# Vulnerabilities published in 2026


- [CVE-2026-105099](https://insights.sbomify.com/CVE-2026-105099/): Omega Solution CoinEx Crypto Ticket Attachment Upload ticket cross site scripting (medium 5.1)
- [CVE-2026-105098](https://insights.sbomify.com/CVE-2026-105098/): Omega Solution CoinEx Crypto Support Ticket API customer information disclosure (medium 5.3)
- [CVE-2026-105097](https://insights.sbomify.com/CVE-2026-105097/): Omega Solution CoinEx Crypto Customer Information API customer-currency authorization (medium 5.3)
- [CVE-2026-105096](https://insights.sbomify.com/CVE-2026-105096/): Omega Solution CoinEx Crypto Customer Profile API customer authorization (medium 5.3)
- [CVE-2026-105090](https://insights.sbomify.com/CVE-2026-105090/): Missing authorization in Formbricks (medium 5.1)
- [CVE-2026-105089](https://insights.sbomify.com/CVE-2026-105089/): WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates (critical 9.3)
- [CVE-2026-105086](https://insights.sbomify.com/CVE-2026-105086/): WWBN AVideo 12.4 through 29.2.0 Stored XSS via Double-Encoded Video Title (critical 9.3)
- [CVE-2026-105083](https://insights.sbomify.com/CVE-2026-105083/): ImageMagick before 7.1.2-32 and 6.9.13-57 Security Policy Bypass via policy.xml DOCTYPE (low 1.8)
- [CVE-2026-105081](https://insights.sbomify.com/CVE-2026-105081/): ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName (low 2.0)
- [CVE-2026-105080](https://insights.sbomify.com/CVE-2026-105080/): Code injection in ConvertX (critical 9.4)
- [CVE-2026-105079](https://insights.sbomify.com/CVE-2026-105079/): WordPress MasterStudy LMS plugin <= 3.7.52 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-105078](https://insights.sbomify.com/CVE-2026-105078/): WordPress WP Store Locator plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-105076](https://insights.sbomify.com/CVE-2026-105076/): WordPress Vitepos plugin <= 3.6.1 - SQL Injection vulnerability (high 7.6)
- [CVE-2026-105073](https://insights.sbomify.com/CVE-2026-105073/): WordPress WP Event Solution plugin <= 4.1.25 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-105072](https://insights.sbomify.com/CVE-2026-105072/): WordPress FluentBooking Pro plugin < 2.5.0 - Broken Access Control vulnerability (high 7.5)
- [CVE-2026-105071](https://insights.sbomify.com/CVE-2026-105071/): WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.17 - Sensitive Data Exposure vulnerability (high 7.5)
- [CVE-2026-105070](https://insights.sbomify.com/CVE-2026-105070/): WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability (high 8.8)
- [CVE-2026-105069](https://insights.sbomify.com/CVE-2026-105069/): WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-105068](https://insights.sbomify.com/CVE-2026-105068/): WordPress Events Manager plugin <= 7.4.5 - Sensitive Data Exposure vulnerability (medium 5.3)
- [CVE-2026-105067](https://insights.sbomify.com/CVE-2026-105067/): WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability (high 8.5)
- [CVE-2026-105066](https://insights.sbomify.com/CVE-2026-105066/): WordPress SimplyRETS Real Estate IDX plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-105065](https://insights.sbomify.com/CVE-2026-105065/): WordPress XStore theme < 9.7.9 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-105064](https://insights.sbomify.com/CVE-2026-105064/): Code injection in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) (medium 6.5)
- [CVE-2026-105062](https://insights.sbomify.com/CVE-2026-105062/): WordPress WP Admin Audit plugin <= 1.2.17 - Broken Access Control vulnerability (medium 4.3)
- [CVE-2026-105061](https://insights.sbomify.com/CVE-2026-105061/): WordPress WP Mailster plugin <= 1.9.0.0 - Cross Site Scripting (XSS) vulnerability (high 7.1)
- [CVE-2026-105060](https://insights.sbomify.com/CVE-2026-105060/): WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-105059](https://insights.sbomify.com/CVE-2026-105059/): WordPress Delete All Comments of wordpress plugin <= 7.1 - Broken Access Control vulnerability (medium 6.5)
- [CVE-2026-105058](https://insights.sbomify.com/CVE-2026-105058/): WordPress WP User Profiles plugin <= 2.7.3 - Privilege Escalation vulnerability (high 8.8)
- [CVE-2026-105057](https://insights.sbomify.com/CVE-2026-105057/): WordPress Zero Spam plugin <= 5.7.11 - Bypass vulnerability vulnerability (medium 5.3)
- [CVE-2026-105056](https://insights.sbomify.com/CVE-2026-105056/): WordPress eCommerce Product Catalog plugin <= 3.6.2 - Cross Site Scripting (XSS) vulnerability (medium 6.5)
- [CVE-2026-105055](https://insights.sbomify.com/CVE-2026-105055/): WordPress WP Mailster plugin <= 1.9.0.0 - Broken Access Control vulnerability (medium 5.3)
- [CVE-2026-105052](https://insights.sbomify.com/CVE-2026-105052/): IBM Maximo Application Suite Information Disclosure (high 7.5)
- [CVE-2026-105051](https://insights.sbomify.com/CVE-2026-105051/): Security feature bypass in Denuvo Anti-Tamper (low 1.9)
- [CVE-2026-105050](https://insights.sbomify.com/CVE-2026-105050/): Command injection in PeaZip (high 7.1)
- [CVE-2026-105049](https://insights.sbomify.com/CVE-2026-105049/): Server-side request forgery in Attu (medium 5.8)
- [CVE-2026-105048](https://insights.sbomify.com/CVE-2026-105048/): Server-side request forgery in Attu (medium 4.0)
- [CVE-2026-105046](https://insights.sbomify.com/CVE-2026-105046/): Missing authorization in Xperience (medium 4.3)
- [CVE-2026-105044](https://insights.sbomify.com/CVE-2026-105044/): OS Command Injection in Qingteng Host Adaptive Security Platform Security Toolbox (high 8.5)
- [CVE-2026-105043](https://insights.sbomify.com/CVE-2026-105043/): Code injection in Simulink (low 3.6)
- [CVE-2026-105042](https://insights.sbomify.com/CVE-2026-105042/): Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash (not scored)
- [CVE-2026-105040](https://insights.sbomify.com/CVE-2026-105040/): EnergizeLab Eilik User-ID Mass Assignment Account Takeover (high 8.8)
- [CVE-2026-105039](https://insights.sbomify.com/CVE-2026-105039/): EnergizeLab Station Middleware Admin APIs Missing Role Checks (critical 9.6)
- [CVE-2026-105038](https://insights.sbomify.com/CVE-2026-105038/): EnergizeLab Eilik Unauthenticated AI Model Administration and Runtime Model Switching (critical 9.8)
- [CVE-2026-105037](https://insights.sbomify.com/CVE-2026-105037/): EnergizeLab Station Middleware Authenticated Path Traversal Arbitrary File Read (critical 9.9)
- [CVE-2026-105036](https://insights.sbomify.com/CVE-2026-105036/): EnergizeLab Firmware Updates Downloaded over HTTP Without Integrity Checks (high 7.5)
- [CVE-2026-105035](https://insights.sbomify.com/CVE-2026-105035/): EnergizeLab FirmwareUpdater Universal Hard-Coded AES Key (high 7.8)
- [CVE-2026-105034](https://insights.sbomify.com/CVE-2026-105034/): EnergizeLab Eilik Unauthenticated Device-Token Issuance for Arbitrary Serial Numbers (high 8.2)
- [CVE-2026-105033](https://insights.sbomify.com/CVE-2026-105033/): EnergizeLab AI Station Default Root Credentials with SSH Enabled (high 8.8)
- [CVE-2026-105032](https://insights.sbomify.com/CVE-2026-105032/): EnergizeLab Eilik AI Skill Upload Unauthenticated Path Traversal Arbitrary File Write (critical 9.1)
- [CVE-2026-105031](https://insights.sbomify.com/CVE-2026-105031/): Security feature bypass in Apache Qpid Proton C (not scored)
- [CVE-2026-105030](https://insights.sbomify.com/CVE-2026-105030/): Kener 4.0.0 before 4.1.6 Hidden Monitor Data Disclosure via Dashboard API (medium 6.9)
- [CVE-2026-105029](https://insights.sbomify.com/CVE-2026-105029/): UVdesk support-center-bundle before 1.1.3.3 IDOR via rateTicket Ticket Rating Endpoint (medium 5.3)
- [CVE-2026-105016](https://insights.sbomify.com/CVE-2026-105016/): Microsoft QUIC Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-105014](https://insights.sbomify.com/CVE-2026-105014/): Azure Pipelines Remote Code Execution Vulnerability (critical 9.1)
- [CVE-2026-105013](https://insights.sbomify.com/CVE-2026-105013/): Microsoft Office SharePoint Remote Code Execution Vulnerability (high 7.4)
- [CVE-2026-105010](https://insights.sbomify.com/CVE-2026-105010/): Microsoft Windows Search Component Elevation of Privilege Vulnerability (critical 9.8)
- [CVE-2026-105009](https://insights.sbomify.com/CVE-2026-105009/): Windows Server Update Service Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-105008](https://insights.sbomify.com/CVE-2026-105008/): Windows Schannel Spoofing Vulnerability (critical 9.0)
- [CVE-2026-105007](https://insights.sbomify.com/CVE-2026-105007/): Windows NDIS Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-105006](https://insights.sbomify.com/CVE-2026-105006/): HID Class Driver Elevation of Privilege Vulnerability (medium 6.4)
- [CVE-2026-105005](https://insights.sbomify.com/CVE-2026-105005/): Windows Schannel Remote Code Execution Vulnerability (high 8.1)
- [CVE-2026-105004](https://insights.sbomify.com/CVE-2026-105004/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-105003](https://insights.sbomify.com/CVE-2026-105003/): HID Class Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-1050](https://insights.sbomify.com/CVE-2026-1050/): risesoft-y9 Digital-Infrastructure REST Authenticate Endpoint Y9PlatformUtil.java sql injection (medium 6.9)
- [CVE-2026-104995](https://insights.sbomify.com/CVE-2026-104995/): Code injection in BP Profile Search (high 8.1)
- [CVE-2026-104994](https://insights.sbomify.com/CVE-2026-104994/): Path traversal in Trivy (low 2.5)
- [CVE-2026-104993](https://insights.sbomify.com/CVE-2026-104993/): GeoDirectory <= 2.8.188 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Contact Email Custom Field (medium 6.4)
- [CVE-2026-104991](https://insights.sbomify.com/CVE-2026-104991/): Phproject < 1.8.7 Missing Authorization via Issues REST API (high 7.1)
- [CVE-2026-104988](https://insights.sbomify.com/CVE-2026-104988/): Auth bypass in Red Hat Certificate System 10 (high 8.1)
- [CVE-2026-104983](https://insights.sbomify.com/CVE-2026-104983/): Linux Mint Xreader PDF Attachment Saving ev-window.c g_file_get_child path traversal (medium 5.3)
- [CVE-2026-104982](https://insights.sbomify.com/CVE-2026-104982/): Linux Mint Xreader EPUB File epub-document.c g_strdup_printf path traversal (medium 5.3)
- [CVE-2026-104979](https://insights.sbomify.com/CVE-2026-104979/): Plane: Cross-tenant stored XSS in intake enables account takeover (high 8.7)
- [CVE-2026-104978](https://insights.sbomify.com/CVE-2026-104978/): Plane: Invitation Hijack in Project Join Flow via Missing Authorization and Email-Only Acceptance (high 8.2)
- [CVE-2026-104977](https://insights.sbomify.com/CVE-2026-104977/): Server-side request forgery in plane (high 7.7)
- [CVE-2026-104976](https://insights.sbomify.com/CVE-2026-104976/): Plane: SSRF in Gitea OAuth (high 8.7)
- [CVE-2026-104975](https://insights.sbomify.com/CVE-2026-104975/): Plane: Cross-tenant asset authorization bypass in Plane Spaces public-board endpoints (high 7.1)
- [CVE-2026-104974](https://insights.sbomify.com/CVE-2026-104974/): Plane: Disabled User Auto-Reactivation on Login (high 8.1)
- [CVE-2026-104973](https://insights.sbomify.com/CVE-2026-104973/): Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook Delivery (high 7.6)
- [CVE-2026-104971](https://insights.sbomify.com/CVE-2026-104971/): Plane: Cross-Workspace Asset Duplication IDOR + WorkspaceFileAssetEndpoint and FileAssetEndpoint Missing Authorization (high 8.5)
- [CVE-2026-104970](https://insights.sbomify.com/CVE-2026-104970/): Race condition in plane (high 8.1)
- [CVE-2026-104969](https://insights.sbomify.com/CVE-2026-104969/): Plane: Cross-Tenant Cycle Issue Hijack via IDOR (medium 6.5)
- [CVE-2026-104968](https://insights.sbomify.com/CVE-2026-104968/): Plane: Cross-workspace member enumeration via /api/workspaces/{slug}/entity-search/ (high 8.7)
- [CVE-2026-104967](https://insights.sbomify.com/CVE-2026-104967/): Missing authorization in plane (medium 5.4)
- [CVE-2026-104966](https://insights.sbomify.com/CVE-2026-104966/): Plane: Cross-Workspace IDOR in Estimate and Comment Endpoints Allows Read, Modify, and Inject Across Workspaces (high 8.7)
- [CVE-2026-104965](https://insights.sbomify.com/CVE-2026-104965/): Plane: Cross-Tenant Issue Relation Creation via IDOR (medium 5.4)
- [CVE-2026-104964](https://insights.sbomify.com/CVE-2026-104964/): Plane: Cross-Workspace Project Modification via Unscoped Project Lookup (medium 6.8)
- [CVE-2026-104963](https://insights.sbomify.com/CVE-2026-104963/): Missing authorization in plane (medium 4.3)
- [CVE-2026-104962](https://insights.sbomify.com/CVE-2026-104962/): Plane: Cross-project member roster IDOR in ProjectMemberListCreateAPIEndpoint (missing project scope on reads) (medium 6.5)
- [CVE-2026-104961](https://insights.sbomify.com/CVE-2026-104961/): Plane: WorkspaceOwnerPermission missing is_active check allows deactivated users to retain owner access (medium 5.4)
- [CVE-2026-104960](https://insights.sbomify.com/CVE-2026-104960/): Missing authorization in plane (medium 6.5)
- [CVE-2026-104956](https://insights.sbomify.com/CVE-2026-104956/): Denial of service in plane (medium 5.3)
- [CVE-2026-104955](https://insights.sbomify.com/CVE-2026-104955/): Plane: Project Member can escalate Project Guest to Member via PATCH /project-members/{pk} (BAC / Privilege Escalation) (medium 5.4)
- [CVE-2026-104953](https://insights.sbomify.com/CVE-2026-104953/): MPG < 4.2.3 - Editor+ SQLi via Project Import (medium 6.8)
- [CVE-2026-104949](https://insights.sbomify.com/CVE-2026-104949/): Missing authorization in WarehousePG (low 2.3)
- [CVE-2026-104948](https://insights.sbomify.com/CVE-2026-104948/): Missing authorization in WarehousePG (high 7.1)
- [CVE-2026-104947](https://insights.sbomify.com/CVE-2026-104947/): Missing authorization in WarehousePG (medium 5.3)
- [CVE-2026-104945](https://insights.sbomify.com/CVE-2026-104945/): Authenticated ONVIF PTZ Out-of-Bounds Stack Write Denial of Service in TP-Link Tapo C500 (medium 6.8)
- [CVE-2026-104944](https://insights.sbomify.com/CVE-2026-104944/): Unauthenticated TDP Function Pointer Dispatch Denial of Service in TP-Link Tapo C500 (high 7.1)
- [CVE-2026-104939](https://insights.sbomify.com/CVE-2026-104939/): NGINX Ingress Controller vulnerability (high 8.7)
- [CVE-2026-104937](https://insights.sbomify.com/CVE-2026-104937/): CVE-2026-104937 (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/972/