVE-2026-110872/): Nodemailer 3.0.0 before 10.0.10 Denial of Service via SMTP Reply Parsing (high 8.2)
- [CVE-2026-110871](https://insights.sbomify.com/CVE-2026-110871/): Nodemailer 3.0.0 before 10.0.10 Quadratic DKIM Header Unfolding Denial of Service (high 7.1)
- [CVE-2026-110870](https://insights.sbomify.com/CVE-2026-110870/): Nodemailer before 10.0.13 Improper Input Validation via Angle-Bracket Address Comments (medium 6.9)
- [CVE-2026-11087](https://insights.sbomify.com/CVE-2026-11087/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110869](https://insights.sbomify.com/CVE-2026-110869/): Nodemailer 3.0.0 before 10.0.13 ReDoS via SMTP AUTH Mechanism Detection Regexes (high 8.7)
- [CVE-2026-110868](https://insights.sbomify.com/CVE-2026-110868/): Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources (high 8.4)
- [CVE-2026-110867](https://insights.sbomify.com/CVE-2026-110867/): Renovate before 44.60.1 allowedEnv Allowlist Bypass via Shared Preset (critical 9.0)
- [CVE-2026-110866](https://insights.sbomify.com/CVE-2026-110866/): Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase Request (medium 5.3)
- [CVE-2026-110865](https://insights.sbomify.com/CVE-2026-110865/): Renovate before 44.60.1 HTTP Header Allowlist Bypass via Shared Presets (high 7.1)
- [CVE-2026-110864](https://insights.sbomify.com/CVE-2026-110864/): Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy (critical 9.1)
- [CVE-2026-110863](https://insights.sbomify.com/CVE-2026-110863/): Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers (high 8.6)
- [CVE-2026-110862](https://insights.sbomify.com/CVE-2026-110862/): Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link (critical 9.3)
- [CVE-2026-110861](https://insights.sbomify.com/CVE-2026-110861/): Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition (medium 6.3)
- [CVE-2026-110860](https://insights.sbomify.com/CVE-2026-110860/): GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move() (medium 6.9)
- [CVE-2026-11086](https://insights.sbomify.com/CVE-2026-11086/): Other in Chrome (high 8.8)
- [CVE-2026-110859](https://insights.sbomify.com/CVE-2026-110859/): GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Name (high 8.7)
- [CVE-2026-110858](https://insights.sbomify.com/CVE-2026-110858/): GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec (critical 9.2)
- [CVE-2026-110857](https://insights.sbomify.com/CVE-2026-110857/): GitPython before 3.2.0 Command Execution via ls_remote ext:: URLs (high 7.7)
- [CVE-2026-110856](https://insights.sbomify.com/CVE-2026-110856/): GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_date (high 8.7)
- [CVE-2026-110855](https://insights.sbomify.com/CVE-2026-110855/): GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Name (high 7.1)
- [CVE-2026-110854](https://insights.sbomify.com/CVE-2026-110854/): Parse Server before 8.6.97 and 9.10.2-alpha.6 Denial of Service via Unhandled Email Error (high 8.2)
- [CVE-2026-110853](https://insights.sbomify.com/CVE-2026-110853/): n8n before 1.123.83 Authorization Bypass via Execute Sub-workflow Inline JSON (high 7.1)
- [CVE-2026-110852](https://insights.sbomify.com/CVE-2026-110852/): n8n before 1.123.83, 2.41.4, and 2.42.1 Unauthenticated Workflow Execution via Dynamic-Path Webhook Resolution (medium 6.3)
- [CVE-2026-110851](https://insights.sbomify.com/CVE-2026-110851/): n8n before 2.41.4 and 2.42.1 Cross-Project Agent Ownership Transfer via Agents Create Endpoint (medium 6.1)
- [CVE-2026-110850](https://insights.sbomify.com/CVE-2026-110850/): n8n before 2.41.4 and 2.42.1 Credential Check Bypass via Agent Node Parameters (high 7.2)
- [CVE-2026-11085](https://insights.sbomify.com/CVE-2026-11085/): Integer overflow in Chrome (high 8.8)
- [CVE-2026-110849](https://insights.sbomify.com/CVE-2026-110849/): n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Binary-Data File Preview (high 7.2)
- [CVE-2026-110848](https://insights.sbomify.com/CVE-2026-110848/): n8n before 1.123.83, 2.41.4, and 2.42.1 Prototype Pollution via AI Workflow Builder Connection Merge (medium 6.0)
- [CVE-2026-110847](https://insights.sbomify.com/CVE-2026-110847/): n8n before 1.123.83, 2.41.4, and 2.42.1 Stored XSS via Chat Trigger customCss Parameter (high 7.0)
- [CVE-2026-110846](https://insights.sbomify.com/CVE-2026-110846/): n8n before 2.41.4 and 2.42.1 Send-and-Wait HMAC Signature Bypass via Waiting-Webhook (high 7.0)
- [CVE-2026-110845](https://insights.sbomify.com/CVE-2026-110845/): n8n before 1.123.83, 2.41.4, and 2.42.1 Code Execution via Git Node Log Operation (high 7.7)
- [CVE-2026-110844](https://insights.sbomify.com/CVE-2026-110844/): n8n before 1.123.83 Credential Authorization Bypass via Nested Inline Sub-Workflows (high 7.2)
- [CVE-2026-110843](https://insights.sbomify.com/CVE-2026-110843/): n8n before 2.41.4 and 2.42.1 Unauthenticated Unbounded OAuth Client Persistence via Authorize Endpoint (high 8.2)
- [CVE-2026-110842](https://insights.sbomify.com/CVE-2026-110842/): n8n before 2.41.4 and 2.42.1 Prototype Pollution via MCP Workflow-Validation Interpreter (high 7.7)
- [CVE-2026-110841](https://insights.sbomify.com/CVE-2026-110841/): n8n before 2.41.4 and 2.42.0 Authorization Bypass in Agent Chat Resume Tool Approval (medium 6.1)
- [CVE-2026-110840](https://insights.sbomify.com/CVE-2026-110840/): n8n before 2.41.4 and 2.42.1 SQL Injection via Microsoft SQL Node Query Field (high 7.0)
- [CVE-2026-11084](https://insights.sbomify.com/CVE-2026-11084/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110839](https://insights.sbomify.com/CVE-2026-110839/): FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Grayscale JPEG Clipboard Data (high 7.1)
- [CVE-2026-110838](https://insights.sbomify.com/CVE-2026-110838/): FreeRDP shadow before 3.32.0 Pre-Authentication Input Injection via Confirm Active bypass (high 8.7)
- [CVE-2026-110837](https://insights.sbomify.com/CVE-2026-110837/): FreeRDP 2.0.0 before 3.32.0 Heap Buffer Overflow via MP3 Audio Decoding (medium 6.1)
- [CVE-2026-110836](https://insights.sbomify.com/CVE-2026-110836/): FreeRDP 3.0.0 before 3.32.0 Infinite Loop DoS via Gateway Content-Type (high 7.1)
- [CVE-2026-110835](https://insights.sbomify.com/CVE-2026-110835/): FreeRDP 3.0.0 before 3.32.0 HTTP Header Injection via Proxy Routing Token (medium 6.3)
- [CVE-2026-110834](https://insights.sbomify.com/CVE-2026-110834/): FreeRDP 2.0.0 before 3.32.0 Denial of Service via Serial IRP Null Handle (high 7.1)
- [CVE-2026-110833](https://insights.sbomify.com/CVE-2026-110833/): FreeRDP before 3.32.0 Unbounded Memory Retention via RDPDR Proxy (high 8.2)
- [CVE-2026-110832](https://insights.sbomify.com/CVE-2026-110832/): FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via DRDYNVC DATA_FIRST (high 7.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/933/