# Vulnerabilities published in 2026


- [CVE-2026-102761](https://insights.sbomify.com/CVE-2026-102761/): Memory corruption in NetX Duo (critical 9.3)
- [CVE-2026-102760](https://insights.sbomify.com/CVE-2026-102760/): Use after free in NetX Duo (high 8.3)
- [CVE-2026-10276](https://insights.sbomify.com/CVE-2026-10276/): hekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgery (medium 5.3)
- [CVE-2026-102759](https://insights.sbomify.com/CVE-2026-102759/): Security feature bypass in NetX Duo (medium 6.3)
- [CVE-2026-102758](https://insights.sbomify.com/CVE-2026-102758/): Memory corruption in NetX Duo (high 7.5)
- [CVE-2026-102757](https://insights.sbomify.com/CVE-2026-102757/): Memory corruption in ThreadX (high 8.5)
- [CVE-2026-102756](https://insights.sbomify.com/CVE-2026-102756/): DataEase bar-horizontal Axis Label Tooltip Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-102755](https://insights.sbomify.com/CVE-2026-102755/): DataEase Datasource/Dataset Folder Name Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-10275](https://insights.sbomify.com/CVE-2026-10275/): OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow (low 2.3)
- [CVE-2026-102748](https://insights.sbomify.com/CVE-2026-102748/): Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service (critical 9.2)
- [CVE-2026-102740](https://insights.sbomify.com/CVE-2026-102740/): AsyncHttpClient: Resumable download index store is created world-readable and follows a planted symlink (medium 5.8)
- [CVE-2026-10274](https://insights.sbomify.com/CVE-2026-10274/): indrasishbanerjee aem-mcp-server Axios Request Flow mcp-server.ts getAssetMetadata server-side request forgery (medium 5.3)
- [CVE-2026-102734](https://insights.sbomify.com/CVE-2026-102734/): asteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter (medium 5.5)
- [CVE-2026-102731](https://insights.sbomify.com/CVE-2026-102731/): Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode (high 7.5)
- [CVE-2026-102730](https://insights.sbomify.com/CVE-2026-102730/): Memory corruption in eclipse-threadx/levelx(NAND driver) (high 8.6)
- [CVE-2026-10273](https://insights.sbomify.com/CVE-2026-10273/): php-censor Webhook Endpoint GitBuild.php os command injection (medium 6.9)
- [CVE-2026-102729](https://insights.sbomify.com/CVE-2026-102729/): Memory corruption in GUIX (medium 5.9)
- [CVE-2026-102728](https://insights.sbomify.com/CVE-2026-102728/): Memory corruption in NetX Duo (high 7.5)
- [CVE-2026-102727](https://insights.sbomify.com/CVE-2026-102727/): Other in NetX Duo (medium 6.0)
- [CVE-2026-102726](https://insights.sbomify.com/CVE-2026-102726/): Denial of service in NetX Duo (medium 6.0)
- [CVE-2026-102725](https://insights.sbomify.com/CVE-2026-102725/): Memory corruption in NetX Duo (medium 6.0)
- [CVE-2026-102724](https://insights.sbomify.com/CVE-2026-102724/): Null dereference in NetX Duo (medium 6.0)
- [CVE-2026-102723](https://insights.sbomify.com/CVE-2026-102723/): Null dereference in NetX Duo (medium 6.0)
- [CVE-2026-102722](https://insights.sbomify.com/CVE-2026-102722/): Server-side request forgery in NetX Duo (medium 6.9)
- [CVE-2026-102721](https://insights.sbomify.com/CVE-2026-102721/): Memory corruption in NetX Duo (medium 6.9)
- [CVE-2026-102720](https://insights.sbomify.com/CVE-2026-102720/): Memory corruption in eclipse-threadx/netxduo (medium 5.3)
- [CVE-2026-10272](https://insights.sbomify.com/CVE-2026-10272/): a4m4 Student-Management-System deleteform.php improper authorization (medium 6.9)
- [CVE-2026-102719](https://insights.sbomify.com/CVE-2026-102719/): Weak cryptography in netxduo (medium 6.3)
- [CVE-2026-102718](https://insights.sbomify.com/CVE-2026-102718/): Memory corruption in NetX Duo (high 8.7)
- [CVE-2026-102717](https://insights.sbomify.com/CVE-2026-102717/): MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash (high 7.5)
- [CVE-2026-102716](https://insights.sbomify.com/CVE-2026-102716/): Denial of service in eclipse-threadx/netxduo (high 8.7)
- [CVE-2026-102715](https://insights.sbomify.com/CVE-2026-102715/): Memory corruption in eclipse-threadx/netxduo (high 7.1)
- [CVE-2026-102714](https://insights.sbomify.com/CVE-2026-102714/): Integer overflow in NetX Duo (high 7.1)
- [CVE-2026-102713](https://insights.sbomify.com/CVE-2026-102713/): Memory corruption in NetX Duo (high 8.8)
- [CVE-2026-102712](https://insights.sbomify.com/CVE-2026-102712/): Memory corruption in NetX Duo (high 8.8)
- [CVE-2026-102711](https://insights.sbomify.com/CVE-2026-102711/): Memory corruption in `eclipse-threadx/threadx` (module manager / loadable-module loader) (medium 5.6)
- [CVE-2026-102710](https://insights.sbomify.com/CVE-2026-102710/): Privilege escalation in eclipse-threadx/threadx (critical 9.3)
- [CVE-2026-10271](https://insights.sbomify.com/CVE-2026-10271/): a4m4 Student-Management-System Admin Endpoint admin redirect (medium 5.3)
- [CVE-2026-102709](https://insights.sbomify.com/CVE-2026-102709/): Information disclosure in ThreadX (high 8.4)
- [CVE-2026-102702](https://insights.sbomify.com/CVE-2026-102702/): Arm: multiple issues with GNTTABOP_cache_flush (high 7.5)
- [CVE-2026-102700](https://insights.sbomify.com/CVE-2026-102700/): gnttab: cache-flush handling may cause page reference leak (medium 4.7)
- [CVE-2026-10270](https://insights.sbomify.com/CVE-2026-10270/): D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow (high 8.7)
- [CVE-2026-102699](https://insights.sbomify.com/CVE-2026-102699/): Arm: multiple issues with GNTTABOP_cache_flush (high 7.5)
- [CVE-2026-102697](https://insights.sbomify.com/CVE-2026-102697/): Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization (high 8.5)
- [CVE-2026-102695](https://insights.sbomify.com/CVE-2026-102695/): OmniFaces: Forged combined-resource IDs and related output/push boundaries (high 8.2)
- [CVE-2026-102693](https://insights.sbomify.com/CVE-2026-102693/): RIOT: Remote Stack Buffer Overflow in ATWINC15x0 driver via unsanitized SSID (critical 9.6)
- [CVE-2026-102692](https://insights.sbomify.com/CVE-2026-102692/): RIOT: Potential integer overflow in nanocoap Block2 handling leading to out-of-bounds memory access (critical 9.1)
- [CVE-2026-10269](https://insights.sbomify.com/CVE-2026-10269/): decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization (medium 5.3)
- [CVE-2026-102682](https://insights.sbomify.com/CVE-2026-102682/): Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation (medium 5.6)
- [CVE-2026-10268](https://insights.sbomify.com/CVE-2026-10268/): janet-lang janet marsh.c unmarshal_one_fiber integer overflow (medium 4.8)
- [CVE-2026-102677](https://insights.sbomify.com/CVE-2026-102677/): Electron: Sandboxed preload code cache can be poisoned by a compromised renderer (high 7.8)
- [CVE-2026-102676](https://insights.sbomify.com/CVE-2026-102676/): Electron: <webview> can enable Node.js integration in Web Workers despite embedder restrictions (high 8.3)
- [CVE-2026-102675](https://insights.sbomify.com/CVE-2026-102675/): Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled (high 7.4)
- [CVE-2026-102674](https://insights.sbomify.com/CVE-2026-102674/): Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions (high 8.2)
- [CVE-2026-102673](https://insights.sbomify.com/CVE-2026-102673/): Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab (high 8.2)
- [CVE-2026-102672](https://insights.sbomify.com/CVE-2026-102672/): Electron: Local race condition in Squirrel.Mac update installation on macOS (medium 6.7)
- [CVE-2026-102671](https://insights.sbomify.com/CVE-2026-102671/): Joyland AI WebView accepts invalid SSL certificates (medium 6.9)
- [CVE-2026-102670](https://insights.sbomify.com/CVE-2026-102670/): Joyland AI enables HTTP (medium 5.3)
- [CVE-2026-10267](https://insights.sbomify.com/CVE-2026-10267/): janet-lang janet debug.c doframe out-of-bounds (medium 4.8)
- [CVE-2026-102669](https://insights.sbomify.com/CVE-2026-102669/): Joyland AI hostname checking disabled (medium 6.9)
- [CVE-2026-102668](https://insights.sbomify.com/CVE-2026-102668/): Joyland AI accepts TLS certificates without validation (medium 6.9)
- [CVE-2026-102667](https://insights.sbomify.com/CVE-2026-102667/): Joyland AI WebView command injection (critical 9.0)
- [CVE-2026-102666](https://insights.sbomify.com/CVE-2026-102666/): Joyland AI hard-coded credentials for push notifications (medium 6.9)
- [CVE-2026-102663](https://insights.sbomify.com/CVE-2026-102663/): OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve Search (medium 4.3)
- [CVE-2026-10265](https://insights.sbomify.com/CVE-2026-10265/): itsourcecode Content Management System edit_topic.php sql injection (medium 5.3)
- [CVE-2026-102649](https://insights.sbomify.com/CVE-2026-102649/): Burrito: Unauthenticated webhooks trigger unauthorized Terraform plans when webhookSecret is unset (critical 9.9)
- [CVE-2026-10264](https://insights.sbomify.com/CVE-2026-10264/): lharries whatsapp-mcp Send API Endpoint main.go SendMessageRequest path traversal (medium 5.1)
- [CVE-2026-102639](https://insights.sbomify.com/CVE-2026-102639/): MobilityDB through 1.3.0 Out-of-bounds Read DoS via WKB Deserialization (high 7.1)
- [CVE-2026-102638](https://insights.sbomify.com/CVE-2026-102638/): Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (high 7.1)
- [CVE-2026-102637](https://insights.sbomify.com/CVE-2026-102637/): Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (high 7.1)
- [CVE-2026-102636](https://insights.sbomify.com/CVE-2026-102636/): Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop (high 7.1)
- [CVE-2026-102635](https://insights.sbomify.com/CVE-2026-102635/): ImageMagick before 7.1.2-32 and 6.9.13-57 Uninitialized Heap Memory Disclosure in GIF Decoder (medium 6.3)
- [CVE-2026-102634](https://insights.sbomify.com/CVE-2026-102634/): SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room (high 8.7)
- [CVE-2026-102633](https://insights.sbomify.com/CVE-2026-102633/): libexpat 2.7.2 through 2.8.5 Integer Overflow in expat_realloc (high 8.2)
- [CVE-2026-102631](https://insights.sbomify.com/CVE-2026-102631/): authd: Account takeover via username fallback in identity matching after IdP email reassignment (medium 5.9)
- [CVE-2026-102630](https://insights.sbomify.com/CVE-2026-102630/): UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host (low 2.3)
- [CVE-2026-10263](https://insights.sbomify.com/CVE-2026-10263/): SourceCodester Computer Repair Shop Management System manage_product.php sql injection (medium 6.9)
- [CVE-2026-102628](https://insights.sbomify.com/CVE-2026-102628/): Cadmos LTI exposure of sensitive information via debug mode (critical 9.2)
- [CVE-2026-102627](https://insights.sbomify.com/CVE-2026-102627/): Security Vulnerability identified in IBM TRIRIGA - Zip Slip (high 8.8)
- [CVE-2026-102626](https://insights.sbomify.com/CVE-2026-102626/): LimeSurvey Community Edition 7.4.0 - Stored XSS through the Date/Time date_min question attribute (high 7.2)
- [CVE-2026-102623](https://insights.sbomify.com/CVE-2026-102623/): Kubevirt: kubevirt: virt-controller nil-pointer dereference via malformed ephemeral volume (medium 6.5)
- [CVE-2026-102621](https://insights.sbomify.com/CVE-2026-102621/): Freedesktop Poppler SplashClip.cc clipToPath integer overflow (medium 4.8)
- [CVE-2026-102620](https://insights.sbomify.com/CVE-2026-102620/): Freedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow (medium 4.8)
- [CVE-2026-10262](https://insights.sbomify.com/CVE-2026-10262/): code-projects Real State Services Login loginuser.php sql injection (medium 6.9)
- [CVE-2026-102616](https://insights.sbomify.com/CVE-2026-102616/): risesoft-y9 WorkFlow-Engine OAuth2 Resource Filter CustomHistoricProcessServiceImpl.java getByIdAndYear sql injection (medium 6.9)
- [CVE-2026-10261](https://insights.sbomify.com/CVE-2026-10261/): CodeAstro Online Job Portal application_status.php sql injection (medium 6.9)
- [CVE-2026-102608](https://insights.sbomify.com/CVE-2026-102608/): ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) (critical 9.0)
- [CVE-2026-102607](https://insights.sbomify.com/CVE-2026-102607/): ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature (high 8.8)
- [CVE-2026-102603](https://insights.sbomify.com/CVE-2026-102603/): Gotify: Insufficiently Protected Password Change endpoint (medium 5.3)
- [CVE-2026-102601](https://insights.sbomify.com/CVE-2026-102601/): Flysystem: WhitespacePathNormalizer's control-character (CorruptedPathDetected) check is bypassed by malformed UTF-8 in the path, affecting every adapter (low 3.5)
- [CVE-2026-102600](https://insights.sbomify.com/CVE-2026-102600/): Socket.IO: Prototype Pollution via Unsafe Client Session Lookup (high 7.5)
- [CVE-2026-10260](https://insights.sbomify.com/CVE-2026-10260/): CodeAstro Online Job Portal delete-jobs.php sql injection (medium 6.9)
- [CVE-2026-102599](https://insights.sbomify.com/CVE-2026-102599/): Socket.IO: Engine.IO Protocol Revision Mismatch DoS (high 7.5)
- [CVE-2026-102598](https://insights.sbomify.com/CVE-2026-102598/): Werkzeug safe_join() allows Windows special device names (medium 6.3)
- [CVE-2026-102596](https://insights.sbomify.com/CVE-2026-102596/): Nango: Production flow RBAC bypass on private flow-read routes (medium 4.3)
- [CVE-2026-102590](https://insights.sbomify.com/CVE-2026-102590/): Langflow OSS is affected by multiple vulnerabilities (medium 5.0)
- [CVE-2026-10259](https://insights.sbomify.com/CVE-2026-10259/): H3C Magic B0 aspForm SetMobileAPInfoById stack-based overflow (high 8.7)
- [CVE-2026-102588](https://insights.sbomify.com/CVE-2026-102588/): Moodle: csrf in xml grade import (medium 6.5)
- [CVE-2026-102587](https://insights.sbomify.com/CVE-2026-102587/): Moodle: user list filters bypass profile field visibility (low 2.7)
- [CVE-2026-102586](https://insights.sbomify.com/CVE-2026-102586/): Moodle: xss via password reset link due to insufficient username escaping (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/984/