# Vulnerabilities published in 2026 - [CVE-2026-101783](https://insights.sbomify.com/CVE-2026-101783/): Missing authorization in MySQL Router (high 7.4) - [CVE-2026-101782](https://insights.sbomify.com/CVE-2026-101782/): Missing authorization in Oracle Applications Manager (medium 6.5) - [CVE-2026-101781](https://insights.sbomify.com/CVE-2026-101781/): Missing authorization in MySQL Cluster (high 8.8) - [CVE-2026-101780](https://insights.sbomify.com/CVE-2026-101780/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-10178](https://insights.sbomify.com/CVE-2026-10178/): code-projects Online Music Site AdminEditAlbum.php sql injection (medium 6.9) - [CVE-2026-101779](https://insights.sbomify.com/CVE-2026-101779/): Denial of service in MySQL Cluster (low 2.7) - [CVE-2026-101778](https://insights.sbomify.com/CVE-2026-101778/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101777](https://insights.sbomify.com/CVE-2026-101777/): Other in MySQL Cluster (medium 5.5) - [CVE-2026-101776](https://insights.sbomify.com/CVE-2026-101776/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101775](https://insights.sbomify.com/CVE-2026-101775/): Other in MySQL Cluster (high 7.4) - [CVE-2026-101774](https://insights.sbomify.com/CVE-2026-101774/): Other in MySQL Cluster (medium 6.5) - [CVE-2026-101773](https://insights.sbomify.com/CVE-2026-101773/): Missing authorization in MySQL Cluster (high 7.1) - [CVE-2026-101772](https://insights.sbomify.com/CVE-2026-101772/): Other in MySQL Cluster (high 8.1) - [CVE-2026-101771](https://insights.sbomify.com/CVE-2026-101771/): Other in MySQL Cluster (high 8.1) - [CVE-2026-101770](https://insights.sbomify.com/CVE-2026-101770/): Other in MySQL Cluster (high 8.1) - [CVE-2026-10177](https://insights.sbomify.com/CVE-2026-10177/): Aider-AI Aider AWS EC2 Metadata Endpoint api_docs.py requests.get server-side request forgery (medium 5.3) - [CVE-2026-101769](https://insights.sbomify.com/CVE-2026-101769/): Missing authorization in MySQL Cluster (high 7.0) - [CVE-2026-101768](https://insights.sbomify.com/CVE-2026-101768/): Other in MySQL Connectors (high 8.1) - [CVE-2026-101767](https://insights.sbomify.com/CVE-2026-101767/): Auth bypass in Oracle Application Object Library (critical 9.8) - [CVE-2026-101766](https://insights.sbomify.com/CVE-2026-101766/): Denial of service in MySQL Cluster (medium 4.4) - [CVE-2026-101765](https://insights.sbomify.com/CVE-2026-101765/): Auth bypass in Oracle Communications Billing and Revenue Management (critical 9.1) - [CVE-2026-101764](https://insights.sbomify.com/CVE-2026-101764/): Missing authorization in Oracle Communications Billing and Revenue Management (medium 5.5) - [CVE-2026-101763](https://insights.sbomify.com/CVE-2026-101763/): Auth bypass in Oracle Communications BRM - Elastic Charging Engine (critical 9.8) - [CVE-2026-101762](https://insights.sbomify.com/CVE-2026-101762/): Denial of service in MySQL Cluster (medium 5.3) - [CVE-2026-101761](https://insights.sbomify.com/CVE-2026-101761/): Denial of service in MySQL Cluster (medium 5.9) - [CVE-2026-101760](https://insights.sbomify.com/CVE-2026-101760/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-10176](https://insights.sbomify.com/CVE-2026-10176/): Aider-AI Aider Code Generation Workflow sql injection (medium 5.3) - [CVE-2026-101759](https://insights.sbomify.com/CVE-2026-101759/): Missing authorization in Oracle Communications Billing and Revenue Management (high 7.5) - [CVE-2026-101758](https://insights.sbomify.com/CVE-2026-101758/): Missing authorization in Oracle Communications Billing and Revenue Management (high 8.2) - [CVE-2026-101757](https://insights.sbomify.com/CVE-2026-101757/): Missing authorization in Oracle Application Object Library (high 7.8) - [CVE-2026-101756](https://insights.sbomify.com/CVE-2026-101756/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101755](https://insights.sbomify.com/CVE-2026-101755/): Denial of service in MySQL Cluster (medium 5.3) - [CVE-2026-101754](https://insights.sbomify.com/CVE-2026-101754/): Denial of service in MySQL Cluster (medium 4.4) - [CVE-2026-101753](https://insights.sbomify.com/CVE-2026-101753/): Denial of service in MySQL Cluster (medium 4.4) - [CVE-2026-101752](https://insights.sbomify.com/CVE-2026-101752/): Denial of service in MySQL Cluster (medium 4.4) - [CVE-2026-101751](https://insights.sbomify.com/CVE-2026-101751/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101750](https://insights.sbomify.com/CVE-2026-101750/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-10175](https://insights.sbomify.com/CVE-2026-10175/): Aider-AI Aider Architect Mode auth.py editor_coder.run code injection (medium 5.3) - [CVE-2026-101749](https://insights.sbomify.com/CVE-2026-101749/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101748](https://insights.sbomify.com/CVE-2026-101748/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101747](https://insights.sbomify.com/CVE-2026-101747/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101746](https://insights.sbomify.com/CVE-2026-101746/): Missing authorization in Oracle Agile Engineering Data Management (high 7.3) - [CVE-2026-101745](https://insights.sbomify.com/CVE-2026-101745/): Missing authorization in Oracle Agile Engineering Data Management (medium 5.3) - [CVE-2026-101744](https://insights.sbomify.com/CVE-2026-101744/): Missing authorization in Oracle Agile Engineering Data Management (high 8.4) - [CVE-2026-101743](https://insights.sbomify.com/CVE-2026-101743/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101742](https://insights.sbomify.com/CVE-2026-101742/): Missing authorization in Oracle Applications Manager (high 8.8) - [CVE-2026-101741](https://insights.sbomify.com/CVE-2026-101741/): Missing authorization in Oracle Agile Engineering Data Management (medium 5.3) - [CVE-2026-101740](https://insights.sbomify.com/CVE-2026-101740/): Missing authorization in Oracle Agile Engineering Data Management (low 3.6) - [CVE-2026-10174](https://insights.sbomify.com/CVE-2026-10174/): Aider-AI Aider Pre-commit Hook args.py protection mechanism (medium 5.3) - [CVE-2026-101739](https://insights.sbomify.com/CVE-2026-101739/): Missing authorization in Oracle Agile Engineering Data Management (high 7.0) - [CVE-2026-101738](https://insights.sbomify.com/CVE-2026-101738/): Missing authorization in Oracle Agile Engineering Data Management (low 3.1) - [CVE-2026-101737](https://insights.sbomify.com/CVE-2026-101737/): Denial of service in Oracle Java SE (medium 5.9) - [CVE-2026-101736](https://insights.sbomify.com/CVE-2026-101736/): Missing authorization in Primavera Unifier (high 7.4) - [CVE-2026-101735](https://insights.sbomify.com/CVE-2026-101735/): Missing authorization in Primavera Unifier (high 7.1) - [CVE-2026-101734](https://insights.sbomify.com/CVE-2026-101734/): Missing authorization in Oracle Agile Engineering Data Management (medium 4.3) - [CVE-2026-101733](https://insights.sbomify.com/CVE-2026-101733/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101732](https://insights.sbomify.com/CVE-2026-101732/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101731](https://insights.sbomify.com/CVE-2026-101731/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101730](https://insights.sbomify.com/CVE-2026-101730/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-10173](https://insights.sbomify.com/CVE-2026-10173/): Orthanc Explorer 2 URL StudyList.vue cross site scripting (medium 5.3) - [CVE-2026-101729](https://insights.sbomify.com/CVE-2026-101729/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101728](https://insights.sbomify.com/CVE-2026-101728/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101727](https://insights.sbomify.com/CVE-2026-101727/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101726](https://insights.sbomify.com/CVE-2026-101726/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101725](https://insights.sbomify.com/CVE-2026-101725/): Denial of service in MySQL Cluster (medium 6.5) - [CVE-2026-101724](https://insights.sbomify.com/CVE-2026-101724/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101723](https://insights.sbomify.com/CVE-2026-101723/): Other in Oracle Agile PLM MCAD Connector (medium 6.7) - [CVE-2026-101722](https://insights.sbomify.com/CVE-2026-101722/): Missing authorization in MySQL Cluster (medium 4.3) - [CVE-2026-101721](https://insights.sbomify.com/CVE-2026-101721/): Denial of service in MySQL Cluster (medium 4.9) - [CVE-2026-101720](https://insights.sbomify.com/CVE-2026-101720/): Other in MySQL Cluster (medium 5.3) - [CVE-2026-10172](https://insights.sbomify.com/CVE-2026-10172/): Bdtask Multi-Store Inventory Management System Component Module.php upload unrestricted upload (medium 5.3) - [CVE-2026-101719](https://insights.sbomify.com/CVE-2026-101719/): Missing authorization in Oracle Agile PLM (high 7.5) - [CVE-2026-101718](https://insights.sbomify.com/CVE-2026-101718/): Missing authorization in Oracle Agile PLM (medium 6.5) - [CVE-2026-101717](https://insights.sbomify.com/CVE-2026-101717/): Missing authorization in Oracle Agile PLM (medium 6.4) - [CVE-2026-101716](https://insights.sbomify.com/CVE-2026-101716/): Missing authorization in Oracle Agile PLM (medium 5.3) - [CVE-2026-101715](https://insights.sbomify.com/CVE-2026-101715/): Missing authorization in Oracle Agile PLM (medium 6.5) - [CVE-2026-101714](https://insights.sbomify.com/CVE-2026-101714/): Missing authorization in Oracle Agile PLM (medium 6.1) - [CVE-2026-101713](https://insights.sbomify.com/CVE-2026-101713/): Missing authorization in Oracle Agile PLM (medium 5.4) - [CVE-2026-101712](https://insights.sbomify.com/CVE-2026-101712/): Missing authorization in Oracle Payroll (high 7.5) - [CVE-2026-101711](https://insights.sbomify.com/CVE-2026-101711/): Missing authorization in Oracle Payroll (medium 6.6) - [CVE-2026-101710](https://insights.sbomify.com/CVE-2026-101710/): Missing authorization in Oracle Payroll (medium 6.8) - [CVE-2026-10171](https://insights.sbomify.com/CVE-2026-10171/): code-projects Online Music Site AdminUpdateAlbum.php sql injection (medium 5.1) - [CVE-2026-101709](https://insights.sbomify.com/CVE-2026-101709/): Missing authorization in Oracle Payroll (medium 5.4) - [CVE-2026-101708](https://insights.sbomify.com/CVE-2026-101708/): Missing authorization in Oracle Payroll (high 7.5) - [CVE-2026-101707](https://insights.sbomify.com/CVE-2026-101707/): Missing authorization in Oracle Concurrent Processing (high 7.4) - [CVE-2026-101706](https://insights.sbomify.com/CVE-2026-101706/): Missing authorization in Oracle One-to-One Fulfillment (medium 6.5) - [CVE-2026-101705](https://insights.sbomify.com/CVE-2026-101705/): Missing authorization in Oracle Common Applications (high 7.7) - [CVE-2026-101704](https://insights.sbomify.com/CVE-2026-101704/): Other in Oracle Concurrent Processing (high 8.2) - [CVE-2026-101703](https://insights.sbomify.com/CVE-2026-101703/): Missing authorization in Pasta (high 7.5) - [CVE-2026-101701](https://insights.sbomify.com/CVE-2026-101701/): Missing authorization in Oracle Concurrent Processing (medium 6.0) - [CVE-2026-101700](https://insights.sbomify.com/CVE-2026-101700/): Missing authorization in Oracle Application Object Library (high 8.1) - [CVE-2026-10170](https://insights.sbomify.com/CVE-2026-10170/): code-projects Visitor Management System phone_0.php sql injection (medium 5.3) - [CVE-2026-101699](https://insights.sbomify.com/CVE-2026-101699/): Missing authorization in Oracle One-to-One Fulfillment (high 7.5) - [CVE-2026-101698](https://insights.sbomify.com/CVE-2026-101698/): Missing authorization in Oracle One-to-One Fulfillment (high 7.5) - [CVE-2026-101697](https://insights.sbomify.com/CVE-2026-101697/): Missing authorization in Oracle One-to-One Fulfillment (medium 6.1) - [CVE-2026-101696](https://insights.sbomify.com/CVE-2026-101696/): Missing authorization in Oracle Application Object Library (medium 6.8) - [CVE-2026-101695](https://insights.sbomify.com/CVE-2026-101695/): Missing authorization in Oracle One-to-One Fulfillment (medium 6.8) - [CVE-2026-101694](https://insights.sbomify.com/CVE-2026-101694/): Missing authorization in Oracle Mobile Field Service (high 7.2) - [CVE-2026-101692](https://insights.sbomify.com/CVE-2026-101692/): Missing authorization in Oracle Mobile Field Service (high 8.8) - [CVE-2026-101690](https://insights.sbomify.com/CVE-2026-101690/): Missing authorization in Oracle E-Business Suite Integrated SOA Gateway (high 8.2) --- From sbomify Insights: https://insights.sbomify.com/years/2026/page/992/