2026 CVE Vulnerabilities
42,999 CVEs published in 2026.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-73432 | MEDIUM | 5.1 | — | Aug 12, 2026 | Vulnerability-Lookup contains a server-side request forgery (SSRF) vulnerability in the remote-instance synchronization ... |
| CVE-2026-73405 | MEDIUM | 5.3 | — | Aug 12, 2026 | An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to S... |
| CVE-2026-73374 | MEDIUM | 6.1 | — | Aug 12, 2026 | A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the render_tag_badges Jinja filter ... |
| CVE-2026-73290 | MEDIUM | 5.3 | — | Aug 12, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, an anonymous ListObjectVersions req... |
| CVE-2026-73288 | MEDIUM | 6.1 | — | Aug 12, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crat... |
| CVE-2026-73287 | MEDIUM | 5.4 | — | Aug 12, 2026 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS handles FTPS MKD in FtpsDriv... |
| CVE-2026-73265 | MEDIUM | 6.5 | — | Aug 12, 2026 | RustFS is a distributed object storage system built in Rust. RustFS authorizes explicit versionId reads in GetObject, Co... |
| CVE-2026-73262 | MEDIUM | 5.4 | — | Aug 12, 2026 | Prowler is a cloud security platform. Prior to 5.37.0, Prowler's HTML output formatter in prowler/lib/outputs/html/html.... |
| CVE-2026-68760 | MEDIUM | 5.3 | — | Aug 12, 2026 | An unauthenticated user may bypass authentication under specific cache conditions. |
| CVE-2026-68756 | MEDIUM | 6.6 | — | Aug 12, 2026 | A party with write access to stored session data may affect JFrog Artifactory under specific conditions. |
| CVE-2026-68755 | MEDIUM | 4.3 | — | Aug 12, 2026 | A bundle writer may create misleading release promotion information under specific conditions. |
| CVE-2026-68754 | MEDIUM | 6.5 | — | Aug 12, 2026 | A repository publisher without delete permission may modify protected package content under specific conditions. |
| CVE-2026-68753 | MEDIUM | 5.3 | — | Aug 12, 2026 | An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in... |
| CVE-2026-67287 | MEDIUM | 6.3 | — | Aug 12, 2026 | Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated att... |
| CVE-2026-67286 | MEDIUM | 6.3 | — | Aug 12, 2026 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8... |
| CVE-2026-66382 | MEDIUM | 4.3 | — | Aug 12, 2026 | An authenticated user may write files outside the intended Artifactory work directory under specific conditions. |
| CVE-2026-66381 | MEDIUM | 5.3 | — | Aug 12, 2026 | A repository reader with cache-deploy permission may access content outside a configured upstream path under specific co... |
| CVE-2026-66380 | MEDIUM | 4.3 | — | Aug 12, 2026 | An authenticated user without repository read permission may access private OCI referrer metadata under specific conditi... |
| CVE-2026-66379 | MEDIUM | 4.3 | — | Aug 12, 2026 | An authenticated user may view private Puppet module metadata without repository read access. |
| CVE-2026-66378 | MEDIUM | 4.3 | — | Aug 12, 2026 | An authenticated user without repository read permission may access private NuGet metadata under specific conditions. |
| CVE-2026-66377 | MEDIUM | 5.3 | — | Aug 12, 2026 | An unauthenticated user may access restricted repository information under specific conditions. |
| CVE-2026-66376 | MEDIUM | 4.2 | — | Aug 12, 2026 | Credentials for a deleted user may remain valid for a short period under specific conditions. |
| CVE-2026-49349 | MEDIUM | 6.8 | — | Aug 12, 2026 | regclient is a Docker and OCI Registry Client in Go. Prior to version 0.11.5, credentials for a registry may be inadvert... |
| CVE-2026-47234 | MEDIUM | 4.4 | — | Aug 12, 2026 | Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::se... |
| CVE-2026-47233 | MEDIUM | 6.5 | — | Aug 12, 2026 | Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `... |
Check if your code is affected by 2026 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now