# Vulnerabilities published in 2026


- [CVE-2026-10230](https://insights.sbomify.com/CVE-2026-10230/): Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow (medium 4.8)
- [CVE-2026-1023](https://insights.sbomify.com/CVE-2026-1023/): Gotac｜Statistics Database System - Missing Authentication (high 8.7)
- [CVE-2026-102299](https://insights.sbomify.com/CVE-2026-102299/): Memory corruption in Chrome (high 8.8)
- [CVE-2026-102298](https://insights.sbomify.com/CVE-2026-102298/): Insufficient Authorization and User Boundary Validation in Omada Controller MSP (high 7.5)
- [CVE-2026-102297](https://insights.sbomify.com/CVE-2026-102297/): ZoneMinder before 1.38.4 Incorrect Authorization in frames API index (medium 5.3)
- [CVE-2026-102296](https://insights.sbomify.com/CVE-2026-102296/): ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response (high 8.3)
- [CVE-2026-102295](https://insights.sbomify.com/CVE-2026-102295/): Quay: quay: dom-based cross-site scripting via oauth local callback format=json parameter (medium 5.4)
- [CVE-2026-102294](https://insights.sbomify.com/CVE-2026-102294/): Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration (high 8.5)
- [CVE-2026-102293](https://insights.sbomify.com/CVE-2026-102293/): realjerrytang tacomall api-admin Backend ApiMaApplication.java OrgStaffServiceImpl.add improper authorization (medium 6.9)
- [CVE-2026-102292](https://insights.sbomify.com/CVE-2026-102292/): coolbeans1212 MateisHomePage-Website users.php cross site scripting (medium 5.3)
- [CVE-2026-102291](https://insights.sbomify.com/CVE-2026-102291/): Code injection in Kirki – Freeform Page Builder, Website Builder & Customizer (medium 5.4)
- [CVE-2026-102290](https://insights.sbomify.com/CVE-2026-102290/): CodeCanyon Rocket LMS Student Profile Image Upload cross site scripting (medium 5.1)
- [CVE-2026-10229](https://insights.sbomify.com/CVE-2026-10229/): Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow (medium 4.8)
- [CVE-2026-102282](https://insights.sbomify.com/CVE-2026-102282/): adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation (high 7.1)
- [CVE-2026-102281](https://insights.sbomify.com/CVE-2026-102281/): Nest: Remote process termination via a deeply nested microservice message pattern (high 7.5)
- [CVE-2026-10228](https://insights.sbomify.com/CVE-2026-10228/): raisulislamg4 student_management_system_by_php admission_form_check.php cross site scripting (medium 5.1)
- [CVE-2026-102279](https://insights.sbomify.com/CVE-2026-102279/): Laravel: XSS in Debug Page Information (low 3.1)
- [CVE-2026-102278](https://insights.sbomify.com/CVE-2026-102278/): brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion (high 7.5)
- [CVE-2026-102277](https://insights.sbomify.com/CVE-2026-102277/): brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service (medium 5.3)
- [CVE-2026-102276](https://insights.sbomify.com/CVE-2026-102276/): brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion (high 7.5)
- [CVE-2026-102275](https://insights.sbomify.com/CVE-2026-102275/): PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion (medium 6.5)
- [CVE-2026-102274](https://insights.sbomify.com/CVE-2026-102274/): PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set (medium 5.9)
- [CVE-2026-102273](https://insights.sbomify.com/CVE-2026-102273/): PyJWT accepts public JWK containers as HMAC secrets (high 7.4)
- [CVE-2026-102272](https://insights.sbomify.com/CVE-2026-102272/): PyJWT BOM Bypass (high 7.4)
- [CVE-2026-102271](https://insights.sbomify.com/CVE-2026-102271/): PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard (high 7.4)
- [CVE-2026-102270](https://insights.sbomify.com/CVE-2026-102270/): PyJWT: ReDoS vulnerability when calling the `is_pem_format` function. (medium 4.4)
- [CVE-2026-10227](https://insights.sbomify.com/CVE-2026-10227/): raisulislamg4 student_management_system_by_php User Creation add_user_check.php sql injection (medium 6.9)
- [CVE-2026-102269](https://insights.sbomify.com/CVE-2026-102269/): PyJWT: Non-canonical signature segments enable raw-token revocation bypass (medium 4.8)
- [CVE-2026-102268](https://insights.sbomify.com/CVE-2026-102268/): PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard (critical 9.1)
- [CVE-2026-102267](https://insights.sbomify.com/CVE-2026-102267/): PyJWT: PyJWKClient follows redirects when fetching JWKS (high 7.4)
- [CVE-2026-102266](https://insights.sbomify.com/CVE-2026-102266/): PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation (high 7.4)
- [CVE-2026-102265](https://insights.sbomify.com/CVE-2026-102265/): PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header (medium 5.3)
- [CVE-2026-102264](https://insights.sbomify.com/CVE-2026-102264/): mwasikz robo-cafe-rms Edit Profile Feature update-account.php cross site scripting (medium 5.1)
- [CVE-2026-102263](https://insights.sbomify.com/CVE-2026-102263/): mwasikz robo-cafe-rms manage-food.php unrestricted upload (medium 5.1)
- [CVE-2026-102262](https://insights.sbomify.com/CVE-2026-102262/): Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control (high 7.0)
- [CVE-2026-102261](https://insights.sbomify.com/CVE-2026-102261/): owen2345 Camaleon CMS Media Crop media_controller.rb crop authorization (medium 5.3)
- [CVE-2026-102260](https://insights.sbomify.com/CVE-2026-102260/): Nomad vulnerable to cross-namespace information disclosure in multiple endpoints (medium 4.3)
- [CVE-2026-10226](https://insights.sbomify.com/CVE-2026-10226/): raisulislamg4 student_management_system_by_php delete.php sql injection (medium 6.9)
- [CVE-2026-102258](https://insights.sbomify.com/CVE-2026-102258/): Cross-site scripting in SMA1000 (medium 6.1)
- [CVE-2026-102257](https://insights.sbomify.com/CVE-2026-102257/): Path traversal in SMA1000 (high 7.2)
- [CVE-2026-102256](https://insights.sbomify.com/CVE-2026-102256/): Command injection in SMA1000 (high 7.8)
- [CVE-2026-102255](https://insights.sbomify.com/CVE-2026-102255/): Server-side request forgery in SMA1000 (critical 10.0)
- [CVE-2026-102253](https://insights.sbomify.com/CVE-2026-102253/): iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS (high 8.7)
- [CVE-2026-102252](https://insights.sbomify.com/CVE-2026-102252/): Path Traversal in VMDK Extractor in OSV-SCALIBR (medium 6.9)
- [CVE-2026-102251](https://insights.sbomify.com/CVE-2026-102251/): SQL injection in Abandoned Cart Pro for WooCommerce (high 7.5)
- [CVE-2026-102250](https://insights.sbomify.com/CVE-2026-102250/): Security feature bypass in Sage RTU 1410 (high 8.6)
- [CVE-2026-10225](https://insights.sbomify.com/CVE-2026-10225/): raisulislamg4 student_management_system_by_php Login login_check.php sql injection (medium 6.9)
- [CVE-2026-102249](https://insights.sbomify.com/CVE-2026-102249/): REBUILD file-editor-save authorization (medium 6.9)
- [CVE-2026-102248](https://insights.sbomify.com/CVE-2026-102248/): Rebuild Login Endpoint login improper authentication (medium 6.9)
- [CVE-2026-102247](https://insights.sbomify.com/CVE-2026-102247/): FastAdmin Database Management database.php unnecessary privileges (high 8.5)
- [CVE-2026-102245](https://insights.sbomify.com/CVE-2026-102245/): MODSetter SurfSense circleback Endpoint circleback_webhook_route.py missing authentication (medium 6.9)
- [CVE-2026-102244](https://insights.sbomify.com/CVE-2026-102244/): MODSetter SurfSense Document Export Feature editor_routes.py server-side request forgery (medium 5.3)
- [CVE-2026-102243](https://insights.sbomify.com/CVE-2026-102243/): MODSetter SurfSense MCP Connector Integration test command injection (medium 5.3)
- [CVE-2026-102242](https://insights.sbomify.com/CVE-2026-102242/): Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases (high 8.6)
- [CVE-2026-102241](https://insights.sbomify.com/CVE-2026-102241/): Netcore NAP930 Backup/Restore backup_common.sh hard-coded key (medium 5.1)
- [CVE-2026-102240](https://insights.sbomify.com/CVE-2026-102240/): Netcore NAP930 Network Tools CGI network_tools eval os command injection (critical 10.0)
- [CVE-2026-10224](https://insights.sbomify.com/CVE-2026-10224/): NousResearch hermes-agent Webhook Endpoint feishu.py _handle_webhook_request resource consumption (medium 6.9)
- [CVE-2026-102238](https://insights.sbomify.com/CVE-2026-102238/): Visual Studio Code Remote Code Execution Vulnerability (critical 9.6)
- [CVE-2026-102235](https://insights.sbomify.com/CVE-2026-102235/): Visual Studio Code Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-102234](https://insights.sbomify.com/CVE-2026-102234/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.4)
- [CVE-2026-102233](https://insights.sbomify.com/CVE-2026-102233/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-102232](https://insights.sbomify.com/CVE-2026-102232/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.0)
- [CVE-2026-102231](https://insights.sbomify.com/CVE-2026-102231/): Visual Studio Code Security Feature Bypass Vulnerability (high 7.7)
- [CVE-2026-10223](https://insights.sbomify.com/CVE-2026-10223/): NousResearch hermes-agent memory_tool.py _scan_memory_content injection (medium 5.3)
- [CVE-2026-102229](https://insights.sbomify.com/CVE-2026-102229/): Visual Studio Code Information Disclosure Vulnerability (medium 6.8)
- [CVE-2026-102227](https://insights.sbomify.com/CVE-2026-102227/): Windows Resilient File System (ReFS) Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-102226](https://insights.sbomify.com/CVE-2026-102226/): Dynamics Business Central Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-102225](https://insights.sbomify.com/CVE-2026-102225/): Windows Text Shaping Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-102221](https://insights.sbomify.com/CVE-2026-102221/): Secure Boot Security Feature Bypass Vulnerability (medium 4.4)
- [CVE-2026-102220](https://insights.sbomify.com/CVE-2026-102220/): Windows VHD miniport driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-10222](https://insights.sbomify.com/CVE-2026-10222/): NousResearch hermes-agent config.py _sanitize_env_lines injection (medium 6.3)
- [CVE-2026-102218](https://insights.sbomify.com/CVE-2026-102218/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102217](https://insights.sbomify.com/CVE-2026-102217/): WebDAV Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-102216](https://insights.sbomify.com/CVE-2026-102216/): Windows StateRepository API Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102215](https://insights.sbomify.com/CVE-2026-102215/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102214](https://insights.sbomify.com/CVE-2026-102214/): Windows Hyper-V Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-102211](https://insights.sbomify.com/CVE-2026-102211/): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102210](https://insights.sbomify.com/CVE-2026-102210/): Windows Text Shaping Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2026-10221](https://insights.sbomify.com/CVE-2026-10221/): NousResearch hermes-agent run_agent.py _compress_context injection (medium 6.9)
- [CVE-2026-102209](https://insights.sbomify.com/CVE-2026-102209/): Microsoft Graphics Component Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102208](https://insights.sbomify.com/CVE-2026-102208/): Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102207](https://insights.sbomify.com/CVE-2026-102207/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102206](https://insights.sbomify.com/CVE-2026-102206/): Windows Portable Device MTP Driver Elevation of Privilege Vulnerability (medium 6.8)
- [CVE-2026-102205](https://insights.sbomify.com/CVE-2026-102205/): Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102204](https://insights.sbomify.com/CVE-2026-102204/): Windows Subsystem for Linux Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102203](https://insights.sbomify.com/CVE-2026-102203/): RPC Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-102202](https://insights.sbomify.com/CVE-2026-102202/): Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102201](https://insights.sbomify.com/CVE-2026-102201/): Microsoft Windows Media Foundation Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-10220](https://insights.sbomify.com/CVE-2026-10220/): NousResearch hermes-agent skills_tool.py skill_view injection (medium 6.9)
- [CVE-2026-1022](https://insights.sbomify.com/CVE-2026-1022/): Gotac｜Statistics Database System - Arbitrary File Read (high 8.7)
- [CVE-2026-102199](https://insights.sbomify.com/CVE-2026-102199/): Microsoft Windows Codecs Library Denial of Service Vulnerability (medium 6.5)
- [CVE-2026-102198](https://insights.sbomify.com/CVE-2026-102198/): Windows Remote Desktop Protocol Information Disclosure Vulnerability (medium 5.3)
- [CVE-2026-102197](https://insights.sbomify.com/CVE-2026-102197/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102196](https://insights.sbomify.com/CVE-2026-102196/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-102195](https://insights.sbomify.com/CVE-2026-102195/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102194](https://insights.sbomify.com/CVE-2026-102194/): Windows Graphics Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102193](https://insights.sbomify.com/CVE-2026-102193/): Windows Broadcast DVR User Service Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-102192](https://insights.sbomify.com/CVE-2026-102192/): Windows Failover Cluster Denial of Service Vulnerability (high 7.5)
- [CVE-2026-102191](https://insights.sbomify.com/CVE-2026-102191/): Windows Storage Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2026-10219](https://insights.sbomify.com/CVE-2026-10219/): nextlevelbuilder GoClaw write_file Tool fsbridge.go FsBridge.WriteFile os command injection (medium 6.9)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/987/