# Vulnerabilities published in 2026


- [CVE-2026-110831](https://insights.sbomify.com/CVE-2026-110831/): FreeRDP 3.13.0 before 3.32.0 Resource Leak via Drive Redirection IRP_MJ_CREATE (medium 5.3)
- [CVE-2026-110830](https://insights.sbomify.com/CVE-2026-110830/): FreeRDP before 3.32.0 Denial of Service via Serial IRP_MJ_CREATE (high 8.2)
- [CVE-2026-11083](https://insights.sbomify.com/CVE-2026-11083/): Information disclosure in Chrome (medium 6.5)
- [CVE-2026-110829](https://insights.sbomify.com/CVE-2026-110829/): FreeRDP 3.0.0 before 3.32.0 Null Pointer Dereference via rdpsnd Fragment (high 7.1)
- [CVE-2026-110825](https://insights.sbomify.com/CVE-2026-110825/): Kiloview E3 NDI Encoder Missing Authentication for Critical Function (high 8.7)
- [CVE-2026-11082](https://insights.sbomify.com/CVE-2026-11082/): Use after free in Chrome (critical 9.6)
- [CVE-2026-110816](https://insights.sbomify.com/CVE-2026-110816/): qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a string (medium 6.3)
- [CVE-2026-110812](https://insights.sbomify.com/CVE-2026-110812/): Deserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune (critical 9.4)
- [CVE-2026-110810](https://insights.sbomify.com/CVE-2026-110810/): ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds (low 2.4)
- [CVE-2026-11081](https://insights.sbomify.com/CVE-2026-11081/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110809](https://insights.sbomify.com/CVE-2026-110809/): sgl-project SGLang Session Cleanup session_controller.py Session.create_req denial of service (medium 5.3)
- [CVE-2026-110807](https://insights.sbomify.com/CVE-2026-110807/): sgl-project SGLang generate Endpoint io_struct.py denial of service (medium 5.3)
- [CVE-2026-110806](https://insights.sbomify.com/CVE-2026-110806/): Missing authorization in Server (medium 6.5)
- [CVE-2026-110805](https://insights.sbomify.com/CVE-2026-110805/): Server-side request forgery in Server (low 2.6)
- [CVE-2026-110804](https://insights.sbomify.com/CVE-2026-110804/): Privilege escalation in Server (medium 4.3)
- [CVE-2026-110803](https://insights.sbomify.com/CVE-2026-110803/): Session Lock Leak on an Invalid UI Id Allows Denial of Service in Vaadin Framework 8 (high 8.7)
- [CVE-2026-11080](https://insights.sbomify.com/CVE-2026-11080/): Use after free in Chrome (high 8.8)
- [CVE-2026-1108](https://insights.sbomify.com/CVE-2026-1108/): cijliu librtsp rtsp_rely_dumps buffer overflow (medium 4.8)
- [CVE-2026-11079](https://insights.sbomify.com/CVE-2026-11079/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-11078](https://insights.sbomify.com/CVE-2026-11078/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110777](https://insights.sbomify.com/CVE-2026-110777/): Evolution-data-server: local file disclosure via attach file:// uris (medium 5.7)
- [CVE-2026-110775](https://insights.sbomify.com/CVE-2026-110775/): Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_access (high 7.1)
- [CVE-2026-110774](https://insights.sbomify.com/CVE-2026-110774/): Blinko through 1.8.8 Private Attachment Read via /api/file Route (medium 6.0)
- [CVE-2026-110773](https://insights.sbomify.com/CVE-2026-110773/): GrowChief through 0.3.0 Missing Authorization via /users/all-users Endpoint (medium 5.3)
- [CVE-2026-110772](https://insights.sbomify.com/CVE-2026-110772/): Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk Update (medium 5.3)
- [CVE-2026-110771](https://insights.sbomify.com/CVE-2026-110771/): Shopizer through 3.2.5 Authorization Bypass via Product Review customerId (medium 5.3)
- [CVE-2026-110770](https://insights.sbomify.com/CVE-2026-110770/): Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force (critical 9.2)
- [CVE-2026-11077](https://insights.sbomify.com/CVE-2026-11077/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-110769](https://insights.sbomify.com/CVE-2026-110769/): holaOS through 2026.822.1 Missing Authorization in Channel-Gateway Connectors (high 8.3)
- [CVE-2026-110768](https://insights.sbomify.com/CVE-2026-110768/): holaOS through 2026.822.1 Authorization Bypass via Telegram Connector Username Allowlist (medium 6.3)
- [CVE-2026-110767](https://insights.sbomify.com/CVE-2026-110767/): Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion (high 8.7)
- [CVE-2026-110766](https://insights.sbomify.com/CVE-2026-110766/): Colanode Server through 0.4.7 Path Traversal via Avatar Download Route (medium 5.3)
- [CVE-2026-110765](https://insights.sbomify.com/CVE-2026-110765/): FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass (high 8.2)
- [CVE-2026-110764](https://insights.sbomify.com/CVE-2026-110764/): AstronRPA through 1.1.6 Cross-Tenant File Disclosure via /file/download (medium 6.0)
- [CVE-2026-110763](https://insights.sbomify.com/CVE-2026-110763/): lamp-boot 4.16.0-java17 through 4.21.2-java17 IDOR via /anyone/findDeptByCompany (medium 5.3)
- [CVE-2026-110762](https://insights.sbomify.com/CVE-2026-110762/): bbPress before 2.6.19 Information Disclosure via BuddyPress Activity Stream (medium 6.3)
- [CVE-2026-110761](https://insights.sbomify.com/CVE-2026-110761/): ILIAS before 9.24, 10.12, and 11.5 PHP Object Injection via Test Results Import (high 8.7)
- [CVE-2026-11076](https://insights.sbomify.com/CVE-2026-11076/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-110759](https://insights.sbomify.com/CVE-2026-110759/): Text::CSV_XS versions before 1.65 for Perl return a 0xFF byte that is not in the input for an empty last field followed by a lone CR in parse. (critical 9.8)
- [CVE-2026-110758](https://insights.sbomify.com/CVE-2026-110758/): Text::CSV_XS versions before 1.65 for Perl read before the start of an all-blank field under allow_whitespace in strip_trail_whitespace. (high 7.5)
- [CVE-2026-110757](https://insights.sbomify.com/CVE-2026-110757/): Text::CSV_XS versions before 1.65 for Perl allow record splitting by writing strings used as numbers without quotes in combine. (critical 9.8)
- [CVE-2026-110756](https://insights.sbomify.com/CVE-2026-110756/): Text::CSV_XS versions before 1.65 for Perl drop the end of a record and its line ending when a UTF-8 flagged field precedes invalid UTF-8 bytes in print. (critical 9.8)
- [CVE-2026-110755](https://insights.sbomify.com/CVE-2026-110755/): Text::CSV_XS versions before 1.65 for Perl allow quadratic CPU use by copying the unparsed remainder per record of CR-only input in getline. (high 7.5)
- [CVE-2026-110754](https://insights.sbomify.com/CVE-2026-110754/): Text::CSV_XS versions before 1.65 for Perl leak the parsed fields of a record that fails to parse in getline (medium 6.5)
- [CVE-2026-110753](https://insights.sbomify.com/CVE-2026-110753/): Text::CSV_XS versions from 1.46 before 1.65 for Perl have a use-after-free of bind_columns variables when skip_empty_rows skips an empty line in getline. (critical 9.8)
- [CVE-2026-110752](https://insights.sbomify.com/CVE-2026-110752/): Text::CSV_XS versions before 1.65 for Perl allow memory exhaustion by allocating one entry per index of an RFC 7111 selector in fragment. (high 7.5)
- [CVE-2026-11075](https://insights.sbomify.com/CVE-2026-11075/): Memory corruption in Chrome (medium 6.5)
- [CVE-2026-110748](https://insights.sbomify.com/CVE-2026-110748/): Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files (not scored)
- [CVE-2026-110747](https://insights.sbomify.com/CVE-2026-110747/): Integer overflow in jackson-dataformat-protobuf (high 7.5)
- [CVE-2026-110746](https://insights.sbomify.com/CVE-2026-110746/): CVE-2026-110746 (high 7.8)
- [CVE-2026-110744](https://insights.sbomify.com/CVE-2026-110744/): Privilege escalation in Multicluster Global Hub (high 7.2)
- [CVE-2026-11074](https://insights.sbomify.com/CVE-2026-11074/): Use after free in Chrome (high 8.8)
- [CVE-2026-110737](https://insights.sbomify.com/CVE-2026-110737/): Push Endpoint Returns Permissive CORS Headers (low 2.3)
- [CVE-2026-110736](https://insights.sbomify.com/CVE-2026-110736/): Memory corruption in Godot Engine (low 3.6)
- [CVE-2026-110735](https://insights.sbomify.com/CVE-2026-110735/): Memory corruption in Godot Engine (low 2.5)
- [CVE-2026-110734](https://insights.sbomify.com/CVE-2026-110734/): Memory corruption in Godot Engine (low 2.5)
- [CVE-2026-110733](https://insights.sbomify.com/CVE-2026-110733/): Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store (medium 5.4)
- [CVE-2026-11073](https://insights.sbomify.com/CVE-2026-11073/): Use after free in Chrome (medium 6.5)
- [CVE-2026-110726](https://insights.sbomify.com/CVE-2026-110726/): Security feature bypass in Eclipse Connected Services Platform (medium 6.5)
- [CVE-2026-110725](https://insights.sbomify.com/CVE-2026-110725/): fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references (low 3.7)
- [CVE-2026-110724](https://insights.sbomify.com/CVE-2026-110724/): Security feature bypass in Eclipse Connected Services Platform (high 7.5)
- [CVE-2026-110723](https://insights.sbomify.com/CVE-2026-110723/): Security feature bypass in Eclipse Connected Services Platform (high 7.5)
- [CVE-2026-110721](https://insights.sbomify.com/CVE-2026-110721/): Missing authorization in NotificationX – FOMO, Live Sales Notification, WooCommerce Sales Popup, GDPR, Social Proof, Announcement Banner & Floating Notification Bar (medium 5.3)
- [CVE-2026-110720](https://insights.sbomify.com/CVE-2026-110720/): Consul-k8s vulnerable to a cross-namespace authorization bypass in component ACL binding rules (critical 9.9)
- [CVE-2026-11072](https://insights.sbomify.com/CVE-2026-11072/): Use after free in Chrome (high 7.8)
- [CVE-2026-110719](https://insights.sbomify.com/CVE-2026-110719/): Portkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header (medium 6.9)
- [CVE-2026-110718](https://insights.sbomify.com/CVE-2026-110718/): TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download (high 8.2)
- [CVE-2026-110717](https://insights.sbomify.com/CVE-2026-110717/): Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename (medium 6.9)
- [CVE-2026-110716](https://insights.sbomify.com/CVE-2026-110716/): unshield through 1.6.2 Heap Out-of-Bounds Read via unshield_get_file_table (medium 6.8)
- [CVE-2026-110715](https://insights.sbomify.com/CVE-2026-110715/): MuJS 1.3.6 before 1.3.9 Heap Out-of-Bounds Read/Write via Array.prototype.sort (medium 6.9)
- [CVE-2026-110714](https://insights.sbomify.com/CVE-2026-110714/): libsmb2 through 6.2 Heap Out-of-Bounds Read via decode_acl Integer Underflow (high 7.1)
- [CVE-2026-110713](https://insights.sbomify.com/CVE-2026-110713/): libsmb2 through 6.2 Heap Out-of-Bounds Read via File System Info Decoders (high 7.1)
- [CVE-2026-110712](https://insights.sbomify.com/CVE-2026-110712/): libsmb2 through 6.2 Heap Out-of-Bounds Read via smb2_decode_file_all_info (high 7.1)
- [CVE-2026-11071](https://insights.sbomify.com/CVE-2026-11071/): Use after free in Chrome (high 8.8)
- [CVE-2026-110707](https://insights.sbomify.com/CVE-2026-110707/): Cross-site scripting in RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator (medium 4.7)
- [CVE-2026-110703](https://insights.sbomify.com/CVE-2026-110703/): Cross-site scripting in GeoDirectory – WP Business Directory Plugin and Classified Listings Directory (medium 6.4)
- [CVE-2026-110701](https://insights.sbomify.com/CVE-2026-110701/): CP Multi View Events Calendar <= 1.4.42 - Unauthenticated Stored Cross-Site Scripting via 'CalendarTitle' Parameter (high 7.2)
- [CVE-2026-11070](https://insights.sbomify.com/CVE-2026-11070/): Security feature bypass in Chrome (critical 9.6)
- [CVE-2026-1107](https://insights.sbomify.com/CVE-2026-1107/): EyouCMS Member Avatar Diyajax.php check_userinfo unrestricted upload (medium 5.3)
- [CVE-2026-110698](https://insights.sbomify.com/CVE-2026-110698/): Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write (medium 5.3)
- [CVE-2026-110696](https://insights.sbomify.com/CVE-2026-110696/): itsmeravitejak Online-Examination-System dbtables.sql information disclosure (medium 6.9)
- [CVE-2026-110695](https://insights.sbomify.com/CVE-2026-110695/): turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow (medium 5.3)
- [CVE-2026-110694](https://insights.sbomify.com/CVE-2026-110694/): OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds (medium 5.3)
- [CVE-2026-110691](https://insights.sbomify.com/CVE-2026-110691/): WPOrLogin < 3.1.0 - Unauthenticated Hide Login Slug Update (medium 6.5)
- [CVE-2026-110690](https://insights.sbomify.com/CVE-2026-110690/): Cloud Commander 19.20.2 through 19.21.1 Path Traversal via GET /api/v1/pack (high 8.7)
- [CVE-2026-11069](https://insights.sbomify.com/CVE-2026-11069/): Security feature bypass in Chrome (medium 6.5)
- [CVE-2026-110689](https://insights.sbomify.com/CVE-2026-110689/): OpenClaw ClawScan Static Scanner runner.go shouldSkipTargetPath protection mechanism (medium 4.8)
- [CVE-2026-110688](https://insights.sbomify.com/CVE-2026-110688/): Cpanel::JSON::XS versions from 4.51 before 4.80 for Perl allow quadratic CPU use by revalidating the remaining buffer per value in incr_parse. (high 7.5)
- [CVE-2026-110687](https://insights.sbomify.com/CVE-2026-110687/): Cpanel::JSON::XS versions from 4.43 before 4.80 for Perl misorder byte-string keys during canonical encoding in utf16_cmp. (high 7.5)
- [CVE-2026-110686](https://insights.sbomify.com/CVE-2026-110686/): Cpanel::JSON::XS versions before 4.80 for Perl use freed filter callbacks when a filter removes itself during decoding in decode_hv. (medium 6.5)
- [CVE-2026-110685](https://insights.sbomify.com/CVE-2026-110685/): Cpanel::JSON::XS versions before 4.80 for Perl leak the decoded arguments of a tagged value when its THAW method dies in decode_tag. (critical 9.1)
- [CVE-2026-110684](https://insights.sbomify.com/CVE-2026-110684/): Cpanel::JSON::XS versions from 3.0202 before 4.80 for Perl leak memory and retain overloaded objects when encoding values as strings in encode_stringify. (high 8.1)
- [CVE-2026-110682](https://insights.sbomify.com/CVE-2026-110682/): Cpanel::JSON::XS versions from 4.42 before 4.80 for Perl let input chunking change the decoded value of top-level numbers in incr_parse. (high 7.5)
- [CVE-2026-110681](https://insights.sbomify.com/CVE-2026-110681/): Cpanel::JSON::XS versions before 4.80 for Perl use the parent interpreter's scalars from a parser object cloned into a new ithread. (not scored)
- [CVE-2026-110680](https://insights.sbomify.com/CVE-2026-110680/): Cpanel::JSON::XS versions from 4.20 before 4.80 for Perl write out of bounds when a tied or shared hash grows during canonical encoding in encode_hv. (not scored)
- [CVE-2026-11068](https://insights.sbomify.com/CVE-2026-11068/): Use after free in Chrome (high 8.8)
- [CVE-2026-110679](https://insights.sbomify.com/CVE-2026-110679/): OpenSIPS rtpproxy rtpproxy_answer out-of-bounds (medium 6.9)
- [CVE-2026-110678](https://insights.sbomify.com/CVE-2026-110678/): Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by buffering incremental input past max_size in incr_parse. (high 7.5)
- [CVE-2026-110677](https://insights.sbomify.com/CVE-2026-110677/): Cpanel::JSON::XS versions from 4.28 before 4.80 for Perl leak the array collecting duplicate key values under dupkeys_as_arrayref in decode_hv. (high 7.5)
- [CVE-2026-110676](https://insights.sbomify.com/CVE-2026-110676/): Cpanel::JSON::XS versions before 4.80 for Perl allow memory exhaustion by encoding exponent notation as full decimal digits under allow_bignum. (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/934/